Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
File:                     Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft (raw, json)
Hash identifier:          9g4xmge0QMr+Bs3jfAA2cNF31W/rd2V8ZKcz7sicehA=
Subject key identifier:   F9:72:F7:DC:0A:A3:A1:01:2B:CE:EB:6F:00:F3:85:0C:CE:64:22:73
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Certificate issuer:       /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial:       01A08AFB0FDAAAD7FB11B33909A39420E10E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
Manifest number:          0E34
Signing time:             Thu 10 Sep 2026 11:01:44 +0000
Manifest this update:     Thu 10 Sep 2026 11:01:44 +0000
Manifest next update:     Fri 11 Sep 2026 11:01:44 +0000
Files and hashes:         1: 4YMSKNsUfIJZYY47MNVzndwjo04.roa (hash: 8oujs3evvYwGVLJbLnpR6K4HU81UoQYW70JF1WusQ7o=)
                          2: Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl (hash: Tac7Ealu+t9IZiGxffjzvZSkl4pFUEHht07ZzDkFha0=)
                          3: UdwFpb9t4wz_gCpvl_RLPvAmSOM.roa (hash: narBwfpb8RAcShxX1DzjbkkEFV1ZbklkMy2WAyEvk6Q=)
                          4: ih6xiPv8P5foQSryApqM1wuthiw.roa (hash: 4r9ce2PRoKlZkWqzYoMO2QMeDdt4J/qFvNMaUscc/gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fb:0f:da:aa:d7:fb:11:b3:39:09:a3:94:20:e1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
        Validity
            Not Before: Sep 10 11:01:44 2026 GMT
            Not After : Sep 11 11:01:44 2026 GMT
        Subject: CN=f972f7dc0aa3a1012bceeb6f00f3850cce642273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:fa:9c:10:e5:9b:18:9d:54:3d:54:35:6e:
                    be:c8:65:1d:bb:54:77:f6:10:3f:1a:56:dc:fd:c5:
                    df:0e:9d:1f:3c:3d:34:dc:1f:61:a4:93:3e:2c:7f:
                    4c:1b:bf:f5:4d:c3:f9:66:71:87:cf:66:37:7c:c6:
                    4e:f1:7d:d4:93:fe:64:89:b1:bd:a0:26:14:d9:28:
                    09:d5:8b:24:59:2d:cb:31:ab:ef:20:6b:84:3d:a9:
                    c0:33:4e:18:76:51:c6:46:52:ac:09:bf:73:b4:a7:
                    b3:fa:51:9e:df:4c:3d:cf:e3:ec:8b:48:f5:92:89:
                    60:a0:df:0f:03:40:ad:46:bd:0b:ce:68:0a:21:d9:
                    b9:e4:9d:86:09:22:af:5c:dc:b2:f7:50:a9:5e:ce:
                    bf:4d:1d:f6:30:dc:a2:70:0c:b2:75:46:66:28:62:
                    1f:93:a4:57:c1:31:84:8b:7d:39:e0:eb:4a:65:ea:
                    72:dd:2f:24:56:e2:3b:1b:be:89:e3:c0:1d:fd:09:
                    f1:2f:3b:0b:b5:ab:b3:f5:41:c5:64:01:48:eb:17:
                    b1:e0:78:2e:6f:c1:fa:e9:a1:6d:a9:ba:ef:90:ac:
                    de:30:0a:c1:26:5a:ea:84:34:30:e2:90:d0:7f:97:
                    25:73:71:32:b2:59:8b:1e:e8:3c:ed:eb:20:98:0d:
                    7c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:72:F7:DC:0A:A3:A1:01:2B:CE:EB:6F:00:F3:85:0C:CE:64:22:73
            X509v3 Authority Key Identifier:
                keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:45:ac:8a:27:17:92:d3:0f:db:55:af:83:83:df:95:18:52:
         96:dd:13:18:7c:ab:d9:00:ac:be:0b:1e:e4:b0:52:84:85:aa:
         25:f8:bc:69:54:9b:ee:d7:31:b1:14:4f:54:e6:15:d1:53:37:
         4d:3c:cc:24:41:76:3d:4f:6d:29:07:74:2c:e1:ca:e0:f0:64:
         76:3e:6b:42:51:b8:56:69:78:f5:74:e8:02:4d:65:3f:0b:db:
         0b:3a:77:33:6d:09:80:e4:ea:8d:f2:0d:8f:8d:32:d1:b5:31:
         2e:ef:f8:fa:f7:e9:82:b5:6f:07:fe:ca:3b:1d:cb:7b:4f:92:
         1b:a8:41:1a:40:1f:1a:80:26:df:f6:dd:83:ea:2c:90:fd:2a:
         2c:7e:5e:9a:11:4c:78:20:b7:6a:ba:73:b0:55:f2:6c:f1:05:
         9b:0f:6d:61:d5:09:e7:b2:57:2e:b7:a4:ec:05:72:28:1d:92:
         ea:bb:9e:cc:16:26:e0:43:a6:a2:88:ee:3b:58:76:d4:92:07:
         db:ad:45:47:36:1a:b9:9d:ef:5d:1e:54:ec:38:64:f5:64:8e:
         88:fa:d4:53:d5:ca:6d:82:6b:31:d9:86:80:ba:c3:c3:f5:74:
         a1:6f:42:8a:b0:df:5f:12:70:cc:b6:6a:05:59:76:77:4a:11:
         54:ad:96:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:39:34 2026 by rpki-client