Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
File:                     qBaZpbxkh70vF0nRM_yi43_U2og.mft (raw, json)
Hash identifier:          plAAduqMCCzpoTgq6MXOzVnojewdX6/sBBXSbWbWjYs=
Subject key identifier:   3B:CA:D6:01:A5:B8:44:90:1C:FA:E4:BE:7A:2E:E1:9A:80:64:DA:D7
Authority key identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
Certificate issuer:       /CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Certificate serial:       01A127310E266262470C45864A7461216463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
Manifest number:          117F
Signing time:             Sat 10 Oct 2026 19:01:28 +0000
Manifest this update:     Sat 10 Oct 2026 19:01:28 +0000
Manifest next update:     Sun 11 Oct 2026 19:01:28 +0000
Files and hashes:         1: 0rfYrVviZUVYPptqvM07XCjMZN8.roa (hash: NsAvwSlgjtFhEFUQcFrnr4l17cyyPI73mz93IQlKjBw=)
                          2: qBaZpbxkh70vF0nRM_yi43_U2og.crl (hash: KgOVa9I/DjAHnIAQ3hHV+0WO3CmvzSpXCZ2CVqDGlec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:27:31:0e:26:62:62:47:0c:45:86:4a:74:61:21:64:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
        Validity
            Not Before: Oct 10 19:01:28 2026 GMT
            Not After : Oct 11 19:01:28 2026 GMT
        Subject: CN=3bcad601a5b844901cfae4be7a2ee19a8064dad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8d:27:ff:4f:73:f0:34:49:7d:09:20:0b:f4:
                    85:01:1f:3c:d9:bd:98:6b:dd:d5:09:4e:cb:c1:d0:
                    20:d8:fa:85:de:47:73:34:af:13:e8:7c:45:ba:94:
                    66:db:ac:33:c4:b7:11:61:03:58:3f:6c:de:db:42:
                    5a:5e:73:d5:3a:9d:11:0b:2b:d5:86:05:4c:1b:89:
                    05:87:6d:b8:fe:95:51:b6:ac:38:a3:65:b2:86:83:
                    0f:46:d0:5e:65:b0:0c:f3:93:9e:1b:d8:37:13:8d:
                    03:d3:68:93:09:10:2a:f5:bb:d7:33:30:6c:93:5f:
                    99:51:87:6e:48:4e:2f:cf:87:ab:0f:3d:30:8c:5d:
                    49:43:9d:c0:e8:2b:a7:d4:90:d6:70:59:60:5f:5a:
                    74:4e:67:fb:5e:6d:b9:83:62:39:05:4f:1f:d0:7c:
                    55:1e:4d:8d:91:89:35:d4:a1:3f:ca:78:ae:43:d0:
                    17:d1:e7:9a:f0:f8:0f:d6:02:51:e8:19:c6:db:ab:
                    f1:8d:b7:2a:7f:1c:e0:1c:e4:5f:b0:b9:4f:0e:53:
                    05:42:1e:21:13:76:e9:cf:1f:8e:40:2d:52:94:50:
                    21:aa:8a:85:3b:00:1b:4f:ba:09:42:18:6f:4a:0e:
                    5b:ac:f1:d1:96:b3:f0:39:31:a9:a1:d9:84:68:6a:
                    cf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CA:D6:01:A5:B8:44:90:1C:FA:E4:BE:7A:2E:E1:9A:80:64:DA:D7
            X509v3 Authority Key Identifier:
                keyid:A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:82:8b:21:2a:20:27:4c:3a:51:c2:33:35:95:a6:a1:ca:17:
         65:88:6f:ea:99:61:25:d3:55:20:b1:09:23:cc:4d:e3:d7:f4:
         27:b1:94:73:5c:cb:51:1f:20:5f:0e:34:b7:60:c6:98:c7:21:
         4f:bd:00:6d:03:b8:f9:c7:60:0e:7f:10:7e:29:bb:e2:c0:62:
         9b:d3:8c:ce:8b:10:2c:a8:30:f6:be:08:3c:d8:b3:8f:10:2e:
         93:de:af:fe:5c:a0:8e:82:87:5b:fa:dd:52:b4:5a:48:95:ff:
         3e:a4:32:45:bd:b2:c8:08:a8:43:70:6d:73:80:4b:33:57:f6:
         18:57:61:7e:4b:32:af:f7:b1:68:76:d9:0b:fa:05:5a:cb:e1:
         29:94:0f:7c:b0:8f:82:2f:a0:b4:34:71:c3:cb:4e:76:27:9b:
         97:48:d4:b7:c2:db:be:3d:09:1e:51:22:09:da:33:44:36:18:
         b2:48:a7:69:42:b5:eb:12:ab:29:36:3c:7e:58:12:54:4a:c1:
         25:c8:aa:56:06:93:af:32:01:5b:a0:8b:99:42:39:05:fb:37:
         d2:a0:b1:2e:7b:78:a3:9e:21:81:14:ad:94:9e:fd:0d:e5:c8:
         ee:f2:bc:5d:4a:44:e2:69:93:cc:5d:0e:f0:dd:78:5b:a4:fa:
         ce:da:47:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 20:53:46 2026 by rpki-client