Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
File:                     Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json)
Hash identifier:          /c8n1Ntj7hU1fgZ7y98U0d7eI/xI8pPH0W475zviqxI=
Subject key identifier:   76:08:FC:54:7F:B3:B5:98:B6:F7:A6:6B:96:07:86:F7:B2:C5:73:BF
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Certificate issuer:       /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial:       01A1833E17E664DA489DC02AD22FE5881F9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
Manifest number:          0EB6
Signing time:             Wed 28 Oct 2026 16:00:46 +0000
Manifest this update:     Wed 28 Oct 2026 16:00:46 +0000
Manifest next update:     Thu 29 Oct 2026 16:00:46 +0000
Files and hashes:         1: 4YMSKNsUfIJZYY47MNVzndwjo04.roa (hash: 8oujs3evvYwGVLJbLnpR6K4HU81UoQYW70JF1WusQ7o=)
                          2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: PLRImwPjhXBbOsuTUoTN2xHqN4AzjjppA6gFSrwlD6U=)
                          3: UdwFpb9t4wz_gCpvl_RLPvAmSOM.roa (hash: narBwfpb8RAcShxX1DzjbkkEFV1ZbklkMy2WAyEvk6Q=)
                          4: VdfiUxXAW7kxsSgJNkzg3PU4aF0.asa (hash: rBrtReSQOSTtWxT64bERVzWrIgIYhsL6a1jzp6S5hm0=)
                          5: c0yr0m7RvZffymhwC7yO7e3GsL8.asa (hash: lLDipIZzTCbEw2L7qB91kobm8w7DyUNOMcjt/nzz2p4=)
                          6: ih6xiPv8P5foQSryApqM1wuthiw.roa (hash: 4r9ce2PRoKlZkWqzYoMO2QMeDdt4J/qFvNMaUscc/gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 14:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:83:3e:17:e6:64:da:48:9d:c0:2a:d2:2f:e5:88:1f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
        Validity
            Not Before: Oct 28 16:00:46 2026 GMT
            Not After : Oct 29 16:00:46 2026 GMT
        Subject: CN=7608fc547fb3b598b6f7a66b960786f7b2c573bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:cc:06:74:75:c3:ce:75:d5:ac:bf:72:46:
                    ba:91:20:f2:33:da:42:33:73:62:dd:97:b9:47:2f:
                    8b:5f:eb:67:6e:9e:3e:16:d6:47:6b:96:cf:6f:76:
                    55:45:c9:0e:5c:c9:05:fc:d3:bb:0f:4e:ce:25:c9:
                    a3:45:2c:be:89:3d:4a:ca:ee:37:39:da:c6:24:95:
                    40:c1:c6:9b:a6:b1:43:e0:ae:d3:f7:45:ba:81:78:
                    2b:9d:a7:5e:e3:74:33:f5:b6:26:20:1c:9e:86:8c:
                    ac:9a:66:48:05:da:a7:9a:a3:95:6f:8e:9f:c1:31:
                    6b:37:42:a5:d7:47:07:d2:d6:00:68:96:08:00:47:
                    90:18:c3:bd:83:9c:ad:fc:d2:d3:61:53:93:91:5f:
                    f4:56:3f:18:1e:12:7e:9f:38:8b:11:a7:4e:84:66:
                    3b:42:da:53:e7:3c:f2:df:0b:06:f7:98:92:ff:80:
                    85:58:d6:62:7f:e7:48:ab:a8:d7:0d:b1:44:f5:b2:
                    ee:6d:ab:9d:1f:91:84:7c:85:43:e9:3c:c9:9d:2d:
                    ad:c0:7d:17:34:86:ad:df:46:10:11:39:1b:4c:3c:
                    34:72:8f:5e:b8:00:29:d6:0f:7d:69:c7:d9:7a:57:
                    8a:90:ac:82:ed:0d:c1:ea:9a:71:0b:47:20:8f:e6:
                    12:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:08:FC:54:7F:B3:B5:98:B6:F7:A6:6B:96:07:86:F7:B2:C5:73:BF
            X509v3 Authority Key Identifier:
                keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:cc:3f:71:66:af:2a:a0:73:7a:fa:0f:b6:d0:0b:a9:06:6a:
         b8:72:8f:bf:87:4b:bb:7c:98:af:0a:e9:d3:03:7c:53:f7:8e:
         40:be:45:36:7a:cf:d4:03:58:64:43:0b:be:2d:5f:86:86:a8:
         58:97:06:b6:44:71:fd:01:9f:28:ea:26:f0:fe:c3:12:86:3d:
         5d:65:eb:44:73:d2:67:ea:e3:ff:74:09:3d:42:b0:43:27:6b:
         8a:f8:fb:e9:79:5f:48:e6:79:70:48:ac:9d:39:c1:0c:15:fa:
         ff:3d:1f:bc:16:ed:7f:96:c5:06:79:23:fb:e0:6d:d3:ad:d9:
         62:5d:62:4f:18:b9:cc:76:d6:01:1e:01:2b:c1:13:81:6a:87:
         7b:21:52:3c:55:b5:71:ba:4d:4d:f7:3b:45:06:f8:50:0e:0c:
         0a:f9:aa:f5:14:f8:16:b0:18:ed:17:9a:71:73:da:61:a9:50:
         14:3e:a1:30:3e:4b:d1:39:69:c8:61:e2:21:8e:b4:ca:d4:bc:
         8a:4c:3f:66:ca:7d:1f:e1:44:4d:84:86:68:80:70:9e:17:52:
         ac:c3:69:3a:ba:ca:95:ea:3d:35:c0:b3:6f:5e:25:fc:82:00:
         eb:30:e7:fe:a0:70:f5:a8:d9:fc:46:d6:9a:df:e6:56:94:0b:
         c7:7c:8e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 23:58:10 2026 by rpki-client