Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
File:                     MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft (raw, json)
Hash identifier:          xrDksVX6DMyLA+kqQChysdN1MPCcV1ZtRFtNrpDOPJo=
Subject key identifier:   89:B5:0C:47:41:BF:C9:B7:7C:AA:10:D7:19:54:90:E4:89:41:3D:2B
Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
Certificate issuer:       /CN=31242850cad41cdf75a3c9d60b21fca543f74384
Certificate serial:       01A025B26AA381E419ABA32EEFDA31A3A14B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
Manifest number:          1A19
Signing time:             Fri 21 Aug 2026 19:00:44 +0000
Manifest this update:     Fri 21 Aug 2026 19:00:44 +0000
Manifest next update:     Sat 22 Aug 2026 19:00:44 +0000
Files and hashes:         1: I-BczlQ87u3cZxP5X5d_PlT55BM.asa (hash: DRlmLGJSRr+fe7px26Jne8q0/DHdNfMhrIjwQGGjyaI=)
                          2: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl (hash: RM9QY1iYNC9jk3Qp0O41qMVdzNd/gCwSpOFjM6fYws4=)
                          3: NaTtSMcFSdIxu8H6S2lvgqrJ0Uk.roa (hash: 3H1l6ys+xgmXRMr5rMXY56PSQg72vyKmuhKkZeQKlIw=)
                          4: Ov46GgLCmGN9cynwnomndLJK3rE.roa (hash: 4L/nJ8yxPDp+NjD2T6a5/b4C4w4UlasaJygLN6MYTus=)
                          5: UqRSxyomKtUymi7IXAoPkqqc9Mg.asa (hash: J1GRn2t62rZaNAhTHkwBgbzGS8c8siyOl252umE8GzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:25:b2:6a:a3:81:e4:19:ab:a3:2e:ef:da:31:a3:a1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384
        Validity
            Not Before: Aug 21 19:00:44 2026 GMT
            Not After : Aug 22 19:00:44 2026 GMT
        Subject: CN=89b50c4741bfc9b77caa10d7195490e489413d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f9:75:b5:0b:06:71:92:e8:a1:09:70:3a:67:
                    05:c5:f6:6d:47:95:d0:92:f9:bc:71:1c:0a:86:d8:
                    9f:06:07:f1:8d:ec:a5:53:67:8b:49:87:80:83:ab:
                    ec:cd:df:d9:b0:84:f3:41:90:3d:64:92:64:ba:c7:
                    63:d3:3c:29:8a:f7:64:04:22:e6:2d:8b:15:87:a6:
                    f4:2c:ed:89:03:a5:61:d2:95:ed:56:98:45:d1:6e:
                    f3:ca:40:ed:b0:63:83:83:c3:04:a7:b8:76:0e:06:
                    d7:d7:e7:ea:d9:61:31:8e:a5:cc:40:f4:2e:f7:b7:
                    c1:3e:28:1b:da:b8:73:d4:db:78:0e:f9:36:9a:60:
                    30:61:3b:8c:45:a7:f6:f0:32:bd:8d:84:cf:74:cf:
                    d2:3b:cd:53:4a:e5:69:42:92:85:e6:5b:79:ed:66:
                    88:c1:2e:b7:32:8c:db:56:e7:cb:7e:95:ab:46:e5:
                    ea:e4:22:58:79:21:55:7d:54:60:5f:67:fd:3b:6b:
                    5d:8d:48:28:54:64:69:81:9f:59:e3:77:55:3a:53:
                    27:7e:23:0f:4d:54:9d:01:7d:35:46:77:da:87:db:
                    c8:da:1a:43:ac:cf:be:e5:27:da:50:5a:ef:5f:44:
                    2d:5c:e6:ed:08:67:97:35:57:8f:7f:bd:5d:80:ea:
                    ae:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B5:0C:47:41:BF:C9:B7:7C:AA:10:D7:19:54:90:E4:89:41:3D:2B
            X509v3 Authority Key Identifier:
                keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:5a:ff:af:e7:d2:95:dc:2e:f8:42:07:37:f6:49:20:92:a2:
         f5:53:69:c5:0d:1b:98:a7:a4:0f:2a:87:c8:8b:43:d6:3c:45:
         05:75:dd:c0:a4:f6:3b:c0:b5:88:18:19:34:48:39:3c:5b:eb:
         15:e0:18:61:d1:28:7c:aa:c3:54:04:3d:05:00:b7:cc:50:d9:
         2f:8d:d0:d5:b7:f0:57:d2:d2:80:79:6f:7b:45:79:c5:91:a4:
         44:16:e8:ef:d2:ea:c0:7c:2b:77:14:96:72:5d:b7:62:0a:a3:
         ac:73:fb:f3:b0:bd:54:e2:6c:c1:df:21:21:b0:e4:f9:48:ee:
         94:4e:e6:21:72:4e:8a:4e:bd:32:0c:3c:1e:12:14:4f:08:11:
         7f:8e:88:72:f2:53:b5:aa:cf:fc:c7:9e:a8:53:31:21:8d:f0:
         c1:87:c9:5d:95:20:71:e6:9f:5a:fb:fd:dc:77:80:c6:1c:ac:
         4c:21:f1:fe:c9:a7:3d:a9:7e:09:c7:c6:42:a9:e2:66:9f:62:
         79:52:14:36:cc:59:df:72:70:17:96:c4:9a:93:e3:09:e7:cf:
         e3:0f:66:c0:4e:fb:b7:88:e4:41:82:61:ce:44:17:4a:15:74:
         cb:cf:35:76:c7:5c:e6:70:70:17:81:9c:5a:7a:77:5e:ce:10:
         c4:56:32:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:10:08 2026 by rpki-client