Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
File:                     Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json)
Hash identifier:          /h/zzI85d6cp6wpvhpyvzDVR7xKHnBpQrFaTNC6Ax2A=
Subject key identifier:   EC:0C:EC:99:B3:C9:95:F4:D3:75:DC:25:CA:B9:E1:83:30:BB:B4:5A
Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Certificate issuer:       /CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Certificate serial:       01A11A199E30BC7AC6DAA0969C8F89A1F0DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
Manifest number:          07AA
Signing time:             Thu 08 Oct 2026 06:00:48 +0000
Manifest this update:     Thu 08 Oct 2026 06:00:48 +0000
Manifest next update:     Fri 09 Oct 2026 06:00:48 +0000
Files and hashes:         1: C8KAjAmMo4zHOxPsP5u33kaFWlY.roa (hash: U4UKkIWDo1A35uGyB5LLNTGRRGiNn0SaaQUFdLefZ24=)
                          2: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: jt5u06VXi5FneVz/0c9XNC5qLyX0T13L2a6zFnvTsqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:19:9e:30:bc:7a:c6:da:a0:96:9c:8f:89:a1:f0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
        Validity
            Not Before: Oct  8 06:00:48 2026 GMT
            Not After : Oct  9 06:00:48 2026 GMT
        Subject: CN=ec0cec99b3c995f4d375dc25cab9e18330bbb45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7f:a9:60:36:4c:85:26:6d:c7:40:11:fa:43:
                    3d:f9:2f:bf:ee:0a:30:8d:1e:1c:f5:0f:8f:89:93:
                    80:d7:6e:72:73:85:f6:ee:ed:3f:bc:66:ff:96:c6:
                    d1:7c:a1:1e:39:77:37:fe:a7:a5:2b:0b:01:b9:f3:
                    09:bc:5f:50:c0:50:58:f3:0c:59:19:a9:4a:86:d8:
                    4d:0d:e5:8a:df:82:e7:7a:43:13:01:43:a0:bb:f0:
                    5a:a8:88:8e:3a:bc:f5:54:64:39:ab:74:88:4a:05:
                    c7:78:20:d5:69:e9:c0:17:e1:45:12:0e:2b:aa:77:
                    04:74:d8:cc:a2:3b:44:d2:fe:df:89:ff:58:e7:8e:
                    6a:d9:f8:2e:61:95:1a:03:76:37:d8:1e:8c:fe:19:
                    49:e6:1c:a4:a4:e5:1c:16:b4:b7:20:a9:92:f2:96:
                    60:43:c9:be:ca:3a:22:7d:c5:91:ac:6f:5a:53:5b:
                    44:ca:8e:6d:5f:da:ad:e6:61:24:7e:f4:e3:4e:0a:
                    7f:04:42:e2:bc:9f:52:ed:c2:fd:cb:5e:ef:6e:1f:
                    90:56:2c:40:93:17:2b:33:ba:59:50:f4:ea:6e:ea:
                    87:49:68:1b:60:ef:79:cb:15:09:5e:45:53:4a:44:
                    88:46:e2:35:13:98:e7:3a:da:8d:18:ef:d4:a1:7a:
                    b8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0C:EC:99:B3:C9:95:F4:D3:75:DC:25:CA:B9:E1:83:30:BB:B4:5A
            X509v3 Authority Key Identifier:
                keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:db:4f:33:fc:53:67:bd:e8:ae:bf:3d:6c:58:96:20:d3:4e:
         a9:9d:78:df:d7:e1:bb:d6:0c:d7:f6:5a:8a:74:7a:7b:32:bf:
         fb:a2:59:2a:34:1e:34:63:06:1c:0d:55:1f:55:99:fe:a8:a8:
         e5:d4:c9:42:31:5a:46:70:7d:5a:7e:fa:56:ee:c0:84:6d:14:
         6d:37:43:ef:7c:8a:27:2c:ff:8f:80:8b:48:30:7b:1a:2d:f4:
         8d:1b:26:03:39:d6:1e:3f:10:0f:5d:cd:fb:63:2c:72:fa:56:
         17:f6:6b:c1:11:31:0a:4d:4a:5e:c1:2a:be:61:8c:a9:46:82:
         9e:c6:d7:4b:7d:53:4d:bd:23:c5:d0:d8:d5:15:c7:40:b6:ab:
         9b:47:d6:1b:cd:b1:50:60:78:9e:fe:b9:d9:0e:9a:6d:f9:45:
         ae:1f:c3:b5:69:ee:90:d6:92:b4:41:c2:d5:ec:0b:67:4e:dd:
         0e:3a:c4:19:d7:fc:1f:0e:b9:e5:29:a6:54:7f:96:2f:90:46:
         15:7a:d3:9e:d9:8a:7c:24:98:85:a6:86:af:c2:f9:39:74:da:
         d9:46:c6:6d:66:44:f2:10:15:df:00:7c:44:af:8e:74:4a:08:
         34:bf:87:78:f3:8e:3b:92:f9:06:4e:a1:44:dc:18:1c:5e:6a:
         54:54:ff:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:44:22 2026 by rpki-client