Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
File:                     qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json)
Hash identifier:          utJKIOdOwBaTGtuozIxLQpYYvY93o0SxAs1Bp3RYbH8=
Subject key identifier:   9F:1F:08:64:2E:AF:8E:05:B1:2A:83:0E:8A:41:D0:DF:73:BB:35:F4
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Certificate issuer:       /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial:       01A180AB93A23F0EAFE21B9F39C7ECFDA7EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
Manifest number:          1A5B
Signing time:             Wed 28 Oct 2026 04:01:30 +0000
Manifest this update:     Wed 28 Oct 2026 04:01:30 +0000
Manifest next update:     Thu 29 Oct 2026 04:01:30 +0000
Files and hashes:         1: HJpn_J4PDoFUYqEVCWj0iQM-3k0.roa (hash: VJAIFmjRG0CrMBQmMTvTyvzSn9UbCMce42aoZ7KBzXY=)
                          2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: O9E3MInRE01s3buZDxdh37i2SoXEt98psrnS+ReCLoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 04:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:ab:93:a2:3f:0e:af:e2:1b:9f:39:c7:ec:fd:a7:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
        Validity
            Not Before: Oct 28 04:01:30 2026 GMT
            Not After : Oct 29 04:01:30 2026 GMT
        Subject: CN=9f1f08642eaf8e05b12a830e8a41d0df73bb35f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:84:92:8c:1c:a2:01:3b:89:d7:ae:37:47:f3:
                    9d:f0:55:86:d9:e5:4b:d5:32:f9:a1:00:c2:b9:70:
                    37:08:d7:cd:df:a7:7f:60:8c:ec:f1:46:42:f4:cc:
                    3e:70:a3:ec:96:1a:81:0d:b0:64:ce:39:ec:dd:d2:
                    1e:50:c0:f8:8b:0b:01:11:a1:e8:62:21:e2:14:40:
                    ef:4d:60:8c:14:08:b2:72:e3:36:05:d5:24:22:a3:
                    dc:12:d8:00:c4:37:90:a5:c3:1e:77:6c:c4:5d:f4:
                    fa:df:3e:cb:70:46:a0:4f:1e:e1:8d:b6:72:48:3a:
                    16:fc:3e:29:36:50:cb:b7:74:9f:82:bf:1f:79:bb:
                    ae:13:93:ac:5e:f4:b9:e0:52:0c:88:55:90:74:9f:
                    2a:bc:d2:58:3c:13:75:a1:08:05:a6:49:5c:e4:16:
                    9a:26:39:4b:dc:ac:11:90:dd:a5:ff:38:5a:5f:df:
                    18:03:d3:88:8a:1f:af:da:7b:aa:11:38:2f:e4:ff:
                    a5:2d:dc:31:bc:a0:46:3c:d2:9b:16:91:e3:64:2c:
                    a8:8d:04:e2:e8:21:b2:6d:bb:ce:6d:07:22:8e:b0:
                    7b:44:dc:eb:3a:1c:cb:3c:bb:01:57:bb:30:db:d5:
                    b5:5f:2f:52:68:c0:a2:2c:40:87:ae:8a:ef:60:34:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1F:08:64:2E:AF:8E:05:B1:2A:83:0E:8A:41:D0:DF:73:BB:35:F4
            X509v3 Authority Key Identifier:
                keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d5:e5:ac:2f:da:c5:76:ac:eb:a4:0a:4c:ba:75:57:5b:fd:
         d7:7d:c5:2b:6a:55:74:5f:84:48:c7:f8:64:4b:8c:f5:d2:fc:
         56:71:aa:71:2a:96:aa:72:48:2d:52:b5:ad:a0:1e:6f:ab:aa:
         c7:84:7b:d6:da:ad:fa:cb:84:ee:5c:33:e1:12:dd:19:3e:96:
         ae:d2:20:e6:d8:13:4d:c7:40:88:6f:ff:82:7b:1f:7a:d9:84:
         27:aa:ad:65:36:f6:6d:58:f5:b9:3a:82:da:b4:34:df:65:c6:
         dd:48:03:4f:bb:58:1d:6b:3d:d0:ca:ab:76:a5:4f:04:f0:7e:
         f0:7b:fc:a8:77:de:b0:2e:d0:f7:b1:30:e2:ba:7e:7a:f3:63:
         da:b3:1a:5f:14:25:05:0b:13:c9:60:38:f3:8b:cf:60:02:5b:
         8f:35:dc:31:7b:ef:3e:36:5d:f0:d7:6f:6b:fb:b1:b9:26:d8:
         6a:91:81:7a:5a:90:d5:bf:d1:52:a2:38:2b:2d:39:d0:fd:a0:
         49:d0:07:61:93:6f:ac:e1:fb:e6:51:69:3f:6d:1b:3d:d9:df:
         07:e9:82:3a:98:d3:c4:7f:f7:9d:d5:61:53:dc:d1:84:d9:26:
         56:08:61:fb:03:0d:86:4d:14:0d:6e:0c:54:61:d3:82:ab:f6:
         88:eb:89:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:36:52 2026 by rpki-client