Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
File:                     8QEB-_qGP-Reriv2uX4O_n7IMSU.mft (raw, json)
Hash identifier:          Zec0zKDJ5GnUMWzm1QaxfEh4EjlhEw1SZZ8VUUgBOfs=
Subject key identifier:   F1:6A:53:13:4D:BD:20:B4:D1:22:95:F0:1C:D0:26:1B:97:E0:E5:30
Authority key identifier: F1:01:01:FB:FA:86:3F:E4:5E:AE:2B:F6:B9:7E:0E:FE:7E:C8:31:25
Certificate issuer:       /CN=f10101fbfa863fe45eae2bf6b97e0efe7ec83125
Certificate serial:       01A0C2FB7C31F47DB2B18CCB4CB27261629E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
Manifest number:          0A10
Signing time:             Mon 21 Sep 2026 08:00:56 +0000
Manifest this update:     Mon 21 Sep 2026 08:00:56 +0000
Manifest next update:     Tue 22 Sep 2026 08:00:56 +0000
Files and hashes:         1: 8QEB-_qGP-Reriv2uX4O_n7IMSU.crl (hash: yTP0Tgo1CTegRztItEDAt8B4/9kYQUxRj11oHkxMz3k=)
                          2: NwpxsBvkXInCfE7s58C2EVrv1wo.roa (hash: T0KsGiCR7aM3uhR3oT8/7BFXwqzPIAkn3MY+dfdaeXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fb:7c:31:f4:7d:b2:b1:8c:cb:4c:b2:72:61:62:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f10101fbfa863fe45eae2bf6b97e0efe7ec83125
        Validity
            Not Before: Sep 21 08:00:56 2026 GMT
            Not After : Sep 22 08:00:56 2026 GMT
        Subject: CN=f16a53134dbd20b4d12295f01cd0261b97e0e530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:eb:51:c4:7a:52:d0:d4:c4:0b:48:1c:b7:c2:
                    e0:b3:a2:f2:20:7f:d8:17:61:25:98:c2:f3:de:6c:
                    6f:4e:35:95:4c:1e:57:8f:a9:f2:61:0a:43:d2:9c:
                    33:00:a0:3d:b4:e2:e1:cc:65:0c:62:04:25:fe:4d:
                    e3:9b:5c:61:22:38:4f:09:0d:f3:0c:da:a5:7e:ed:
                    47:0d:27:67:b7:2e:88:29:54:6e:e8:45:6b:41:8c:
                    79:ca:d6:c7:80:a8:69:fe:e9:37:d8:2e:e0:b0:8a:
                    33:0c:bc:ef:ad:77:f1:de:0c:51:3e:1b:69:bf:90:
                    47:13:57:d4:89:52:fb:ec:ac:a8:aa:ed:5c:43:5e:
                    6e:cf:9b:06:40:30:ff:3d:6b:1d:d2:62:a6:8e:b6:
                    cb:fb:ff:6c:2c:1c:58:78:37:99:08:f0:7f:e3:67:
                    c8:18:12:da:90:5e:f8:e8:1b:d4:1e:11:3f:5e:35:
                    b0:69:e5:ef:42:72:0a:93:5d:b5:0d:4c:6e:c6:e1:
                    ec:0e:1f:dd:71:fa:14:20:6d:b0:57:c7:0a:ae:f9:
                    64:a0:87:a6:6a:ab:15:be:bf:3e:45:2a:6e:d4:ea:
                    dd:fc:46:7c:30:62:35:49:12:fa:21:f4:41:86:e4:
                    56:0c:fb:de:41:cf:d3:34:ec:eb:49:07:19:82:1e:
                    43:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6A:53:13:4D:BD:20:B4:D1:22:95:F0:1C:D0:26:1B:97:E0:E5:30
            X509v3 Authority Key Identifier:
                keyid:F1:01:01:FB:FA:86:3F:E4:5E:AE:2B:F6:B9:7E:0E:FE:7E:C8:31:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:47:4c:93:55:26:15:d5:0a:07:28:6d:94:22:98:60:47:31:
         54:96:9d:50:49:7c:0e:13:20:a8:dc:08:ad:d5:44:8a:61:a2:
         bd:19:19:eb:2a:77:25:3c:82:7d:f7:c9:2a:16:b6:58:cd:1b:
         e4:6c:aa:2f:85:49:f9:c4:da:4c:29:70:32:a5:8b:b5:34:5d:
         6e:34:5a:d3:f5:24:d7:db:a7:98:00:19:ef:21:4c:5e:01:93:
         8a:60:38:c4:fb:e7:87:83:18:03:be:cf:14:93:20:c9:52:5f:
         7c:55:8e:0b:d3:6c:bb:7b:64:69:c0:b9:ef:de:fc:02:7a:8d:
         50:f0:cc:19:79:e8:8c:4c:e7:c4:2d:0d:7e:1b:fe:53:b9:d6:
         39:20:61:6b:99:01:f9:5b:d3:a6:23:77:50:d5:45:e5:17:70:
         d6:c4:5a:14:33:c3:f0:e9:9e:8b:c0:a1:37:8f:29:b9:83:2d:
         56:81:12:ee:8f:d8:ef:5f:ff:0c:6c:4e:c7:04:f1:7e:c7:0c:
         ea:f9:0e:a5:9c:42:63:bc:02:cc:d3:a5:1a:ce:bc:12:88:90:
         28:4a:99:8e:fc:52:59:e8:91:cb:1e:73:21:43:04:6f:36:c1:
         3d:24:32:ae:65:d2:53:22:56:d1:6e:4f:31:d6:10:5b:11:05:
         78:e3:b9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:05:46 2026 by rpki-client