Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
File:                     qmeCzXu5IspLxugOeFf0ki9cI8Q.mft (raw, json)
Hash identifier:          gEk5TqRXGJZSHJ9iT0vUjvG3egCHjSLC2KyB8mkAq2o=
Subject key identifier:   A0:C4:9D:7F:DC:0E:DA:84:46:2B:4C:7F:D1:C5:87:F9:26:9C:6C:C2
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Certificate issuer:       /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial:       01A16F493FE3A0F9577567D7BAC8C86AD621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
Manifest number:          04CD
Signing time:             Sat 24 Oct 2026 19:00:33 +0000
Manifest this update:     Sat 24 Oct 2026 19:00:33 +0000
Manifest next update:     Sun 25 Oct 2026 19:00:33 +0000
Files and hashes:         1: 8KhmWim7fQfJ5AAd7R4MgnmouFA.roa (hash: 8buKD0ZZ/SUyIgK6EsyebC1ig+JGEDdmvljz6uJr5T4=)
                          2: FdPkrQM5wJfWgwRztXidsCzsmxs.roa (hash: kySbmspJSgU7jUiKcEQCWmWkzi3UO7YjG6VncBVDrTg=)
                          3: qmeCzXu5IspLxugOeFf0ki9cI8Q.crl (hash: WApJFO7Zm8OH47O5jClwfd+ToIH13vg0sliZnXE0CuQ=)
                          4: sj-hv4O5_Z9peRXGM4t2YS9no0Q.roa (hash: Fng1VhmMN2AdS6GsFKTHTXU6+4yOuUH1ezrFYVymYmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 19:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6f:49:3f:e3:a0:f9:57:75:67:d7:ba:c8:c8:6a:d6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
        Validity
            Not Before: Oct 24 19:00:33 2026 GMT
            Not After : Oct 25 19:00:33 2026 GMT
        Subject: CN=a0c49d7fdc0eda84462b4c7fd1c587f9269c6cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:9f:08:38:98:77:84:a2:75:63:d2:ec:5e:
                    43:89:9d:87:0d:e7:25:d5:aa:ab:78:3e:d5:69:26:
                    f4:fd:45:e0:d1:4b:99:01:c4:c9:c2:c3:35:d4:b1:
                    8e:a0:63:80:56:e6:b9:d3:98:1b:8e:de:68:2a:93:
                    54:85:c2:01:3f:96:c4:33:c4:6f:23:b0:11:96:13:
                    2e:d0:02:05:1a:a8:c4:83:2a:3d:0b:f7:3a:d5:77:
                    61:b4:10:fa:5f:9f:07:7c:2c:11:9b:59:bf:a9:07:
                    a0:ba:ec:b8:92:f2:13:95:48:4f:50:00:b2:b5:df:
                    b3:e3:82:0b:71:d7:df:c4:f5:f8:7f:d7:b5:60:6c:
                    23:be:85:e3:3e:fb:a8:69:ae:6c:1f:65:3c:b6:26:
                    a6:83:41:b7:92:f2:a8:c2:13:24:0c:1f:a4:c5:cf:
                    60:3d:85:c3:2e:bd:fc:47:d6:f6:ea:f0:f4:fd:42:
                    f6:cb:77:1c:1d:20:9f:27:ab:d5:55:0e:28:7c:a9:
                    12:48:39:17:79:2d:6f:93:e9:d4:b2:91:20:8a:d5:
                    3c:6d:6f:55:8b:67:42:d7:7b:ee:9d:53:42:8c:83:
                    6b:b5:1c:5d:2f:75:fe:ca:c7:d7:c8:25:dc:19:64:
                    0e:0d:cd:6e:32:8a:07:ed:15:46:21:e0:e9:49:70:
                    f1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C4:9D:7F:DC:0E:DA:84:46:2B:4C:7F:D1:C5:87:F9:26:9C:6C:C2
            X509v3 Authority Key Identifier:
                keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:96:92:da:34:9f:ac:4e:3d:0e:72:91:c4:6c:1d:08:51:4d:
         7e:bf:95:a9:a5:fe:f0:bb:19:3a:83:7a:0e:b8:33:3a:2d:c9:
         87:5d:22:c4:7e:c8:f4:57:4b:74:ec:ce:77:95:62:c5:c2:28:
         40:99:c9:43:3f:20:7c:65:fa:0f:8c:ba:34:1f:5d:2b:53:c4:
         2c:83:bb:76:5f:bd:c4:02:4a:7b:81:30:74:e8:79:a7:90:27:
         55:a2:d7:0c:53:4b:af:9f:56:dc:e6:7b:b5:6e:ed:f3:5b:a7:
         92:85:b5:d1:fd:fe:e3:21:ec:92:c0:db:35:bc:69:5d:c2:e1:
         61:de:16:b9:2e:91:e2:5a:27:52:eb:1a:b7:99:3b:f5:92:1c:
         2d:06:b7:50:9b:7a:b0:81:9d:72:67:0b:5b:93:3c:fb:c0:82:
         dc:7a:39:5b:e7:d5:f0:df:b5:62:b5:c8:ca:7f:a9:89:77:71:
         7a:91:89:4c:cc:fb:2e:b4:f7:ef:c4:d2:3a:54:58:e5:25:cf:
         52:2e:3a:c8:79:9c:ec:49:67:ed:8d:a3:61:86:8d:17:02:1a:
         db:98:3d:62:a5:fe:d6:64:d5:7a:ee:64:e0:b5:bb:33:96:cd:
         b3:f6:22:c1:6e:6e:db:d8:13:40:fc:ad:fb:75:46:68:20:b6:
         0a:de:1e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:07:54 2026 by rpki-client