Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File:                     tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier:          +z5YZ2f3wjmfxcAjaufdG5Z0Q07pMQ5h878zS9nQznU=
Subject key identifier:   6F:CB:D0:47:AD:BB:5E:68:C0:3E:B4:A4:84:FE:28:6E:15:08:16:D3
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer:       /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial:       01A1DB38BDF48AFEC3B432C302689208ADF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number:          1AF7
Signing time:             Sat 14 Nov 2026 18:01:31 +0000
Manifest this update:     Sat 14 Nov 2026 18:01:31 +0000
Manifest next update:     Sun 15 Nov 2026 18:01:31 +0000
Files and hashes:         1: 2whxzmDVbfAO3ymvYfT1Br7cjzo.roa (hash: jBvzWSDKzRLptdoSp5Wyo4EetGXs4eXZMTjT2PaKhik=)
                          2: QW73u8rMuH1v1Kv7BEJQbwmdG30.roa (hash: 86pULR+fbjp+HIMXs4j+2SEmIr4Htvw47MfRZHiRzRU=)
                          3: ehZg7NVKRiPcTGHWVyISklSxV_0.roa (hash: Dyhn6Vhbep1Q3HKDE2Bpn72ONwXFiRAQ/djQCOZfQXE=)
                          4: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: kc2+K/QHeTNUCBlpQBFDHLTzwwLHRAC4VLJoQBwan2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 18:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:38:bd:f4:8a:fe:c3:b4:32:c3:02:68:92:08:ad:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
        Validity
            Not Before: Nov 14 18:01:31 2026 GMT
            Not After : Nov 15 18:01:31 2026 GMT
        Subject: CN=6fcbd047adbb5e68c03eb4a484fe286e150816d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:72:be:8f:5b:23:83:5c:d2:af:19:79:48:
                    1e:a3:4f:0b:0e:a1:19:3a:b7:5c:20:be:d1:8d:bf:
                    c2:fa:79:b9:41:ef:15:33:a0:5b:f0:33:90:3e:c2:
                    ca:39:79:c9:78:8b:79:9c:6d:27:cd:23:c4:4b:2b:
                    fc:69:d0:24:8c:04:33:34:43:84:5d:b2:34:06:74:
                    b3:3d:20:09:c7:52:7f:7b:f7:2c:7b:ff:c1:a1:ed:
                    06:16:0e:08:ec:34:4e:9f:1c:b7:c8:f5:2a:d2:c8:
                    8f:18:7a:04:5c:69:25:25:df:e1:cd:5b:1f:73:d3:
                    d8:28:26:71:9a:c2:ec:0f:2e:6f:be:e5:0d:eb:8a:
                    63:2e:dd:f7:c9:a1:8e:78:54:47:80:3a:81:e7:ea:
                    f0:95:e4:90:ec:a1:7c:73:b5:75:25:ca:e1:e8:8d:
                    8f:cc:de:bc:f1:2f:13:0f:86:bc:f5:19:98:2e:7d:
                    a0:38:5e:75:2e:84:f0:7e:85:02:a3:5d:c4:da:dd:
                    9c:85:03:a1:34:28:22:a1:c8:bf:e8:ed:13:80:b5:
                    36:c9:ed:b1:73:97:71:84:84:72:e5:23:8a:dd:91:
                    67:7e:0c:51:d3:7d:cc:07:71:67:bf:bf:a5:4e:63:
                    d9:65:8a:e2:5b:fe:c8:0d:57:6e:0a:a5:fa:a5:d2:
                    63:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CB:D0:47:AD:BB:5E:68:C0:3E:B4:A4:84:FE:28:6E:15:08:16:D3
            X509v3 Authority Key Identifier:
                keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:2b:a9:a5:ce:c7:3c:06:55:75:45:b4:b5:dc:50:3e:c8:6f:
         20:da:e5:66:8a:ed:3b:72:03:cb:be:bf:cf:37:ba:7b:75:f6:
         76:23:79:d5:e0:e1:35:37:0b:45:92:4b:06:fe:35:c8:e1:88:
         80:70:3a:c8:8c:23:26:61:84:6b:d9:9d:8e:66:49:95:b1:3d:
         8d:c5:ea:e3:9f:78:c4:6a:dd:3a:07:6e:49:d3:76:1e:85:b3:
         50:26:30:b3:84:41:64:0d:0d:4d:0f:0c:9a:bc:a1:a2:26:c6:
         cf:8f:0d:82:e5:c5:83:f8:37:16:61:fa:18:87:9f:b6:de:65:
         6f:6f:4b:2c:e3:5a:31:72:d2:4c:f2:b1:4a:1a:30:e6:33:94:
         20:7b:9c:6d:ed:1c:42:8d:ee:cc:b2:a8:c8:17:95:2d:d7:2c:
         7e:d5:ec:da:46:3c:f9:5b:f4:17:7e:c7:48:53:e1:0c:ca:1d:
         dd:5f:f1:1a:65:2a:9a:8c:f1:cd:7b:1a:4f:f4:bd:b8:de:92:
         2d:e9:30:e0:74:d2:48:ff:c3:2d:bd:d9:34:d8:1d:3c:31:b7:
         7c:d4:13:87:b3:7f:24:b1:73:a0:da:64:2d:9e:56:9b:8f:f2:
         78:6f:f6:8e:00:58:94:0f:d2:cb:87:ea:5c:6a:72:d3:23:73:
         a0:37:71:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:58:20 2026 by rpki-client