Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File:                     _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier:          Y2ShFvIlOoMKlQDIWKexHRzYeDZRp0BQIoQYDe7coGs=
Subject key identifier:   80:AF:0A:61:C0:FC:10:C7:74:F8:7E:63:4E:93:66:47:7C:B5:6B:70
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer:       /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial:       01A1347E922FE68893EDCBD752D264586012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number:          1A31
Signing time:             Tue 13 Oct 2026 09:01:12 +0000
Manifest this update:     Tue 13 Oct 2026 09:01:12 +0000
Manifest next update:     Wed 14 Oct 2026 09:01:12 +0000
Files and hashes:         1: DAx6kSb1RhGpO9yrUuteRaJtlP0.roa (hash: trEbTAVUulhDK7QkaPxzXefg5Sh7SP/MDtVzjJ/I6JU=)
                          2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: 20nWyXB5wCFfPVez3opLfucLlhTJ29t/jnVdw6SiGyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 09:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:7e:92:2f:e6:88:93:ed:cb:d7:52:d2:64:58:60:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
        Validity
            Not Before: Oct 13 09:01:12 2026 GMT
            Not After : Oct 14 09:01:12 2026 GMT
        Subject: CN=80af0a61c0fc10c774f87e634e9366477cb56b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:b7:4c:fb:0b:35:ae:75:23:53:99:ad:86:
                    94:7d:c0:c3:dd:09:31:50:29:d1:22:d3:04:12:18:
                    53:5a:dc:c8:70:d8:00:fd:30:5b:f3:63:ba:f4:e3:
                    9d:df:35:81:d7:99:69:e2:61:95:2b:62:67:e2:86:
                    2b:d0:87:bc:17:e3:77:f7:f8:fb:02:49:a0:e7:72:
                    22:b9:61:20:75:5f:51:b0:86:c8:ea:b3:4c:62:37:
                    91:8b:7f:8c:46:5e:23:fa:de:16:a4:79:b9:d7:6d:
                    e2:2a:20:73:8e:08:90:91:22:86:ca:48:18:ea:30:
                    2f:ac:06:ad:52:04:1b:73:7c:32:4a:7d:fb:8e:92:
                    ff:11:20:8c:d9:0c:51:67:62:d4:8e:b8:98:65:e0:
                    ec:6b:d0:99:6c:c0:40:69:e0:ef:08:dd:cc:1c:50:
                    43:19:f5:8b:5a:48:ca:6d:1f:49:ca:87:c6:65:ec:
                    f1:d3:bd:3f:3e:66:2c:e6:70:44:a6:c8:55:6c:a0:
                    2c:ca:bf:65:21:04:58:df:c2:51:97:c8:ce:55:bd:
                    19:00:7c:ef:0f:eb:7f:e3:e0:d0:f2:6a:0d:f4:24:
                    a9:5c:e2:96:02:f1:e4:1e:f2:15:34:27:05:8b:69:
                    5f:cc:16:95:a6:b9:5d:43:4c:a8:bd:3a:1e:d6:8a:
                    88:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AF:0A:61:C0:FC:10:C7:74:F8:7E:63:4E:93:66:47:7C:B5:6B:70
            X509v3 Authority Key Identifier:
                keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a5:d1:ec:01:f3:bc:42:fa:e2:02:a4:f5:bf:25:88:31:21:
         9f:47:ab:f1:b0:36:b1:9c:13:5b:f0:e1:e3:d1:8b:f8:5c:39:
         bd:fa:dc:8c:7c:01:60:c3:c3:4b:e2:ac:c5:88:54:ae:aa:03:
         d5:26:ac:d7:ae:14:90:73:d4:ca:3b:26:f0:b6:0a:18:d3:b6:
         bc:0e:94:17:83:1b:e7:3b:2d:e0:7e:70:c7:4f:e1:a3:e8:6d:
         0a:d9:a3:f4:71:91:a0:8b:c5:19:3c:ce:57:f8:2d:25:9b:f3:
         5a:0e:27:1c:26:52:f1:76:a4:1c:6c:e9:d3:ca:ef:14:3b:39:
         2e:f7:35:07:d6:88:28:f8:60:82:b0:01:a1:38:a5:5a:fc:aa:
         9a:6e:86:ca:b0:e2:ac:11:aa:3b:3a:a5:2f:e3:fe:c6:c0:42:
         42:06:f5:75:72:e8:3e:af:48:70:44:b9:37:a9:da:14:24:88:
         f5:12:ad:fc:81:e2:c1:65:ad:fb:27:51:bd:7b:2c:31:40:e8:
         ae:e8:16:9e:aa:58:65:29:21:1f:89:16:3b:95:12:36:4a:27:
         f4:65:4b:3a:54:90:00:29:17:e2:be:f3:64:98:8a:41:a6:05:
         40:d4:70:c4:5a:1e:23:10:30:ad:32:ba:81:f6:65:b1:6d:9e:
         04:fa:6f:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE0fpIv5oiT7cvXUtJkWGASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZTQxNDYwMThhNzYzYTQyYTUxNTU2MzU5YmYxNWJmODVl
MzlhYzYwHhcNMjYxMDEzMDkwMTEyWhcNMjYxMDE0MDkwMTEyWjAzMTEwLwYDVQQD
Eyg4MGFmMGE2MWMwZmMxMGM3NzRmODdlNjM0ZTkzNjY0NzdjYjU2YjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRy3TPsLNa51I1OZrYaUfcDD3Qkx
UCnRItMEEhhTWtzIcNgA/TBb82O69OOd3zWB15lp4mGVK2Jn4oYr0Ie8F+N39/j7
Akmg53IiuWEgdV9RsIbI6rNMYjeRi3+MRl4j+t4WpHm5123iKiBzjgiQkSKGykgY
6jAvrAatUgQbc3wySn37jpL/ESCM2QxRZ2LUjriYZeDsa9CZbMBAaeDvCN3MHFBD
GfWLWkjKbR9JyofGZezx070/PmYs5nBEpshVbKAsyr9lIQRY38JRl8jOVb0ZAHzv
D+t/4+DQ8moN9CSpXOKWAvHkHvIVNCcFi2lfzBaVprldQ0yovToe1oqIKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICvCmHA/BDHdPh+Y06TZkd8tWtwMB8GA1UdIwQY
MBaAFP/kFGAYp2OkKlFVY1m/Fb+F45rGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMt
YTY1NjA1OGM1MzFmLzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMtYTY1NjA1OGM1MzFm
LzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6XR7AHz
vEL64gKk9b8liDEhn0er8bA2sZwTW/Dh49GL+Fw5vfrcjHwBYMPDS+KsxYhUrqoD
1Sas164UkHPUyjsm8LYKGNO2vA6UF4Mb5zst4H5wx0/ho+htCtmj9HGRoIvFGTzO
V/gtJZvzWg4nHCZS8XakHGzp08rvFDs5Lvc1B9aIKPhggrABoTilWvyqmm6GyrDi
rBGqOzqlL+P+xsBCQgb1dXLoPq9IcES5N6naFCSI9RKt/IHiwWWt+ydRvXssMUDo
rugWnqpYZSkhH4kWO5USNkon9GVLOlSQACkX4r7zZJiKQaYFQNRwxFoeIxAwrTK6
gfZlsW2eBPpvUA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 21:19:02 2026 by rpki-client