Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
File:                     Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft (raw, json)
Hash identifier:          Obfw1TGEZjxs+5qQGIYKqgJ+xD1EtK7T0LRGqdUNhKY=
Subject key identifier:   05:FA:4F:70:24:14:5D:60:8E:4D:90:89:42:80:A8:3D:E6:A9:2A:68
Authority key identifier: 42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12
Certificate issuer:       /CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
Certificate serial:       01A0C3A05ADDF1BF0CBC3EE193A50D5D305F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
Manifest number:          0D32
Signing time:             Mon 21 Sep 2026 11:01:01 +0000
Manifest this update:     Mon 21 Sep 2026 11:01:01 +0000
Manifest next update:     Tue 22 Sep 2026 11:01:01 +0000
Files and hashes:         1: KCr3XPDeTlWKO-bPI6_H_Cx1WhQ.roa (hash: c/VQLHXOcWoXXd7hiKFZggUX28ZnnohkNilU13VWMV0=)
                          2: Pto6FquyBgXB9mpBfegUiyI0BQI.asa (hash: LwajpKgENBPuuXSnNqC2HHRSrry8yjmbPcDy2aqHuWk=)
                          3: Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl (hash: dj/uADjRoDaRcPUbQ557MHZUh6VmhWiSZ299Qnd1gW4=)
                          4: nP5QqrRlk9ayuFdWmJ8gpHg12-8.roa (hash: cmDZ0ANMnR/j0RTklp+THy4q0G8bAX7M0+UsqPCsIKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:a0:5a:dd:f1:bf:0c:bc:3e:e1:93:a5:0d:5d:30:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42e7fc6b74b2b8632811fdfd816d03e939afd712
        Validity
            Not Before: Sep 21 11:01:01 2026 GMT
            Not After : Sep 22 11:01:01 2026 GMT
        Subject: CN=05fa4f7024145d608e4d90894280a83de6a92a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:c1:c2:bf:7d:52:53:df:94:b1:64:8b:56:
                    d5:9a:14:53:5e:f8:90:eb:62:fb:88:5a:c6:ef:41:
                    e2:60:75:58:ea:c9:6c:13:14:54:c8:43:b0:e6:26:
                    5f:d3:dd:4c:eb:71:da:d1:85:0f:f0:90:c6:aa:1d:
                    79:87:2b:b4:05:64:75:27:90:ff:6d:d9:f1:ec:f1:
                    59:62:e1:05:10:1a:0f:8c:29:7d:81:3e:8d:a8:c4:
                    eb:fc:02:e1:7d:4a:64:ef:cc:8f:55:39:96:f8:e8:
                    ec:01:04:f4:a4:c8:97:91:29:46:d4:5b:c4:a2:82:
                    34:0d:ea:b2:ad:01:b5:e5:9e:33:7c:00:52:86:ab:
                    70:ae:c3:75:4c:68:be:06:e2:1c:4b:e2:ee:ca:ef:
                    4a:80:78:69:c9:13:ba:2e:a7:06:0c:d2:36:60:d6:
                    45:ff:e7:57:06:d1:50:a4:5f:61:8f:88:14:b7:35:
                    f2:0b:b3:f1:0c:73:a0:46:ff:b0:65:e9:51:15:80:
                    bf:3c:25:4c:97:41:b5:34:90:e8:66:46:de:67:35:
                    1d:50:ea:9b:63:80:1a:19:a8:64:af:93:97:0e:eb:
                    42:d7:0e:5e:73:39:54:70:1c:db:49:bf:98:d3:81:
                    34:6d:54:44:21:8f:00:77:73:39:39:9e:0a:a1:02:
                    02:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FA:4F:70:24:14:5D:60:8E:4D:90:89:42:80:A8:3D:E6:A9:2A:68
            X509v3 Authority Key Identifier:
                keyid:42:E7:FC:6B:74:B2:B8:63:28:11:FD:FD:81:6D:03:E9:39:AF:D7:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quf8a3SyuGMoEf39gW0D6Tmv1xI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a7cced-da54-4037-bc9a-2f906da2ef20/1/Quf8a3SyuGMoEf39gW0D6Tmv1xI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:e1:a7:ec:cd:5f:b7:fb:49:a1:36:49:ec:ff:73:28:b7:37:
         05:22:32:04:db:f2:a4:76:24:24:ef:c4:e7:76:8f:8b:82:c7:
         29:2f:10:17:67:af:a3:0d:66:ab:56:8e:42:97:b7:a9:85:23:
         ce:ee:33:53:7c:04:b6:53:a9:53:24:52:b1:26:4a:1f:f6:26:
         e5:a5:9f:55:73:c9:dc:a9:aa:e5:d2:d5:cc:81:69:de:70:17:
         28:ca:eb:e6:ca:f5:6b:de:f8:3c:d4:b3:45:57:80:04:6f:d6:
         da:a0:6c:1a:1a:aa:8a:d2:6d:5f:b7:7b:ab:73:31:be:57:86:
         41:0d:a5:b3:57:86:a0:b5:86:c3:ab:5c:2d:7c:3d:eb:09:c2:
         5c:a8:a7:7a:86:6f:5d:2f:9d:af:27:36:f7:84:a7:51:c5:9a:
         78:8f:87:f7:09:9d:15:a1:02:53:97:b1:db:dd:c4:22:90:60:
         63:d6:24:aa:79:d3:e9:4e:4a:47:9c:07:70:6b:db:94:6d:ca:
         e4:40:4c:9a:5d:fd:3f:51:67:1a:32:67:08:48:11:1a:b0:94:
         30:ef:d7:ec:f8:59:fb:12:42:02:13:f6:2a:b1:45:0b:a6:2f:
         f7:d7:cc:4c:5b:c5:dc:10:ce:f1:66:ba:72:c9:e2:2b:79:93:
         42:23:1d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:45:19 2026 by rpki-client