Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
File:                     quRIJx2Froeamr8Vs7ypg0cKE0g.mft (raw, json)
Hash identifier:          ewv3uvP9zam3KgDlsjS2JjZuiEvYLYdmRRuZWYcSTHM=
Subject key identifier:   CC:6D:D8:46:B7:6B:65:CC:42:26:A0:50:56:21:C4:0D:63:F3:9C:08
Authority key identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
Certificate issuer:       /CN=aae448271d85ae879a9abf15b3bca983470a1348
Certificate serial:       01A105B7BE2BB4BA9EE20B21EF89BD08BF4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
Manifest number:          0983
Signing time:             Sun 04 Oct 2026 07:01:30 +0000
Manifest this update:     Sun 04 Oct 2026 07:01:30 +0000
Manifest next update:     Mon 05 Oct 2026 07:01:30 +0000
Files and hashes:         1: abh6_OV0w_23vHurZg2lf03FAWI.roa (hash: WaNrZ48mNKxaEjIRodmrrMT60e4DHtMtypg5HH38Fac=)
                          2: quRIJx2Froeamr8Vs7ypg0cKE0g.crl (hash: 06sGdHfzxKGdWPhBd4GPAx9uMV+ruKrVD3o1I2+BkWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 00:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:b7:be:2b:b4:ba:9e:e2:0b:21:ef:89:bd:08:bf:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae448271d85ae879a9abf15b3bca983470a1348
        Validity
            Not Before: Oct  4 07:01:30 2026 GMT
            Not After : Oct  5 07:01:30 2026 GMT
        Subject: CN=cc6dd846b76b65cc4226a0505621c40d63f39c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2d:71:64:1f:39:aa:1e:a4:08:a3:d4:d0:db:
                    23:17:e3:3c:f9:4e:e9:6b:2c:0a:36:11:f4:05:cc:
                    e3:2c:ce:b4:c9:82:d5:55:f6:2f:53:1c:22:2e:54:
                    f6:1e:9e:e0:90:8f:58:c2:b0:fe:20:98:f4:77:0f:
                    01:4e:2b:a0:cc:35:7b:fa:e7:87:57:8a:9b:10:6b:
                    4d:04:5b:a7:5a:64:30:4b:92:dd:9a:35:ba:ae:b4:
                    6f:2f:a9:2e:17:7d:d1:e8:65:2f:c0:a2:2d:66:80:
                    7e:14:2e:47:13:3e:45:a0:a6:cb:1a:bb:b2:0c:20:
                    fb:86:fa:86:dd:54:7b:26:79:ca:2f:92:a8:5a:89:
                    4e:7c:b2:e0:2c:73:70:01:13:42:57:3a:9c:93:a1:
                    cd:30:1e:59:74:0f:b2:f6:3c:f7:90:64:d0:50:0b:
                    fd:69:c2:86:6a:42:ec:32:06:18:ba:c1:13:90:7f:
                    6f:36:82:7e:14:81:cf:66:88:c8:22:4c:92:99:7d:
                    b8:dc:a7:22:19:94:ec:f0:09:c4:67:3e:c7:70:34:
                    bd:97:39:01:dd:7b:4e:72:1e:4b:e2:c8:24:b8:ea:
                    db:98:19:82:28:68:ba:d3:63:ef:55:1c:77:32:51:
                    b6:ad:58:5c:8a:02:30:06:fb:ba:34:0f:54:e5:2a:
                    19:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6D:D8:46:B7:6B:65:CC:42:26:A0:50:56:21:C4:0D:63:F3:9C:08
            X509v3 Authority Key Identifier:
                keyid:AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:91:5d:f7:df:a5:ac:ae:1a:eb:c5:8a:10:f4:70:97:7e:52:
         4a:fb:02:b2:bc:54:03:a9:48:00:12:0f:bb:5d:60:1d:12:1d:
         6c:51:9b:5b:f9:f2:0b:3c:a2:2f:a8:a3:05:09:ca:a7:8c:53:
         5b:76:54:8b:ba:35:15:a3:de:73:c2:03:71:37:8f:96:cc:89:
         63:5b:46:df:32:7e:31:b6:3f:29:79:5a:20:15:6d:d4:98:0d:
         ee:1f:8a:3e:88:cb:79:4d:e5:9f:ee:ca:7d:78:46:7d:34:4c:
         31:9a:fd:28:53:e7:e1:16:2b:26:3f:04:76:8a:17:6a:d0:85:
         d2:71:b1:5d:97:1a:12:f4:5f:fc:e4:e6:7e:fb:54:c6:e4:a0:
         b8:13:6e:b8:08:36:28:81:1e:79:f2:94:00:71:cf:71:8f:96:
         82:40:40:5b:f6:60:63:94:f5:a9:9f:ae:62:dc:93:f3:09:98:
         b1:18:5f:73:de:a6:e8:78:b3:ef:e3:55:83:81:fc:6d:6e:d3:
         75:52:e3:9e:db:39:cd:9f:cd:e1:5b:cc:25:80:9f:81:81:42:
         b4:ce:84:26:3a:48:13:0d:9c:6f:34:50:81:ff:0a:8a:03:44:
         fe:89:08:6e:fe:3d:19:72:b7:71:6f:51:c1:33:bc:ea:17:f1:
         84:63:fe:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:51:31 2026 by rpki-client