Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
File:                     qqMUWS716ou-hNBkslYXH-KvyD4.mft (raw, json)
Hash identifier:          cVQZ+8PbtLPxW3F2WWS3YEn0VizwP6tPh9OZEizbdvs=
Subject key identifier:   6F:9C:AD:1D:74:B5:D6:AE:1D:0A:6E:C4:4B:7B:6C:69:8A:FD:AF:A0
Authority key identifier: AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E
Certificate issuer:       /CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
Certificate serial:       01A17E180EB0CEDFA3373C4A436D29A9A9E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
Manifest number:          0F48
Signing time:             Tue 27 Oct 2026 16:01:08 +0000
Manifest this update:     Tue 27 Oct 2026 16:01:08 +0000
Manifest next update:     Wed 28 Oct 2026 16:01:08 +0000
Files and hashes:         1: 1y4mjCjd3yaeU16gh_uU_xDclvA.roa (hash: akVEsaylTtagPHzHitk7WCUHGfvzfwDTl/6FhQXu8p4=)
                          2: qqMUWS716ou-hNBkslYXH-KvyD4.crl (hash: k/tDzHg2HaNkWaOqT8xvZVnn+SI0FdvtrJ4OkDfLtxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:18:0e:b0:ce:df:a3:37:3c:4a:43:6d:29:a9:a9:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
        Validity
            Not Before: Oct 27 16:01:08 2026 GMT
            Not After : Oct 28 16:01:08 2026 GMT
        Subject: CN=6f9cad1d74b5d6ae1d0a6ec44b7b6c698afdafa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:27:21:4c:22:7e:d7:b1:cc:d7:61:7a:f4:
                    96:a3:1b:6d:8e:86:44:52:e7:c0:5e:c8:3c:0c:42:
                    d1:83:a7:fd:75:a9:64:17:c5:1c:52:60:03:b6:9c:
                    fe:cb:a4:f9:5d:b2:03:a2:8b:d3:74:a4:c6:dd:2d:
                    fe:bc:83:fc:ce:f6:2b:44:7e:c7:e8:5f:fb:52:c8:
                    0e:2c:92:16:2b:05:ae:b7:95:14:45:7e:9e:a8:f4:
                    5c:c8:21:e9:d5:ba:8a:71:a6:5a:0d:cd:7f:e0:73:
                    6a:8d:ca:bd:23:49:d2:f2:59:80:ed:71:e9:42:d3:
                    e9:47:f6:84:3f:68:06:d4:d1:33:19:01:08:97:63:
                    8b:44:60:27:9c:ec:e8:2c:f8:5a:f1:2f:aa:34:2b:
                    39:1a:37:41:e0:31:93:ad:f2:aa:f7:ac:ee:e6:31:
                    31:54:96:ec:cc:5c:b3:38:b3:c1:f2:f0:a9:87:56:
                    c5:e3:f7:19:2e:2b:06:02:1e:d6:d9:1c:b9:27:b8:
                    95:5d:02:aa:08:44:9d:5a:6b:cf:67:06:ff:01:ef:
                    d9:a1:6d:86:3a:ba:12:6a:b7:a9:40:f3:ac:1b:34:
                    d3:4a:10:09:f4:3d:77:7c:4c:6d:41:5b:bb:f6:47:
                    ba:80:0d:f8:5f:78:63:85:b4:58:af:db:ee:9a:25:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9C:AD:1D:74:B5:D6:AE:1D:0A:6E:C4:4B:7B:6C:69:8A:FD:AF:A0
            X509v3 Authority Key Identifier:
                keyid:AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:da:47:84:b2:db:e4:94:02:33:81:2e:51:4a:89:7a:af:8c:
         6e:da:ed:85:d9:8d:5e:1d:47:51:d6:57:b0:66:82:b3:bd:45:
         e8:8b:67:06:7c:01:55:ac:42:f5:83:ff:7c:d9:1d:70:ed:d2:
         ba:1e:35:dc:49:69:e2:35:28:3f:ee:ac:62:b9:a9:1a:24:f0:
         ca:fb:0a:96:58:38:98:27:9a:c8:ef:87:c6:89:02:a9:ca:12:
         d8:70:64:df:03:7a:2c:67:ac:60:f0:d9:73:63:bc:0b:f2:df:
         0f:56:b6:b7:e6:f3:1c:12:9e:6a:a0:e1:7b:e1:52:e4:83:39:
         a5:b0:07:80:3c:78:28:f7:6e:02:4d:94:ff:55:7b:65:83:24:
         12:a2:41:6f:21:9c:50:b0:e7:1c:78:6b:63:ea:9a:14:46:88:
         24:0b:09:ba:27:91:67:d7:9f:6c:0d:55:0c:5a:12:99:73:8b:
         8b:cc:e5:12:9a:a2:27:ff:a6:d5:0b:a4:25:1e:5d:4a:b4:7d:
         8a:81:d6:38:ce:36:4f:ff:3a:07:2e:80:91:72:36:c7:c2:e9:
         e7:ec:0e:d8:f5:da:51:b7:0c:b7:1b:ef:07:34:21:ca:5c:41:
         19:09:2e:00:8b:bf:e7:99:14:3f:3d:9d:8d:ea:70:40:0b:79:
         40:fb:40:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:43:31 2026 by rpki-client