Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
File:                     qfL96iY7efzhE4kFKwzZQJlcbf4.mft (raw, json)
Hash identifier:          Gk9fArkaXYB2jlEZbzckYxIb+5otks9j33pkMrL/w+s=
Subject key identifier:   37:AE:C6:A4:88:49:C7:E6:17:A0:72:AC:A9:99:44:4D:9C:46:75:0C
Authority key identifier: A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE
Certificate issuer:       /CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
Certificate serial:       019FF8DAD35BCABF490B5E43164BB662A99D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
Manifest number:          108B
Signing time:             Thu 13 Aug 2026 02:01:58 +0000
Manifest this update:     Thu 13 Aug 2026 02:01:58 +0000
Manifest next update:     Fri 14 Aug 2026 02:01:58 +0000
Files and hashes:         1: JLgki92L26vgomF3wfSSuh1nDvo.roa (hash: CiXEqBng4Y1tHGwa/wiL3CgsnavhpNvBwwl4OGe5/4I=)
                          2: fKbITxoxfBmzkn5iR0VgygDPyi0.roa (hash: KdtKUNbFJJYqnd0wx10wIIQRBQE9tIaSTN//dYTfeQQ=)
                          3: m6hIErNMpBZVw2qZHKcW2BJUVwg.roa (hash: CKojvhqXdroeSLPSwIAOGazGVtOAtTG05hf6NLW4WCs=)
                          4: ocw_BBxIJP-smvsjjHlRI4OwJoM.asa (hash: jTBI9bfwd8slmcdg7hpOqbFV9Nphy56wHWVhFsowoyM=)
                          5: qfL96iY7efzhE4kFKwzZQJlcbf4.crl (hash: MyqkXTVAONf04gGb8+RbZ8R/R+uqTlP4SQlI9bO5Ixo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:da:d3:5b:ca:bf:49:0b:5e:43:16:4b:b6:62:a9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9f2fdea263b79fce11389052b0cd940995c6dfe
        Validity
            Not Before: Aug 13 02:01:58 2026 GMT
            Not After : Aug 14 02:01:58 2026 GMT
        Subject: CN=37aec6a48849c7e617a072aca999444d9c46750c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b2:1d:83:24:b3:13:34:5a:c3:b7:da:f2:11:
                    da:fd:e4:e3:0b:11:2d:1c:ef:54:ab:8a:63:fa:6c:
                    9e:54:94:70:d7:fd:56:2c:c5:dd:0b:e6:00:0b:28:
                    dc:11:86:9a:88:d5:58:9a:7b:31:8a:ad:b7:3b:f5:
                    18:b9:05:c9:f7:63:ba:c2:b4:c0:7b:b7:7a:df:2d:
                    d0:ff:c0:9d:9c:b2:33:fd:2c:37:40:63:cd:f6:f0:
                    52:8d:65:f1:16:4a:2e:23:1c:77:4e:d0:81:a5:91:
                    67:d9:77:0d:43:ff:dc:a4:0a:f1:77:43:6f:a1:c5:
                    92:ba:82:b0:79:cd:24:09:25:6e:64:a5:88:86:92:
                    b3:0e:84:d4:ed:35:26:50:25:1c:ff:36:d5:1a:d7:
                    2a:db:88:fa:37:92:a2:3f:2e:d7:ed:56:c1:84:72:
                    a8:51:87:9a:08:ff:63:5e:f2:1e:f4:83:19:c8:19:
                    2f:29:f2:1d:f8:67:52:e8:65:41:cf:5a:7d:73:78:
                    9c:44:53:42:f4:f4:60:ce:39:09:69:c0:47:fc:2d:
                    84:d5:f3:1e:9f:bb:e0:dc:80:5f:31:3d:19:ec:9a:
                    98:fb:b8:7a:50:bf:46:7c:29:9f:af:f1:5f:c1:6a:
                    a7:a9:ff:e0:6a:a4:bc:46:01:93:04:b8:af:2c:86:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AE:C6:A4:88:49:C7:E6:17:A0:72:AC:A9:99:44:4D:9C:46:75:0C
            X509v3 Authority Key Identifier:
                keyid:A9:F2:FD:EA:26:3B:79:FC:E1:13:89:05:2B:0C:D9:40:99:5C:6D:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfL96iY7efzhE4kFKwzZQJlcbf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/53ff62-c1ad-4244-b91a-f8affef112d8/1/qfL96iY7efzhE4kFKwzZQJlcbf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:dd:f2:86:ef:50:a1:d0:4c:24:0b:f6:cc:5f:f2:cc:9c:30:
         0d:40:11:bc:95:7f:8a:d5:f2:05:32:e0:6a:95:30:35:ec:d0:
         e5:d2:9e:1a:82:45:65:07:53:e3:e5:1c:d9:55:67:cf:21:56:
         82:66:d9:f5:f4:00:07:79:93:61:85:f8:60:02:a5:36:00:15:
         46:b7:07:bc:c5:36:2f:db:9f:d2:51:88:72:ed:90:09:ae:df:
         a5:6e:a5:b4:73:59:4d:fc:df:3c:ef:f4:45:69:60:7a:a6:da:
         7e:f1:1a:76:34:c1:cc:2f:ef:74:f6:9d:1f:c9:fa:26:c0:73:
         d6:e4:a1:e4:3f:32:a4:b1:46:ee:d1:59:58:e3:bc:cf:f0:1b:
         73:52:32:38:33:d9:a1:3f:da:7c:a3:fc:6d:37:57:ea:6f:85:
         be:9e:1e:79:97:ac:0b:99:ca:d5:d1:5b:b0:03:7d:4a:ce:26:
         ce:c3:7a:56:7c:14:10:3a:38:a5:bf:2b:4d:87:76:bf:e5:c9:
         6b:fc:68:f1:f2:fd:59:9f:4c:c4:c5:54:bd:b5:60:33:58:ba:
         0f:c4:af:36:69:34:bf:5d:4d:ec:9a:ec:c1:eb:0a:91:5e:8e:
         db:50:6b:a9:e8:18:1b:62:31:b0:0e:70:25:af:ec:b3:9e:0f:
         83:4e:d3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:00:12 2026 by rpki-client