Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
File:                     Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json)
Hash identifier:          FMhKI/vS6f5APodO3uTEgxDsbvGrmP3koaNW/w0bu9g=
Subject key identifier:   79:ED:40:65:1E:7F:4C:FD:D2:AF:9D:23:16:A1:01:BB:A5:CF:FA:61
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Certificate issuer:       /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial:       01A0CB9000C7A999896CFBB2BC3CE447196A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
Manifest number:          1A6B
Signing time:             Wed 23 Sep 2026 00:00:07 +0000
Manifest this update:     Wed 23 Sep 2026 00:00:07 +0000
Manifest next update:     Thu 24 Sep 2026 00:00:07 +0000
Files and hashes:         1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: jJZQ7GOR+9NoWVWD8oxm1wKxJBBLRDjtzsG5n51OsGw=)
                          2: rAsphywSAM45eBEoOtw-q7qBbQw.roa (hash: FZ6A8RzJ7kKd3l/6WGQbggDtZVXr3jcROQOsJNRBJLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:90:00:c7:a9:99:89:6c:fb:b2:bc:3c:e4:47:19:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
        Validity
            Not Before: Sep 23 00:00:07 2026 GMT
            Not After : Sep 24 00:00:07 2026 GMT
        Subject: CN=79ed40651e7f4cfdd2af9d2316a101bba5cffa61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f8:eb:9b:59:c2:77:88:30:1c:0f:5b:71:ff:
                    bd:e1:2a:a9:1d:6e:96:90:b3:40:b9:aa:b4:7a:79:
                    63:45:f0:97:bf:2d:4a:d2:1a:13:f5:62:87:c9:40:
                    6d:33:19:02:e2:a3:a4:cf:48:a1:b6:d9:66:af:b6:
                    ab:ac:b2:64:69:47:d1:c5:23:e9:04:11:76:45:36:
                    13:c2:d7:98:b1:58:0e:7f:1c:46:54:db:75:f9:d4:
                    8d:e3:1c:50:5c:3a:2f:ea:e9:a8:24:62:82:2b:cb:
                    da:94:3c:d3:cd:36:7d:c2:ed:f1:01:f6:3e:d1:2b:
                    dd:c6:ef:86:ce:4d:bb:78:b9:5f:d7:8d:51:18:82:
                    dc:4e:cf:1f:4b:f9:7c:fd:6c:66:8c:1f:45:fc:ac:
                    bc:58:85:3f:34:e1:d1:31:f5:d6:a0:e4:3c:e3:67:
                    41:a3:22:f3:59:15:86:dd:ef:31:6c:8d:ed:a7:4b:
                    3b:eb:13:67:cf:6d:d7:d9:8b:8b:90:cc:4a:bf:e1:
                    dc:82:1c:f1:6f:d1:dd:05:9b:1b:eb:ec:13:db:09:
                    14:87:98:1f:ad:27:05:fb:53:b1:a8:ee:ed:53:c8:
                    a9:7d:45:52:42:9a:dd:8e:07:7c:92:3f:2c:6a:d4:
                    e4:0b:98:a2:88:d3:8b:5f:de:5e:cc:5f:4e:44:2d:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:ED:40:65:1E:7F:4C:FD:D2:AF:9D:23:16:A1:01:BB:A5:CF:FA:61
            X509v3 Authority Key Identifier:
                keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:20:6f:a6:b3:16:ac:4a:b0:8c:d0:d8:2c:be:ab:28:c0:e4:
         12:e9:c8:af:8d:ef:92:8c:d0:a6:c5:93:cc:6e:ab:93:6e:af:
         4d:b4:23:76:84:6f:69:1e:9b:a6:0d:ab:ba:55:1c:89:4a:21:
         f4:e8:5f:11:4d:0e:1c:99:07:fd:67:66:07:83:45:ca:7d:04:
         6e:fb:cd:4f:e6:ec:e1:1c:4b:9e:e8:83:9a:c5:af:45:a7:56:
         4f:db:3b:60:7a:0c:6f:b6:37:60:74:29:69:b0:ec:1b:e4:fe:
         27:2f:0f:20:a7:bc:3c:92:59:6f:47:40:50:96:45:c6:6f:78:
         29:91:66:b6:c5:12:64:df:d6:7b:f0:3d:e6:f0:d5:b9:54:6e:
         30:4e:ec:6e:f2:97:5c:09:d3:87:e3:a4:b0:5a:e5:41:3e:0b:
         a2:dc:59:b1:82:58:f2:6d:3a:9c:2a:c0:cf:6e:eb:d9:be:c5:
         ba:c9:f9:43:3e:ce:65:20:38:ee:7e:15:fd:11:88:e6:28:49:
         14:40:0a:35:9b:da:6d:d7:7f:50:5a:46:16:e6:43:2a:fe:1c:
         d2:11:dc:05:0d:67:2c:a0:ad:8f:68:ab:98:b7:40:e0:70:65:
         23:98:c5:7c:ee:39:3d:6b:25:54:ce:df:cd:9a:10:4b:69:28:
         f8:91:62:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:20:19 2026 by rpki-client