Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
File:                     quRIJx2Froeamr8Vs7ypg0cKE0g.mft (raw, json)
Hash identifier:          I/jr7OO8G8xPczlpHPPwejfHLiEEV57LQfpHWUz1srA=
Subject key identifier:   94:A2:4F:6A:43:2E:71:74:F4:08:7B:6E:68:D3:3A:1E:74:F0:E3:38
Authority key identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
Certificate issuer:       /CN=aae448271d85ae879a9abf15b3bca983470a1348
Certificate serial:       01A0E106B03543EC9DF4917B898E3424A986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
Manifest number:          0970
Signing time:             Sun 27 Sep 2026 04:01:46 +0000
Manifest this update:     Sun 27 Sep 2026 04:01:46 +0000
Manifest next update:     Mon 28 Sep 2026 04:01:46 +0000
Files and hashes:         1: abh6_OV0w_23vHurZg2lf03FAWI.roa (hash: WaNrZ48mNKxaEjIRodmrrMT60e4DHtMtypg5HH38Fac=)
                          2: quRIJx2Froeamr8Vs7ypg0cKE0g.crl (hash: yklWiuRQZcnflTxUob1JtOipmqAZ0dSsUPkpvXpAHnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:06:b0:35:43:ec:9d:f4:91:7b:89:8e:34:24:a9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae448271d85ae879a9abf15b3bca983470a1348
        Validity
            Not Before: Sep 27 04:01:46 2026 GMT
            Not After : Sep 28 04:01:46 2026 GMT
        Subject: CN=94a24f6a432e7174f4087b6e68d33a1e74f0e338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fa:b3:66:e6:73:e6:66:b5:73:83:62:2a:f1:
                    1a:31:6c:3d:e3:a5:47:17:aa:36:c8:73:77:8e:f2:
                    15:2f:49:18:73:e6:54:49:08:87:b7:c4:2f:aa:f6:
                    84:ca:66:14:08:a6:e9:39:61:96:19:4b:35:4a:4c:
                    a6:08:54:c4:ff:44:e3:9f:5e:29:d3:42:06:3a:4f:
                    b9:92:3d:d9:59:14:48:64:68:80:62:95:28:0b:17:
                    7a:96:fd:ad:74:cc:54:8c:1a:0b:37:01:da:dc:e1:
                    62:1b:dd:d2:dc:71:31:7e:d5:b2:44:37:72:36:26:
                    cd:89:99:7c:c0:58:2a:3c:0c:9f:87:44:e8:aa:c9:
                    79:e3:97:6a:f2:85:29:2c:35:5e:4e:5d:03:28:12:
                    d1:26:9e:32:f1:df:0c:61:d9:1c:56:09:e3:34:18:
                    d1:46:ad:f7:b3:bb:99:b9:6c:bb:99:07:22:ac:eb:
                    ec:ad:ba:42:1f:36:d3:f7:2b:b0:e0:65:46:df:3e:
                    cd:07:68:7d:df:0c:80:61:ee:f0:c9:54:06:0f:46:
                    1a:7a:a1:a6:80:94:06:7e:c5:30:df:f6:ad:00:8b:
                    30:c2:24:c0:3e:23:c3:2d:f0:22:bf:01:4c:a1:65:
                    03:28:33:35:64:77:b6:c6:85:d3:8a:91:53:d7:94:
                    09:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A2:4F:6A:43:2E:71:74:F4:08:7B:6E:68:D3:3A:1E:74:F0:E3:38
            X509v3 Authority Key Identifier:
                keyid:AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:fd:79:31:8f:dc:81:e5:6e:c9:90:2c:c2:e2:d2:f3:4c:3c:
         c4:8e:66:6f:e3:57:7a:2c:d8:bf:1c:39:6e:b1:52:c3:4b:a7:
         7b:0a:b6:64:11:da:06:fd:de:42:0a:07:7f:28:6d:41:58:00:
         02:21:ad:1f:6f:43:2b:42:7b:60:f7:96:04:83:2b:bc:84:e9:
         df:47:5f:f6:27:6d:0e:9f:14:c9:59:32:04:b3:51:5a:11:ba:
         0f:c7:32:63:48:64:0c:80:4a:f7:51:74:58:5a:49:2e:da:32:
         34:fc:96:a8:a3:b3:90:e4:e6:fa:06:0d:23:c1:1d:de:d4:6c:
         bc:42:35:19:57:19:e1:b3:e3:ee:e3:83:d0:eb:5c:8f:c3:d8:
         79:94:68:38:c0:8d:e2:4f:bd:a9:16:c1:5c:42:e2:d9:ed:1f:
         3d:fd:7f:1a:3a:29:85:c9:03:eb:47:f4:d0:f0:72:bd:95:e8:
         f0:6d:32:c8:e0:a5:c1:92:d2:83:6a:6f:f3:29:af:03:a1:7d:
         93:0d:97:fa:b3:59:84:9c:77:4b:be:fc:66:f8:32:2f:63:26:
         55:00:fa:f7:f4:7b:a1:5c:e2:95:e5:6f:cf:7d:6f:79:df:89:
         8b:01:5c:3d:5d:04:61:78:fe:26:f1:96:57:56:56:d8:8a:d4:
         a4:88:b6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 13:19:06 2026 by rpki-client