Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
File:                     fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json)
Hash identifier:          ECzvo/KxdVc1QqoFcCVRax3mlsmBHBDuE92myclIiVs=
Subject key identifier:   25:63:DF:4D:66:40:27:99:C8:BF:AC:AE:59:33:91:21:16:65:81:FD
Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
Certificate issuer:       /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Certificate serial:       01A002816812FAF802276610B5A7C2E0BC91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
Manifest number:          06E8
Signing time:             Fri 14 Aug 2026 23:00:30 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:30 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:30 +0000
Files and hashes:         1: btFTz2r_BesZJN2u_oCmJMOAwZk.roa (hash: 0LBuX7o2jR543EQsgYTaLGtgZY2hOEDSxDyt/nU6qa0=)
                          2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: a6inxFksHFSvu3WjiSj/XtN2grnMGzsnf+rOJbrGHAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:68:12:fa:f8:02:27:66:10:b5:a7:c2:e0:bc:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
        Validity
            Not Before: Aug 14 23:00:30 2026 GMT
            Not After : Aug 15 23:00:30 2026 GMT
        Subject: CN=2563df4d66402799c8bfacae59339121166581fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:cd:73:aa:e4:15:b1:e4:61:c9:e9:0f:60:
                    95:86:b0:82:9c:e2:c6:16:42:2e:0b:e7:89:3f:02:
                    d2:9a:9c:3e:32:fa:79:98:ef:72:a7:a1:21:ca:e2:
                    4c:13:04:36:0c:fa:92:aa:51:ff:09:6a:84:50:1e:
                    d7:64:2a:8a:91:0d:b6:e1:7c:34:20:d9:a1:8f:43:
                    e2:53:ea:2e:e7:bc:63:20:ec:da:08:20:90:65:44:
                    b4:2e:89:f8:47:5a:46:9d:6f:ef:54:09:1f:1f:ec:
                    f8:f1:a3:df:97:75:f2:42:1b:69:ab:75:b6:34:a2:
                    09:ce:a2:00:d1:cf:59:d8:21:40:c7:4b:3b:11:c3:
                    b9:61:0e:bb:9d:59:38:47:42:6c:1d:9f:9f:0f:b4:
                    99:e7:e6:59:1e:89:54:88:10:7c:a9:73:af:3a:ee:
                    6a:18:b6:81:d5:b4:93:76:db:cd:f8:d9:13:a9:98:
                    dd:fd:39:20:5a:36:f2:d5:5f:de:c3:ab:ae:88:5c:
                    8e:37:ed:5d:3a:c4:4c:4c:bf:40:eb:3b:2a:a2:e0:
                    4d:c2:bc:b5:1f:28:4c:66:6f:68:a2:2b:fe:42:33:
                    b6:26:c2:fa:df:dd:b1:16:b2:f4:bb:cb:5e:3e:8f:
                    cd:70:c9:ec:88:52:40:1e:0c:a8:cd:4c:9e:e4:bf:
                    68:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:63:DF:4D:66:40:27:99:C8:BF:AC:AE:59:33:91:21:16:65:81:FD
            X509v3 Authority Key Identifier:
                keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e4:67:4b:7d:86:8e:a4:2a:b1:7e:4a:1f:ce:da:c8:b8:2c:
         0f:76:1b:c6:29:4e:c2:ef:6b:85:b3:56:5f:75:99:fb:c5:b5:
         46:5d:1e:d2:09:9c:e4:70:31:ff:b4:ac:4d:81:9f:d9:ee:78:
         2c:90:7b:28:d6:60:6a:ab:cb:8e:6f:4f:67:44:60:06:b3:d4:
         c3:ff:52:73:22:0c:27:a3:ee:fe:75:bd:f6:70:91:0f:cf:79:
         35:82:1c:73:db:87:bf:05:52:1e:c2:c8:d1:2f:93:cd:04:e6:
         96:d0:42:c0:aa:c0:b3:b4:39:b8:24:2c:41:bf:84:dc:c5:86:
         bd:9c:02:6b:49:0f:8a:04:97:15:62:9d:b2:d1:1e:3b:7f:9e:
         93:9c:f1:12:17:54:82:5d:7f:7a:ae:cf:29:91:68:e2:d4:3b:
         4c:fe:90:2c:46:20:54:25:50:f2:b5:bc:4a:2e:f4:a1:06:ac:
         41:e9:4e:b5:07:8d:48:be:3c:81:64:7e:e7:62:0d:63:74:63:
         c7:f9:ed:26:30:ea:6d:98:22:1e:6b:01:d1:8f:5a:67:1a:20:
         be:aa:24:58:de:22:f8:c1:9a:cf:64:ca:3b:e6:ce:a9:2a:c4:
         68:47:91:39:4d:0a:92:ca:14:58:9c:c2:0e:19:9d:e0:b4:db:
         7f:f2:14:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:35:51 2026 by rpki-client