Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft
File:                     QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft (raw, json)
Hash identifier:          VQBxjbIwx4qVJb2BxPxs+v54LkT30oTBLsVAe1uQZho=
Subject key identifier:   5B:BE:00:9F:FD:05:F7:BA:87:64:20:55:4E:64:D0:1C:9F:E9:A8:7D
Authority key identifier: 41:B8:8E:42:F2:88:36:DF:48:31:0D:DA:05:63:64:57:FA:3F:70:DB
Certificate issuer:       /CN=41b88e42f28836df48310dda05636457fa3f70db
Certificate serial:       01A111BB676D068EC5F37740A6AB41B9B5B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft
Manifest number:          0107
Signing time:             Tue 06 Oct 2026 15:00:56 +0000
Manifest this update:     Tue 06 Oct 2026 15:00:56 +0000
Manifest next update:     Wed 07 Oct 2026 15:00:56 +0000
Files and hashes:         1: QOOZOBByVqkZ1q-PE7NPKaD3qjM.roa (hash: j3zyeDdIrn6hRAovoXAWbgDk2QQtVM5UJCCkBnNNH2c=)
                          2: QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl (hash: UDjd0qQLlVPPlSzIghrtLDJ+aJwL8/iR4s44a1RprqQ=)
                          3: YLCy61Ou1zu1s3hFCdXrN8zxFx8.roa (hash: C5m7c8v9LmMLSFllgUHl58+da2eRITwPf82h4xo+2Hg=)
                          4: _IZwkSjVpsGYUCpsT_3H3DGbcvE.roa (hash: XM2CFOnMNjMebcmabtVzVZNIRk0m9XFh6SHcd/OBs2c=)
                          5: axX5r8eaQye8To66RIedWeq-294.roa (hash: fUIngIaGdB7VvY50561K9uaMvhKcfZcXxu4SnSzFzxk=)
                          6: t_CLdGRtuv21b3am-0AwhPDoKdE.roa (hash: GUnrReq5hn+z9h3wrQvoEHhII45JvrCuAZjVIFDFnVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:bb:67:6d:06:8e:c5:f3:77:40:a6:ab:41:b9:b5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b88e42f28836df48310dda05636457fa3f70db
        Validity
            Not Before: Oct  6 15:00:56 2026 GMT
            Not After : Oct  7 15:00:56 2026 GMT
        Subject: CN=5bbe009ffd05f7ba876420554e64d01c9fe9a87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:75:e4:d2:e5:de:f0:c9:8a:77:99:93:d7:8f:
                    88:8f:dc:c2:53:24:50:9d:be:7c:13:a5:dd:f2:5c:
                    f3:5f:8d:d1:22:cd:8e:88:7c:d2:9c:e1:b3:8e:13:
                    28:41:98:c5:2d:de:ee:c5:83:6b:1a:3c:1c:8b:cd:
                    52:96:d2:c5:f8:8f:12:c3:43:d5:42:06:2a:f6:89:
                    2d:4a:f4:6a:79:ea:36:f9:6e:d1:8a:ba:44:a9:42:
                    eb:25:98:f8:6b:51:53:99:8e:db:1e:ec:60:3a:2a:
                    45:61:57:be:1f:c9:a7:6f:c5:8e:e9:cc:2c:14:2b:
                    c2:6a:ed:97:3d:2c:3b:ba:76:85:4e:66:57:84:91:
                    78:e8:39:eb:c1:ea:ab:63:db:50:d0:af:23:6b:ee:
                    fe:6d:02:5e:d8:06:c3:b1:06:6c:3c:7e:03:74:81:
                    8d:d0:98:71:a3:3a:ce:30:7d:95:b5:30:c2:2d:f5:
                    4a:44:f8:cd:ef:9e:e1:ba:7a:80:fc:ef:72:2e:fa:
                    08:b7:96:4b:eb:69:7a:50:a8:a9:98:e9:d5:19:7e:
                    0b:53:3f:d7:9a:f7:d5:c3:ba:e7:49:c5:84:ac:e2:
                    2a:97:47:f0:26:f5:af:ef:9f:9b:fb:e1:62:0e:df:
                    1f:be:9e:a3:67:e6:c3:59:36:01:23:19:c3:f2:e9:
                    0f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BE:00:9F:FD:05:F7:BA:87:64:20:55:4E:64:D0:1C:9F:E9:A8:7D
            X509v3 Authority Key Identifier:
                keyid:41:B8:8E:42:F2:88:36:DF:48:31:0D:DA:05:63:64:57:FA:3F:70:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:40:ba:23:08:0f:e6:02:07:f5:2d:59:ad:e0:2d:62:89:f0:
         be:10:43:30:3a:88:7d:6b:c0:90:92:a8:9e:75:40:6f:8c:27:
         cc:99:22:b1:23:79:b1:e6:34:68:11:2c:ec:a0:38:43:e2:b8:
         50:7e:df:aa:01:3d:8f:45:9e:ff:77:c8:2f:fd:78:bd:e4:93:
         2f:f6:12:88:04:0f:02:56:37:a6:75:fc:a5:90:e8:8c:80:fb:
         94:16:9e:38:8d:e7:b2:0c:96:23:d4:04:29:be:85:57:61:6a:
         7a:a5:ab:e6:b0:33:56:e7:b7:ad:a5:93:2d:9e:8e:ba:3e:f0:
         88:41:1d:81:47:0a:e4:31:ff:96:94:32:6b:e8:09:ef:df:34:
         da:46:85:2d:fe:77:7e:7d:d1:8b:84:37:30:0b:c5:5f:75:92:
         da:93:52:00:d9:00:33:c6:2d:5c:57:20:37:c8:08:01:01:d6:
         14:b0:2c:b9:6b:73:cf:b9:6e:af:8e:ca:11:f5:66:52:82:cf:
         0e:4e:56:6e:a4:47:a7:b0:d7:c6:19:0f:2a:8d:be:6f:a1:0f:
         91:6b:3c:36:f0:30:76:ec:d9:c2:e9:d9:df:33:d4:36:df:7f:
         08:02:53:92:1e:f2:77:10:19:92:be:74:c4:ac:73:7d:12:8c:
         44:a5:4d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:28:24 2026 by rpki-client