Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
File:                     quDn_oLDpsQmokwM_6ILDjowT6I.mft (raw, json)
Hash identifier:          sTiZoeQw82i6AA0DxgNM+VY433e3/N1RwZ6GBSagE3E=
Subject key identifier:   3F:40:CB:88:D2:99:03:89:F6:93:C1:74:AD:F2:58:97:04:F5:0E:1D
Authority key identifier: AA:E0:E7:FE:82:C3:A6:C4:26:A2:4C:0C:FF:A2:0B:0E:3A:30:4F:A2
Certificate issuer:       /CN=aae0e7fe82c3a6c426a24c0cffa20b0e3a304fa2
Certificate serial:       01A06D95BCF4B0CF490D37603C3A78ECF25B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
Manifest number:          B2
Signing time:             Fri 04 Sep 2026 18:02:04 +0000
Manifest this update:     Fri 04 Sep 2026 18:02:04 +0000
Manifest next update:     Sat 05 Sep 2026 18:02:04 +0000
Files and hashes:         1: UL8l5IwcVO4oalkF_m08Q-lh138.roa (hash: Ft4/BZpxSn/GVsZnEbmyHTlyfLxd+14L0O7a+0FPi2w=)
                          2: quDn_oLDpsQmokwM_6ILDjowT6I.crl (hash: J32BeHATRpB4z7VxDvkL7N/o6ig1irR92DBGjl93EoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:95:bc:f4:b0:cf:49:0d:37:60:3c:3a:78:ec:f2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae0e7fe82c3a6c426a24c0cffa20b0e3a304fa2
        Validity
            Not Before: Sep  4 18:02:04 2026 GMT
            Not After : Sep  5 18:02:04 2026 GMT
        Subject: CN=3f40cb88d2990389f693c174adf2589704f50e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:81:85:ef:48:c6:54:16:eb:c6:3e:25:01:e5:
                    dc:21:fa:22:d8:77:7c:91:3c:d9:76:06:ff:b8:95:
                    58:75:73:32:83:02:48:56:a1:e1:11:9b:1a:ed:67:
                    5a:ad:26:73:f4:db:cc:d9:29:76:3e:59:99:52:2b:
                    43:d0:0f:00:73:b3:03:30:85:43:0d:6c:a9:86:54:
                    8b:31:81:73:8b:50:09:7c:f2:bb:49:77:3c:23:a8:
                    d9:6e:ae:7c:57:28:54:6b:76:ca:3f:1d:13:42:50:
                    05:92:6a:49:fb:d7:92:12:6e:ac:d8:87:05:2b:47:
                    ed:5b:e4:b6:dc:91:40:d4:81:65:94:53:32:fa:d2:
                    a8:4e:e9:ce:4e:dc:15:cf:49:5d:a3:b8:6f:e8:ce:
                    32:c0:a9:1b:35:f7:a0:ed:b2:c4:39:db:76:b4:c2:
                    a0:ab:80:9a:f1:28:48:0e:e5:9e:6d:70:87:77:f7:
                    82:b2:cb:06:de:10:5b:1b:9b:a1:a1:80:41:24:36:
                    a4:ab:8d:bd:f0:51:82:2a:31:3a:64:b8:73:ff:41:
                    d4:92:05:0d:72:d5:92:c6:3b:a6:4f:c8:68:1f:88:
                    1b:61:32:15:75:8d:d3:eb:8c:1c:a8:0b:81:49:26:
                    4e:0d:e5:b5:6c:fd:f0:44:70:65:70:2f:d9:24:6c:
                    09:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:40:CB:88:D2:99:03:89:F6:93:C1:74:AD:F2:58:97:04:F5:0E:1D
            X509v3 Authority Key Identifier:
                keyid:AA:E0:E7:FE:82:C3:A6:C4:26:A2:4C:0C:FF:A2:0B:0E:3A:30:4F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ed:c7:fd:0f:98:74:bc:8b:f8:d3:fe:ee:7a:74:bc:12:a5:
         a7:5e:f1:fc:55:47:7b:cd:10:61:f5:8e:45:36:fa:bb:65:7d:
         fd:2a:22:ac:e5:df:38:ab:d9:a2:96:e0:8d:e4:5f:d0:82:5a:
         1e:6e:d2:62:9d:71:67:c4:cc:a5:e3:35:93:7a:3c:16:34:12:
         6d:4c:77:fd:46:e2:31:42:b5:ab:e9:44:1d:cc:ed:f4:04:7a:
         9c:9c:b5:1a:04:ea:23:d4:22:96:ac:4e:e9:b2:f2:9f:43:8c:
         ef:a9:5b:a4:af:f1:ac:20:bf:0d:41:3c:d0:1f:ee:7f:26:1b:
         50:92:a8:37:35:b9:9f:56:f7:73:4a:d7:5e:5c:7b:88:62:8b:
         01:4c:07:2d:84:05:85:1d:41:44:29:ae:d0:21:f5:24:82:b2:
         34:e7:58:82:73:a7:07:bf:38:95:c0:af:64:48:aa:d8:01:67:
         4e:20:97:6d:48:b4:ef:17:98:42:47:e6:27:5f:07:d5:3b:b4:
         6a:d8:93:fb:1e:d3:5f:79:e2:90:ff:c8:f0:3f:5e:84:06:37:
         6d:20:c6:c5:3e:94:df:79:b4:c1:e1:0a:2b:62:8c:63:f3:c1:
         a4:18:c5:36:51:74:a9:8e:23:6c:2b:4b:93:22:ac:57:e9:3c:
         ca:27:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:04:08 2026 by rpki-client