Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
File:                     Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json)
Hash identifier:          YdWTblVNMfVC0U0Eh47nu5+zNy5GlRWagIV3k+m+jug=
Subject key identifier:   94:63:F0:18:D5:46:05:CE:F1:2A:27:3E:51:07:E9:D5:E4:D0:64:E5
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Certificate issuer:       /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial:       01A0BF1EF0E646D73807EF15A5BA925C07D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
Manifest number:          0E4F
Signing time:             Sun 20 Sep 2026 14:01:11 +0000
Manifest this update:     Sun 20 Sep 2026 14:01:11 +0000
Manifest next update:     Mon 21 Sep 2026 14:01:11 +0000
Files and hashes:         1: 4YMSKNsUfIJZYY47MNVzndwjo04.roa (hash: 8oujs3evvYwGVLJbLnpR6K4HU81UoQYW70JF1WusQ7o=)
                          2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: QOgDkvXcibDgUXVzOkdYnUCXaR7vLRNnEs5AqKvWU6I=)
                          3: UdwFpb9t4wz_gCpvl_RLPvAmSOM.roa (hash: narBwfpb8RAcShxX1DzjbkkEFV1ZbklkMy2WAyEvk6Q=)
                          4: ih6xiPv8P5foQSryApqM1wuthiw.roa (hash: 4r9ce2PRoKlZkWqzYoMO2QMeDdt4J/qFvNMaUscc/gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:1e:f0:e6:46:d7:38:07:ef:15:a5:ba:92:5c:07:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
        Validity
            Not Before: Sep 20 14:01:11 2026 GMT
            Not After : Sep 21 14:01:11 2026 GMT
        Subject: CN=9463f018d54605cef12a273e5107e9d5e4d064e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:79:74:92:09:54:84:bf:26:e6:aa:21:63:fe:
                    08:1c:57:b2:f7:f9:b3:09:94:85:4f:e9:ac:9d:3c:
                    87:e2:fb:41:34:f5:73:ef:57:7b:a5:c4:52:a2:a8:
                    64:fb:ca:f6:b0:86:25:95:e1:13:29:f8:fa:76:b9:
                    a5:51:ee:ac:2d:d5:99:03:df:e3:ec:13:ca:8d:cc:
                    e7:91:c4:fd:3f:18:05:68:2a:98:31:46:98:bb:0d:
                    f1:b7:f5:09:69:ed:0c:9a:ac:85:19:35:4e:68:47:
                    22:93:32:4c:a5:ed:58:f9:81:a6:60:db:67:3e:cf:
                    ed:56:77:44:2c:b3:3f:04:4a:47:34:af:66:b7:4c:
                    af:9b:70:f4:3f:d5:6f:7e:ed:44:03:dc:4d:37:f8:
                    a6:12:43:db:0c:60:79:69:2e:73:cb:2a:4c:59:ac:
                    2f:94:ce:30:30:cf:9f:27:78:77:a4:e2:49:f0:2f:
                    74:fc:9a:56:26:fb:dd:af:dc:23:63:e8:d5:ed:b8:
                    5e:48:09:b0:80:88:98:7b:af:91:3e:4d:3d:c9:5a:
                    db:6f:22:14:5a:2e:90:32:55:8c:ef:62:2b:69:98:
                    43:82:45:cf:c6:32:47:ed:bb:09:98:2d:59:7e:a8:
                    f1:a6:e4:05:4c:fe:bc:15:17:e8:0a:4b:b0:10:dc:
                    5c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:63:F0:18:D5:46:05:CE:F1:2A:27:3E:51:07:E9:D5:E4:D0:64:E5
            X509v3 Authority Key Identifier:
                keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:38:69:ce:a1:b5:99:cc:f6:14:50:12:83:7d:e0:f1:d9:3f:
         a8:d9:e0:0f:d2:51:d4:f9:2b:cb:31:62:a3:39:15:55:45:e7:
         78:d5:31:60:2f:20:56:aa:e3:89:d3:dd:48:65:44:21:cd:cf:
         b3:c8:e0:61:61:f6:1a:51:d2:2c:66:f9:e9:13:66:86:45:a5:
         cc:09:0f:94:cc:16:91:f0:e2:2f:11:fe:ba:d5:53:d5:77:6c:
         7f:4f:34:54:7b:fd:e5:03:31:9d:64:a9:a5:f2:62:ca:f6:99:
         f6:e2:6c:bf:e0:62:54:0b:ce:48:8e:f3:f1:95:5b:a1:6f:c4:
         15:13:cc:67:76:6d:6c:30:f0:e7:06:84:1d:5d:83:53:6b:18:
         b5:ae:51:79:ab:59:08:88:52:ca:e7:ce:9e:0d:a1:97:3f:0a:
         8d:a5:c6:6b:69:03:50:ee:44:56:ac:bc:97:95:6b:b4:45:24:
         61:5a:90:31:38:e3:17:a2:ba:c0:82:98:72:df:7c:3a:de:ba:
         10:38:2f:1d:20:1a:6a:c6:e3:8e:2a:7b:58:ce:5e:7f:2e:fe:
         7f:8e:5a:a8:bc:c4:95:3a:3f:19:1c:1e:38:ea:a7:33:0e:0d:
         dd:e7:19:c7:5c:bc:cc:82:91:e6:0b:01:06:c4:2f:15:a1:36:
         e0:2b:80:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:33:43 2026 by rpki-client