Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File:                     qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier:          53wcsFeIFCHTzTbN8ZKalThZKVwEH4fFeFz6NRWHy+Y=
Subject key identifier:   38:BC:76:51:B0:FB:B1:41:A1:8D:3E:F9:BC:84:7C:55:19:AC:12:E8
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer:       /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial:       01A001A657A76BFC4C164E3DB358C74409A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number:          0BD8
Signing time:             Fri 14 Aug 2026 19:01:13 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:13 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:13 +0000
Files and hashes:         1: 6ixSBAJQlI9QTdVaxkNUntZMsmE.roa (hash: md0a0a+udrQg7g7OFxeWWB53q44wWyhdageagzGFqqY=)
                          2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: GWP5a2XT4g2RooreH1oSj9wm34VPjGQwdxzlQ4gpdf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 19:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:57:a7:6b:fc:4c:16:4e:3d:b3:58:c7:44:09:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
        Validity
            Not Before: Aug 14 19:01:13 2026 GMT
            Not After : Aug 15 19:01:13 2026 GMT
        Subject: CN=38bc7651b0fbb141a18d3ef9bc847c5519ac12e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:70:38:1c:d9:6c:90:aa:30:e3:1a:5c:fa:
                    f7:73:37:4a:91:a2:b6:08:bc:c8:0e:ea:7a:74:60:
                    d6:28:7f:b9:c4:1e:6c:c3:e1:30:17:c7:ab:6d:77:
                    b3:57:18:46:8c:7d:40:be:6c:73:5a:e7:15:44:55:
                    52:4c:fc:ad:f4:36:4b:db:2a:e2:1b:db:72:cc:54:
                    33:e6:00:ba:c8:f1:03:81:d6:c4:53:87:72:75:50:
                    0e:6a:eb:ab:ad:8f:22:a8:11:60:b1:6c:8e:6d:bb:
                    2f:1b:50:0f:bc:f7:42:76:9c:84:0b:87:c8:4f:43:
                    6e:77:68:a5:5b:df:c2:e2:be:c9:76:ca:b4:10:f8:
                    a6:72:6b:de:99:65:1b:59:1c:cd:e7:fc:b9:61:73:
                    47:c1:00:83:4d:f8:df:cf:a9:01:4b:fa:03:67:23:
                    65:a0:3e:7e:24:de:f8:9b:cf:93:de:30:89:0c:8d:
                    36:e2:c9:ec:32:d6:32:cf:b6:d9:68:38:06:92:dc:
                    ce:c7:77:24:f8:8c:b0:08:30:c5:3d:f3:c4:d5:83:
                    db:31:33:c1:5b:b7:a6:3a:bd:2c:64:6f:25:58:c9:
                    d1:30:3b:3e:01:73:a8:2c:4a:50:c2:3f:1b:9a:e5:
                    dd:bf:8e:a0:13:bd:d5:ce:93:6c:55:d4:74:60:58:
                    b0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BC:76:51:B0:FB:B1:41:A1:8D:3E:F9:BC:84:7C:55:19:AC:12:E8
            X509v3 Authority Key Identifier:
                keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:56:f9:cb:22:0f:bf:e6:d0:6f:53:af:d0:a4:81:67:64:21:
         e0:bb:b3:8f:61:35:e3:a5:89:97:8d:67:a3:0f:ef:c1:1d:2b:
         5d:e3:65:d8:c1:ee:5e:e8:93:c7:6d:09:23:12:1b:d8:78:a3:
         00:c8:23:40:9c:64:3c:c0:9b:5e:9b:46:4a:63:17:82:98:13:
         02:dc:f0:17:90:b4:cd:a6:0a:86:23:ee:d4:45:a8:6d:16:2c:
         44:ff:15:ba:06:b0:5f:13:d7:c7:d0:01:61:dd:43:36:34:e6:
         b7:20:77:c6:27:cf:e2:05:90:1f:03:70:9f:5d:14:c2:ce:08:
         a2:c3:54:37:5f:03:b1:39:22:43:35:b7:fc:64:5d:e8:41:27:
         cc:80:09:0c:4c:2b:83:68:af:d6:54:78:fd:fb:41:d6:78:87:
         98:44:f0:a7:a7:73:91:51:24:8a:5f:c3:e6:00:8a:45:c7:fe:
         c5:93:c1:90:c8:3b:d1:46:5e:d7:82:fc:17:f5:f2:c0:92:32:
         26:26:7a:2e:e5:7a:2f:d8:0c:6c:be:e0:29:98:ef:ff:d1:6a:
         0d:87:52:a6:aa:46:c4:e6:30:df:f2:c8:23:6c:a6:8c:4d:c6:
         6f:9e:df:aa:8f:8e:32:15:f3:8b:61:61:46:96:a1:e9:95:26:
         6a:64:f8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:34:35 2026 by rpki-client