Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
File:                     9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft (raw, json)
Hash identifier:          Gw/5oOMI1HV4wDWzptkfGstKyloxS9Xhf0HkUBque2w=
Subject key identifier:   7A:E6:96:56:B4:6C:D9:45:AA:CD:4D:A3:98:0D:D9:C4:96:E1:63:74
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Certificate issuer:       /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial:       01A1076F13ED2682BC5CD53C4140228D98C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
Manifest number:          1A90
Signing time:             Sun 04 Oct 2026 15:01:22 +0000
Manifest this update:     Sun 04 Oct 2026 15:01:22 +0000
Manifest next update:     Mon 05 Oct 2026 15:01:22 +0000
Files and hashes:         1: 1JViNUEn6ga0QROJtxU4AEvMLww.roa (hash: jcckW1pekqq2a3ZEiyHcZr/yXCAySkb6WGxv2ggL9FI=)
                          2: 5c-tVeqgckJuAp6JbI43ZWb85Ik.roa (hash: cjN5erR2DEEsrEuY7GbmW+pLwmDRQL+9OgSiLHhDtIc=)
                          3: 9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl (hash: 3NMC42ZABmkKcECXjXImb/yDiENgfuvlEwxJIrSRdA0=)
                          4: SiBbiHVr7AC0u90Fwok04bc86Is.roa (hash: IBa2+mQ/TjNwKvca48jtPUnqiSXDlYjx7SDm3vYP5Ys=)
                          5: YbDK1kvvrk8Ho1IdJerxyMGANJQ.roa (hash: m/hv4iobL1Tq4Hnl7IKJyfEevy78U6kNT70maANZhgM=)
                          6: i_WQhoivfiPNt_r8E0ASaD2knr0.roa (hash: ZsmBZD3QOznmcRlV4BtsmhxZ3ocoJk7WQB1P/qL5Ad0=)
                          7: zRYCcQ03Zo7Mtjwf5o0jfcWViDY.roa (hash: hObMfSwMh57HZlCx8OTlbluNMpET5Cy14GAtqwnhGDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:6f:13:ed:26:82:bc:5c:d5:3c:41:40:22:8d:98:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
        Validity
            Not Before: Oct  4 15:01:22 2026 GMT
            Not After : Oct  5 15:01:22 2026 GMT
        Subject: CN=7ae69656b46cd945aacd4da3980dd9c496e16374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:41:7b:de:3e:0d:1b:00:06:ba:d7:4b:59:2c:
                    4c:ee:33:ab:b9:e7:a6:90:2b:28:8d:48:0c:1e:a3:
                    0a:f8:be:e6:1d:19:6a:98:80:fb:15:3d:46:cd:72:
                    02:dd:0c:9a:d0:6d:63:b8:58:42:f4:a0:0f:f8:2b:
                    93:4e:2f:07:33:1e:e7:27:04:80:33:ef:8d:e0:92:
                    0c:58:da:01:54:9e:cc:6f:c6:ef:6a:1d:f3:b1:3a:
                    84:c3:39:40:12:2a:9a:8a:1e:ba:ad:46:8f:5a:aa:
                    13:9d:99:50:1a:60:4b:17:a6:36:44:3b:cb:64:62:
                    8c:7c:bf:03:6e:89:c5:69:e9:8f:fd:ae:62:56:08:
                    9c:96:9b:86:5c:f4:be:fd:21:9d:27:74:20:15:8c:
                    83:d2:2c:8e:2b:c2:6b:a3:86:35:94:01:e0:d4:da:
                    86:ea:f9:ed:3c:11:1c:2b:c6:85:1f:39:fa:67:98:
                    43:17:79:a9:57:2b:f3:90:90:4e:cc:47:43:6c:c5:
                    14:75:27:be:95:8d:4b:d3:ef:74:92:3a:d4:de:86:
                    19:2f:85:47:a7:86:fe:11:b7:3d:ba:bb:6b:91:cd:
                    bd:82:29:e9:a4:0a:13:08:36:d8:80:02:02:b3:15:
                    55:e9:a7:64:e9:99:1f:58:4f:b2:84:54:5d:a1:98:
                    20:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E6:96:56:B4:6C:D9:45:AA:CD:4D:A3:98:0D:D9:C4:96:E1:63:74
            X509v3 Authority Key Identifier:
                keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:15:89:4b:36:e6:da:37:4e:de:69:e0:9e:88:81:f0:34:43:
         5d:39:c3:f3:86:af:bc:91:25:a0:a1:bc:a4:3e:97:30:bb:c4:
         b1:0c:90:b2:49:b3:57:80:49:f4:31:09:c9:89:62:aa:d7:86:
         2b:9d:66:42:63:14:96:d4:4c:8b:af:2b:74:a7:8c:b4:2b:05:
         fd:a8:68:9e:53:c3:7d:0b:7c:3d:af:c4:6c:22:b1:42:1d:7e:
         8a:a8:fe:b4:ab:77:ef:8e:d5:9e:82:2e:d0:03:5f:9b:3f:e3:
         0b:10:15:a7:5f:82:14:82:ea:40:4d:78:87:ae:de:84:6c:61:
         15:b9:5f:e7:7a:b3:f1:62:b3:66:ed:cc:17:b6:7e:f7:27:90:
         7f:aa:76:28:10:59:ef:15:2c:ea:40:e2:37:3c:ec:e2:b2:eb:
         e0:1a:9a:fc:05:c9:09:00:4e:83:15:f4:69:63:10:b1:08:16:
         87:5b:20:f6:5a:95:c2:65:50:bc:08:3a:c8:c4:c8:8d:68:7a:
         42:bf:e0:61:e9:0f:02:c2:ba:0c:7d:50:8d:98:cc:02:dc:e8:
         9d:b9:28:37:d7:bc:27:be:3e:89:55:52:47:01:92:4b:94:53:
         1c:48:f4:1e:22:64:de:91:88:6b:a0:90:52:ff:9b:cf:92:f4:
         cd:1e:7b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:14:12 2026 by rpki-client