Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
File:                     q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json)
Hash identifier:          8AoLewO+WguSpnbnogZjIOPHk+wnSmprAVxuqUG2ipg=
Subject key identifier:   53:4E:26:AC:96:60:8F:C8:25:0D:6B:15:55:25:59:04:A6:B0:C8:17
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Certificate issuer:       /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial:       01A10F5ED00220442172A882AC0FAA6278B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
Manifest number:          1A8D
Signing time:             Tue 06 Oct 2026 04:00:34 +0000
Manifest this update:     Tue 06 Oct 2026 04:00:34 +0000
Manifest next update:     Wed 07 Oct 2026 04:00:34 +0000
Files and hashes:         1: e6rt8CL4Tt23u6mnF3HX9gILLdw.roa (hash: 0VKltNMP0fVwSJth+lSOjHYVHCR+JxiPMU1thfnFsLc=)
                          2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: 6DBaE7gZ+FYJqEvKGDf7FAIA5a1Lx4CV83x1TOwgs2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:5e:d0:02:20:44:21:72:a8:82:ac:0f:aa:62:78:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
        Validity
            Not Before: Oct  6 04:00:34 2026 GMT
            Not After : Oct  7 04:00:34 2026 GMT
        Subject: CN=534e26ac96608fc8250d6b1555255904a6b0c817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:de:b4:23:50:59:92:58:71:52:20:0b:94:39:
                    29:e5:49:38:0c:e6:c1:05:5d:17:ee:51:7e:46:64:
                    f8:8d:47:b9:1f:2d:93:5b:06:0b:d8:c4:fb:81:c4:
                    df:37:9a:d8:9b:f1:88:ce:87:12:b1:28:61:a3:98:
                    31:1e:0d:c0:ab:fb:36:71:2a:d3:0c:6f:aa:88:9b:
                    fe:1b:e4:74:62:eb:b2:74:ab:c9:cc:ca:bb:85:fb:
                    01:37:82:3e:df:c8:a9:7a:3d:72:3b:9b:78:81:90:
                    9c:54:18:62:70:fc:33:a6:1f:52:7d:45:7d:0a:6d:
                    7f:eb:1f:83:bc:4f:0c:dd:9b:33:3a:09:33:19:5f:
                    7c:78:40:52:46:38:f4:c9:dd:00:06:93:17:1c:60:
                    db:4c:ff:09:f5:91:57:27:d8:3e:a2:f2:e2:06:48:
                    dd:8e:f1:cb:6f:f4:f5:be:d2:e8:ec:01:17:c3:3e:
                    a7:a4:97:5b:df:f2:1b:7c:dd:e4:7e:f6:95:dc:2d:
                    2d:9c:d3:70:ea:67:48:12:c3:fa:a1:ac:c4:e2:d9:
                    88:4d:ed:90:6a:30:b4:93:83:c4:82:54:48:b5:75:
                    15:3b:4a:02:a8:5d:07:19:b2:c2:88:cf:dc:d7:f1:
                    fc:2f:4d:f0:53:8a:20:fe:98:3c:4a:27:08:28:c5:
                    5e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4E:26:AC:96:60:8F:C8:25:0D:6B:15:55:25:59:04:A6:B0:C8:17
            X509v3 Authority Key Identifier:
                keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:54:4b:53:e7:42:95:5c:e7:c0:6d:a2:ac:56:b5:95:c5:5a:
         3c:a4:30:51:e5:a6:3d:91:8c:85:f5:65:e6:06:cf:41:6d:b1:
         d7:55:99:92:36:f0:83:04:99:1e:7d:93:7f:8c:7a:98:fb:46:
         44:99:09:df:05:db:2f:34:27:7d:75:26:8b:5c:d1:b4:6a:42:
         71:ab:de:26:bc:62:cd:63:27:a1:64:d2:e0:d2:8f:07:5c:98:
         2f:d8:e0:8c:84:2d:54:57:a1:2c:8b:16:a6:bd:00:bd:6e:d4:
         e6:41:a3:c1:ba:02:05:ef:2c:a7:21:1c:5a:6b:5b:c3:ea:62:
         4c:d5:d2:01:71:28:8f:d3:d2:a8:b8:cc:6f:17:20:84:75:8e:
         1e:e7:30:39:00:20:27:7d:77:78:21:93:e3:1e:09:f7:8b:5c:
         88:02:91:b0:07:9f:61:53:74:fa:41:c8:00:d6:90:d5:73:32:
         80:e3:3b:dd:a5:73:ca:ec:bb:55:a9:85:15:1c:a2:3a:cb:a9:
         5f:25:46:8a:82:22:ce:34:0c:11:50:02:d3:de:8b:7b:dd:e7:
         63:f0:9a:2a:d5:70:42:3f:15:36:cc:0d:74:dc:a7:75:0c:61:
         e7:32:0c:b1:26:c0:18:f2:73:f0:70:8a:17:a8:4a:e7:5f:98:
         a6:80:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:57:58 2026 by rpki-client