Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
File:                     qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json)
Hash identifier:          GFQ9kyeamLCEFFcRBAnfP+tmld15RSnspCa1IDPeqfQ=
Subject key identifier:   EB:B0:5C:54:26:36:50:72:71:EF:E7:8D:5A:62:68:BE:02:05:AF:6C
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Certificate issuer:       /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial:       01A06E707FF7A2C95FB4B786A3E27DE4341A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
Manifest number:          0E78
Signing time:             Fri 04 Sep 2026 22:01:01 +0000
Manifest this update:     Fri 04 Sep 2026 22:01:01 +0000
Manifest next update:     Sat 05 Sep 2026 22:01:01 +0000
Files and hashes:         1: 0UTNnPCaSBRChjd-4paFJAa8mvY.roa (hash: kU7KErkztorzfF4UTYyKtoYDyMlrOJjwkRRJcXS9JCM=)
                          2: 3XFseKD5P1HWKROwFzTd36OyHbE.roa (hash: BIeVIxGIOa2ePH8XQOOYNOlUDe/lxUqOSdtUmx3XDZE=)
                          3: 9kV8fUl_KriLSLVtxrkRq6q3Ix0.roa (hash: uExdYX2548cfGCpmCeNErn/kV2y3p/D6bqfR/PH26F0=)
                          4: eBB5lvjqAnBclLcWqTOlF_8lA7s.roa (hash: AOzQfZTfdGMYeAqIt8a663Hmw+/xidNofnCq2r4ivkQ=)
                          5: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: oh9ocbx75UaZyzNu8kUTQtvxhnb/RSD8yHG4ox56FCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:7f:f7:a2:c9:5f:b4:b7:86:a3:e2:7d:e4:34:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
        Validity
            Not Before: Sep  4 22:01:01 2026 GMT
            Not After : Sep  5 22:01:01 2026 GMT
        Subject: CN=ebb05c542636507271efe78d5a6268be0205af6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:af:7c:aa:12:a9:31:8e:ea:ef:e1:fe:a4:
                    25:37:83:c5:24:ff:f9:2b:c8:84:23:60:b2:83:10:
                    67:55:9a:52:90:19:07:38:da:ef:02:cf:f3:5e:17:
                    a0:5e:a2:b4:60:87:72:d4:ec:ed:0c:86:db:20:9a:
                    f8:f6:aa:9f:36:bc:83:96:6d:90:6f:a7:5f:6a:79:
                    83:ae:1d:ed:8d:82:39:b5:8d:bf:d2:61:62:68:52:
                    0e:e4:65:1a:cd:65:39:d3:c9:6e:55:23:1a:15:56:
                    5e:d6:9b:5a:27:c3:f9:3d:d3:06:c6:39:b2:97:50:
                    8c:8e:fc:fa:01:37:fa:e1:16:2b:ec:e8:e1:3b:9b:
                    9a:20:bb:5d:e9:1e:7a:78:4c:eb:cf:e2:e6:59:60:
                    85:65:40:ef:46:bc:5c:9f:8a:3a:5c:b9:4d:e2:1b:
                    f0:62:a1:d4:85:aa:20:ba:72:fa:41:58:bf:22:aa:
                    ee:35:24:5a:05:28:06:f6:38:f8:e4:93:20:78:50:
                    18:4f:d8:02:a2:8a:09:f0:42:48:30:3d:36:e0:07:
                    56:d2:33:a9:ac:a0:cb:5a:9c:62:3d:f5:d1:08:8e:
                    fb:39:65:b6:5f:53:34:95:7f:6c:09:9f:5b:d2:11:
                    ab:a7:70:4d:48:e7:be:b2:9d:cf:b0:fb:30:6f:4c:
                    cc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B0:5C:54:26:36:50:72:71:EF:E7:8D:5A:62:68:BE:02:05:AF:6C
            X509v3 Authority Key Identifier:
                keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:78:18:4e:5c:2f:31:8b:93:58:ca:ce:34:cb:5a:cd:fb:39:
         b2:4a:4d:9c:f5:cc:ff:57:91:35:eb:b2:3a:56:14:e3:b2:fc:
         09:80:35:1e:1c:2f:3a:29:f7:aa:3d:43:d2:bf:3c:20:1f:f9:
         be:86:29:94:0b:03:23:ef:8d:4e:58:14:02:5d:92:72:78:2b:
         d1:22:09:db:93:14:fb:c7:ae:e3:df:65:64:1a:2f:72:4d:51:
         23:b7:a5:28:81:e0:4b:30:c3:3e:68:18:54:8d:57:80:7b:5d:
         69:df:b5:98:e2:aa:8a:09:48:85:e4:92:a0:da:aa:d7:22:f0:
         89:40:5f:7c:f4:e2:b0:d8:43:6a:86:88:b3:15:27:a1:4c:71:
         bf:83:39:ba:7a:38:c9:da:da:49:47:36:31:7e:74:d2:25:fc:
         18:33:30:75:63:b4:0c:02:0f:3b:cb:42:a8:01:d4:94:3e:06:
         0e:83:71:4e:c8:5e:c2:14:7c:ce:53:29:05:db:69:68:25:f9:
         62:d6:60:b6:b1:39:9b:9c:d7:c2:61:24:e9:c0:4d:54:3c:96:
         ed:e5:7b:a5:1c:bd:e6:80:22:09:88:c8:3d:f3:af:94:cf:a0:
         4f:9e:30:58:f6:4e:a2:8f:02:99:e0:15:4f:29:39:8e:b4:79:
         49:02:e1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:26:41 2026 by rpki-client