Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
File:                     QpxUvh2n5zjjyW_7QfHqOQCme-g.mft (raw, json)
Hash identifier:          q3BjLnZh2GBeLWJ+ZYW8t0JDnbtjhYWaV2QsEaXEX1E=
Subject key identifier:   9F:4F:58:5B:11:40:FC:B5:FA:78:8B:0D:EA:3C:14:26:8D:D5:16:AE
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Certificate issuer:       /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial:       01A1261E4CF1D7AB35F20CA639BC76C9D768
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
Manifest number:          1A9D
Signing time:             Sat 10 Oct 2026 14:01:22 +0000
Manifest this update:     Sat 10 Oct 2026 14:01:22 +0000
Manifest next update:     Sun 11 Oct 2026 14:01:22 +0000
Files and hashes:         1: 1ZIz7YN38-qhWIRp9vEMaUVo4QI.roa (hash: 9n+bNBmpRuyTg1duJe1cszusX19nYZTZjRrw7qApMWA=)
                          2: 6wrwVwIOmyHRFv2kHnVse0hIMz0.roa (hash: 3Bl4eyRcujw6eiEUMKOOuOVx73Mu069CKt56gjYDvno=)
                          3: MaMuRhJpZN3sUs2ReczUrxtPqog.roa (hash: CIDmAVgYtghMXGXHEdC7pvKkJAeXg2JMbpBDZ4AJ2O8=)
                          4: QpxUvh2n5zjjyW_7QfHqOQCme-g.crl (hash: wxcQFPpcAVJoI1vNdcyRePR4gdwkgV7p6m5DM73Lmbw=)
                          5: u-TU9G3PdLn2qXtYJqzV7mCbrOE.roa (hash: aE5QPdx1k0+mZxz3uvB3CV2aBguWuJ+V39vAnK3fkyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:26:1e:4c:f1:d7:ab:35:f2:0c:a6:39:bc:76:c9:d7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
        Validity
            Not Before: Oct 10 14:01:22 2026 GMT
            Not After : Oct 11 14:01:22 2026 GMT
        Subject: CN=9f4f585b1140fcb5fa788b0dea3c14268dd516ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e4:d3:41:ab:b1:29:45:a4:5b:ff:e5:e6:96:
                    d7:6c:8e:77:9c:9b:5b:11:70:71:fc:67:2d:de:cb:
                    78:a3:13:25:4d:1a:eb:bc:5a:cb:2e:b3:b3:75:74:
                    25:df:3b:9c:63:37:44:d4:f6:74:39:13:c4:7b:4b:
                    62:88:c3:f9:6d:06:ee:64:75:fd:bc:af:6f:d5:79:
                    3c:0f:a4:4e:e0:6e:55:4e:38:10:7c:de:88:b1:a0:
                    0f:2b:06:24:c3:d1:d9:ea:80:1f:29:b5:71:39:83:
                    f5:94:65:07:32:fd:ce:8d:79:0e:c8:03:de:cb:31:
                    c7:0d:f8:3c:bb:ed:4b:ee:b6:db:f8:6e:2f:e2:58:
                    49:ad:0b:8c:cc:97:d4:de:46:2a:65:e8:f8:0c:a9:
                    34:d9:2b:27:7c:6b:dd:b6:70:49:a0:fe:d5:d6:52:
                    98:1e:da:62:0d:47:30:13:fb:30:df:a1:5a:93:67:
                    d4:22:74:17:0f:e3:87:34:ba:7f:b6:68:8e:da:89:
                    9c:79:9f:21:ba:f4:f7:6d:f9:f0:b6:96:db:6f:0a:
                    02:10:b4:ca:df:96:8a:bd:df:23:f8:5b:cc:09:f1:
                    1e:35:f0:ba:b8:6a:c8:1b:cb:ea:de:dd:20:da:c9:
                    3d:26:69:85:cf:e3:65:d6:10:a9:5c:e8:82:05:2b:
                    74:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4F:58:5B:11:40:FC:B5:FA:78:8B:0D:EA:3C:14:26:8D:D5:16:AE
            X509v3 Authority Key Identifier:
                keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:12:fb:00:89:69:ac:e9:72:92:a4:3b:99:2f:66:c5:76:90:
         41:59:34:24:68:10:fb:bc:3c:fb:36:c8:b2:d9:88:31:5f:b2:
         35:52:ca:c6:ec:9a:79:9c:bf:8b:bd:82:2d:4d:c7:eb:35:50:
         93:4d:d5:05:d5:20:08:c3:9f:05:26:07:35:fe:fd:41:c3:82:
         70:e6:a9:9e:58:13:1a:94:03:b9:62:26:da:5d:fb:29:ec:01:
         f0:1f:58:a5:cb:85:84:d0:6b:3e:05:cd:a4:cd:0d:78:82:90:
         06:d2:d7:2a:9a:45:8b:85:b3:40:41:30:e4:a8:8c:1b:95:4f:
         37:c7:54:44:77:51:97:87:d6:44:68:c7:2f:a9:fa:ab:20:07:
         d5:d2:ae:ef:9b:ed:bc:f4:c0:7a:a8:81:65:9c:8a:de:9b:d8:
         e8:0d:1a:45:07:09:ea:69:7f:f3:dc:cb:6e:9a:52:cc:83:5b:
         67:bc:32:a8:7f:4d:dc:b0:e8:43:eb:2f:ab:79:c2:b6:bc:b4:
         6f:39:a3:3a:c0:c3:ee:e2:24:f3:d5:01:8f:67:0a:0b:23:83:
         ac:44:5e:04:df:e5:bb:18:44:44:40:79:78:48:2f:03:b4:7c:
         e7:a4:86:3c:8e:0d:ca:1b:55:a7:1b:5e:78:b0:7b:5f:e0:05:
         a9:46:d6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:46:36 2026 by rpki-client