Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
File:                     QbA1V5NRFBbxRwW15pV14JEgMcE.mft (raw, json)
Hash identifier:          ZodltnukIoCBUxHSvRt9vRTuM6sLGwOo9kS+T1GZ6NI=
Subject key identifier:   6A:6B:F3:14:F1:92:BE:04:CA:B5:8C:6B:21:98:8A:8A:82:88:90:24
Authority key identifier: 41:B0:35:57:93:51:14:16:F1:47:05:B5:E6:95:75:E0:91:20:31:C1
Certificate issuer:       /CN=41b0355793511416f14705b5e69575e0912031c1
Certificate serial:       01A06E02FD163999E29A9E028D67F6C8B5A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
Manifest number:          02CD
Signing time:             Fri 04 Sep 2026 20:01:24 +0000
Manifest this update:     Fri 04 Sep 2026 20:01:24 +0000
Manifest next update:     Sat 05 Sep 2026 20:01:24 +0000
Files and hashes:         1: QbA1V5NRFBbxRwW15pV14JEgMcE.crl (hash: YRPt1nCuJIR5OKQSgxzMw43oDuFa/tUXGKaZAn+h/N4=)
                          2: jDh_e5jFCb4SZSQr89DNuyR1GmA.roa (hash: OOgQec1GLUpiwLdlG2tPvtCo/oWMRbASwbpSjxC/PqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:02:fd:16:39:99:e2:9a:9e:02:8d:67:f6:c8:b5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b0355793511416f14705b5e69575e0912031c1
        Validity
            Not Before: Sep  4 20:01:24 2026 GMT
            Not After : Sep  5 20:01:24 2026 GMT
        Subject: CN=6a6bf314f192be04cab58c6b21988a8a82889024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:98:60:81:5d:e2:96:1f:ef:60:14:dd:2f:38:
                    6d:9f:96:4a:7e:54:58:91:df:67:b0:58:b7:11:ca:
                    c2:95:ee:8b:60:e5:9e:c8:54:f0:e0:26:f8:a5:80:
                    8b:40:d7:0c:aa:79:91:75:63:7a:11:db:fc:32:cb:
                    80:b6:1b:c7:52:5d:0a:41:6c:33:bc:5c:a0:20:34:
                    fc:57:5e:4e:68:c9:5d:b7:f6:f6:c5:18:2e:58:ab:
                    18:97:e4:4a:78:f8:97:c6:0a:d7:85:26:0e:53:a0:
                    76:08:ef:19:00:6f:93:c0:4e:c8:cf:36:07:5f:f6:
                    8d:84:a1:4c:54:78:a1:12:7c:1b:2c:a7:4b:6e:fd:
                    38:a3:e6:4b:32:ad:df:91:0c:9a:0b:e5:7e:63:fc:
                    d6:00:a8:1a:18:eb:ee:a3:53:59:65:bc:50:2a:88:
                    a1:a5:cf:88:26:a0:af:fb:3a:49:4c:df:05:8e:31:
                    51:80:d8:02:a5:35:34:e1:0f:e7:90:9a:2b:c6:88:
                    e3:3b:ca:8a:f8:79:48:6e:3e:3a:35:55:97:0c:89:
                    77:fe:b6:07:11:51:d1:a2:25:ee:a5:32:1f:73:72:
                    61:8f:a6:e4:84:b1:c9:2e:d1:46:11:7f:0f:f0:a8:
                    23:ca:ab:d4:6a:38:2c:98:03:29:79:ff:ac:50:06:
                    21:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6B:F3:14:F1:92:BE:04:CA:B5:8C:6B:21:98:8A:8A:82:88:90:24
            X509v3 Authority Key Identifier:
                keyid:41:B0:35:57:93:51:14:16:F1:47:05:B5:E6:95:75:E0:91:20:31:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:34:ad:b3:51:f4:80:7d:82:ca:c0:0b:ab:55:bb:2a:a2:0d:
         b6:98:42:59:21:ec:c1:d2:76:b3:3f:3a:8f:f5:d8:e5:ce:e7:
         8a:6e:86:4a:63:23:58:e3:d0:52:ed:5d:ed:d8:6e:02:a8:07:
         5d:1f:ff:4e:86:69:66:ae:ed:08:dc:76:4a:6a:68:b4:22:53:
         01:16:83:b7:b0:e2:54:76:8b:84:0b:6b:04:f8:67:30:12:3c:
         37:63:94:2a:dd:03:3e:06:ca:78:28:af:d7:a6:23:b6:91:86:
         6e:5e:08:fb:2f:a6:d1:0f:5e:ce:c7:50:1b:68:1b:5a:bb:cb:
         b2:ab:91:8e:72:b8:5e:23:f4:52:99:62:5f:d8:f1:cb:37:4c:
         5b:40:f4:ac:7c:ea:ee:e3:3e:05:7e:4a:26:0f:75:d1:43:44:
         c2:30:47:81:d6:d3:eb:bd:de:1a:d5:29:04:8b:de:14:14:4f:
         90:c2:8a:3c:0b:6e:ec:04:c8:f8:13:b2:24:eb:02:c4:67:5d:
         6f:57:fe:6d:1d:ed:f0:58:c2:0f:a0:4a:5d:73:f0:4e:b0:ff:
         bd:da:e9:fa:f4:b5:69:83:a6:21:bb:6f:8a:6e:d2:3e:1f:04:
         5e:9c:31:37:8f:06:e8:11:d6:a7:e6:a4:5a:6d:68:9c:13:4a:
         39:6b:c5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:45:07 2026 by rpki-client