Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
File:                     q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft (raw, json)
Hash identifier:          udMg5qtFV7Zxx4ZG7MNzhiKI3V19ic4n+kuBlERN+L4=
Subject key identifier:   C8:F5:2F:8D:18:CF:69:D3:5A:78:A1:44:DF:B2:D4:F2:84:F4:4C:38
Authority key identifier: AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
Certificate issuer:       /CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Certificate serial:       01A002B89483EF9BF285FAC59754B5508EBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
Manifest number:          0D85
Signing time:             Sat 15 Aug 2026 00:00:46 +0000
Manifest this update:     Sat 15 Aug 2026 00:00:46 +0000
Manifest next update:     Sun 16 Aug 2026 00:00:46 +0000
Files and hashes:         1: gefx2fr_MDXtvtuWxylmxEbY_9I.roa (hash: DoV6a6Zcce+W+t7QXHihpVY0/SyCf2V+1wNo94geZZ0=)
                          2: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl (hash: fiSi0lmLh7jmYtiWrAfG9HDj5lDGO8//wM2mheosGXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:94:83:ef:9b:f2:85:fa:c5:97:54:b5:50:8e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf587571c0c698458c385b15d60c7f08c70b6fe
        Validity
            Not Before: Aug 15 00:00:46 2026 GMT
            Not After : Aug 16 00:00:46 2026 GMT
        Subject: CN=c8f52f8d18cf69d35a78a144dfb2d4f284f44c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6c:f5:7d:8d:27:6b:46:f2:0e:29:e0:6f:20:
                    c2:3d:28:b6:dd:11:23:0f:36:cc:5b:b8:7c:05:e9:
                    81:cc:2c:29:e1:e1:b6:8f:41:17:56:81:e6:4e:de:
                    17:40:3a:68:76:b8:64:c6:64:e6:1a:94:dc:7e:45:
                    85:40:8b:56:2f:1e:ef:fa:ac:1c:7e:76:22:05:16:
                    10:52:77:60:49:c2:dd:92:88:60:15:cf:72:d2:b8:
                    3d:2c:29:ab:a0:2a:45:fb:66:7a:98:64:94:28:ff:
                    2c:e9:a3:de:51:52:1b:3b:07:f6:ff:e2:a2:d3:3b:
                    4e:d5:e0:0c:58:40:43:fb:ea:da:9e:d7:62:86:1c:
                    4a:ba:9d:bf:46:be:28:72:ce:55:2b:55:40:a8:80:
                    2e:4f:2a:e9:30:ac:9a:e6:5d:60:a0:b3:91:bf:39:
                    fd:cc:83:76:8e:f6:17:83:f1:0a:75:16:5a:2f:e1:
                    01:13:ee:84:b4:f8:9d:63:e9:55:ae:ab:f8:b2:c1:
                    4b:b4:0d:d5:f5:1e:03:a7:6f:c1:d2:07:73:3f:98:
                    fe:06:bb:5f:3d:69:16:f7:9c:68:cd:eb:f1:4c:07:
                    9c:2d:40:d8:60:b6:02:78:1c:61:4d:62:66:0b:ab:
                    17:b2:44:8b:21:8a:1c:f1:43:fa:40:cb:51:c9:ae:
                    10:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F5:2F:8D:18:CF:69:D3:5A:78:A1:44:DF:B2:D4:F2:84:F4:4C:38
            X509v3 Authority Key Identifier:
                keyid:AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:31:7f:56:c5:f0:32:7f:ff:66:8d:b9:59:1e:09:6d:14:58:
         57:a3:ba:c6:a0:6f:17:f6:47:21:99:f2:0b:71:09:5a:77:39:
         6c:16:c3:19:24:9d:a7:d7:b2:0e:5b:3c:61:44:1c:aa:0f:15:
         39:1d:e3:79:c7:3a:12:af:ae:ae:f7:9f:2a:e9:a8:5c:2b:fc:
         46:ec:2d:8e:41:a7:96:51:c2:b4:58:99:0c:d6:fa:b5:2c:05:
         59:88:f2:72:e1:7b:96:0e:0c:0f:02:1d:ed:94:53:5e:63:b3:
         cc:e5:de:09:eb:e6:38:55:5b:9f:08:6f:b8:db:9a:b6:a2:2e:
         17:f7:97:98:67:9a:1a:9a:08:3c:af:9e:58:8f:af:4a:d0:e1:
         f3:10:78:33:e6:67:19:59:c4:08:21:17:0e:65:0d:f2:06:ba:
         21:9c:56:0d:85:8e:4d:0a:3c:f2:73:de:98:77:60:36:f3:5d:
         84:3f:dc:df:2e:a1:ac:5e:46:cb:60:7e:c1:91:71:c8:0c:9d:
         d0:be:be:46:cb:6f:38:e0:33:3e:9a:ed:a7:fc:0f:c7:14:d9:
         e6:4e:24:93:32:f7:2d:99:cf:50:ea:bd:ae:1e:72:34:ad:78:
         19:6b:c9:b0:8a:cc:95:6a:23:e6:1e:9f:a4:4d:85:df:a9:a8:
         66:2c:db:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:10 2026 by rpki-client