Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
File:                     qmeCzXu5IspLxugOeFf0ki9cI8Q.mft (raw, json)
Hash identifier:          pADZnb+l/riHT0qF8V83aVy1V57dA4lWlzc/WjXWtsw=
Subject key identifier:   27:6A:1C:11:87:86:01:FF:8D:C6:8F:32:C7:74:EA:15:2C:D1:37:69
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Certificate issuer:       /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial:       01A0C55763BC93D3E2CBC33DD23048AA87AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
Manifest number:          0475
Signing time:             Mon 21 Sep 2026 19:00:33 +0000
Manifest this update:     Mon 21 Sep 2026 19:00:33 +0000
Manifest next update:     Tue 22 Sep 2026 19:00:33 +0000
Files and hashes:         1: 8KhmWim7fQfJ5AAd7R4MgnmouFA.roa (hash: 8buKD0ZZ/SUyIgK6EsyebC1ig+JGEDdmvljz6uJr5T4=)
                          2: FdPkrQM5wJfWgwRztXidsCzsmxs.roa (hash: kySbmspJSgU7jUiKcEQCWmWkzi3UO7YjG6VncBVDrTg=)
                          3: qmeCzXu5IspLxugOeFf0ki9cI8Q.crl (hash: VoiXXub+O88uQWHRJeu1ymwDQoASz5nD34b2nZOM7jo=)
                          4: sj-hv4O5_Z9peRXGM4t2YS9no0Q.roa (hash: Fng1VhmMN2AdS6GsFKTHTXU6+4yOuUH1ezrFYVymYmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:57:63:bc:93:d3:e2:cb:c3:3d:d2:30:48:aa:87:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
        Validity
            Not Before: Sep 21 19:00:33 2026 GMT
            Not After : Sep 22 19:00:33 2026 GMT
        Subject: CN=276a1c11878601ff8dc68f32c774ea152cd13769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:30:85:4c:63:6d:07:6f:ef:47:72:1b:7c:ea:
                    e8:96:c0:98:29:2d:89:25:4d:a8:94:54:17:11:68:
                    b2:82:34:1b:89:f0:c0:5a:07:d0:6f:5d:a9:8f:fc:
                    44:4e:3e:5d:38:8e:6a:f0:46:4b:47:bc:1c:1c:39:
                    c6:ac:4e:03:e2:51:39:87:22:57:f0:4e:84:15:19:
                    84:c8:1d:72:17:19:32:d0:ea:4c:b7:cc:df:4f:cf:
                    45:af:21:48:3c:ea:f7:e0:83:92:76:ec:fd:f5:de:
                    0d:9b:eb:1c:32:e8:91:42:c3:af:a0:b6:b9:2f:fa:
                    05:08:96:af:91:da:d2:51:3f:a4:70:71:5b:af:23:
                    20:10:46:ab:6d:c3:fb:a1:60:64:e6:11:17:09:64:
                    57:3e:3a:dd:b1:3b:6d:7b:ef:bb:ad:9d:06:31:23:
                    fc:36:c6:9a:44:5d:cc:be:af:e0:4c:1f:90:d6:93:
                    d6:82:89:79:dc:a8:3d:1a:c4:9b:12:cf:31:a4:29:
                    b5:3c:ab:67:80:c2:2f:d6:99:3b:9c:c5:80:75:b9:
                    d6:cd:d6:8f:02:ae:4f:50:c6:fc:d6:1e:6d:8b:7a:
                    6d:15:ca:da:15:26:62:5a:2f:a6:a3:9e:34:e7:16:
                    5b:64:9e:0c:0d:fa:e8:ad:e7:e4:44:51:1b:b2:93:
                    17:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6A:1C:11:87:86:01:FF:8D:C6:8F:32:C7:74:EA:15:2C:D1:37:69
            X509v3 Authority Key Identifier:
                keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:76:13:0d:c1:37:9c:67:5e:e1:0a:85:ff:c1:52:34:fe:ba:
         c7:eb:ae:e4:a9:1c:48:8f:40:d6:c4:a5:6b:e7:94:4c:0a:14:
         8e:0a:b1:a9:d6:7e:c0:70:93:63:da:a4:90:dd:e0:0a:8d:87:
         18:ff:10:e2:81:08:b3:86:49:97:7a:ab:3e:2a:c8:94:5b:a8:
         cc:e4:3f:fe:e2:25:58:00:65:c3:e7:70:7a:c8:09:f6:ca:62:
         e2:53:cb:40:f3:56:eb:ed:51:fc:74:f3:9c:d7:7f:6d:ac:dc:
         2c:34:cd:f9:a7:12:52:64:a4:5e:ba:22:0b:59:fb:77:4b:27:
         0e:e7:34:9a:44:5b:0d:dd:a1:5c:97:ee:04:f8:f0:d4:c6:10:
         69:25:84:71:31:9c:14:5c:0f:7b:5c:c8:bf:ef:d1:e6:a1:6b:
         ed:1c:7b:74:a8:33:3a:df:3b:9e:4e:96:82:c5:9e:78:ee:37:
         e7:52:92:de:7e:4d:06:ec:2e:b7:a0:9d:cd:40:ac:01:d8:c2:
         fe:8e:a0:67:66:78:fe:25:e0:ab:5a:86:e8:5c:09:1b:f1:64:
         8c:ab:6d:36:5c:1a:71:e7:cf:11:85:e5:23:a1:84:19:a7:9d:
         18:c7:a4:67:8c:f1:b3:0a:d6:2e:de:81:f4:5c:7b:1f:c3:5e:
         3a:3d:fc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:26:15 2026 by rpki-client