Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File:                     QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier:          5I9uZUiVJaBeRaBNNse9dAhJGab0kPFfsnfgN5bktA8=
Subject key identifier:   08:E2:57:CB:D2:FD:AE:DA:52:A5:BA:FF:99:BA:31:81:DF:ED:C6:DE
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer:       /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial:       01A16C7F563BF80F4145EA997EB033FCE339
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number:          1851
Signing time:             Sat 24 Oct 2026 06:00:46 +0000
Manifest this update:     Sat 24 Oct 2026 06:00:46 +0000
Manifest next update:     Sun 25 Oct 2026 06:00:46 +0000
Files and hashes:         1: LR4OEFuXJFG601CBDAdGi2eJuDA.roa (hash: NMogK1dWSLWZg8KRXWYMDcVAVexU5Hc8nklyuTVzNTg=)
                          2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: tPiWurpfbiIwga0T6uZkqOi72ibzGdJvC1OuekOQz/c=)
                          3: yLjJ3nLSiELitR79aZqorJ0E2nc.roa (hash: xtAiyE7KLrMeKdwMrZXmwAda9WUSSp0xD353CtNzkqA=)
                          4: zmI7itrZiL_gDQE-LI8VX6mhi3M.roa (hash: oaucdw8kxMg4EQDLP4CSccRXkWAvO6YKuvgDiVYtKOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 04:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6c:7f:56:3b:f8:0f:41:45:ea:99:7e:b0:33:fc:e3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
        Validity
            Not Before: Oct 24 06:00:46 2026 GMT
            Not After : Oct 25 06:00:46 2026 GMT
        Subject: CN=08e257cbd2fdaeda52a5baff99ba3181dfedc6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:17:65:a3:8d:f0:83:d9:e5:42:64:5d:b4:7e:
                    c4:aa:94:5d:78:91:00:9b:d8:dc:01:0a:b5:0b:2b:
                    61:14:1d:ea:e0:62:0a:5a:1a:ff:ae:bc:03:4e:d5:
                    ee:58:6e:55:dd:fe:4b:73:15:c4:a3:89:23:8a:bd:
                    f8:fd:09:7d:69:4e:04:90:ea:35:a6:65:5e:14:fe:
                    5b:74:08:a6:d5:77:35:5e:63:30:63:ce:9c:30:18:
                    33:8d:71:fb:84:a5:91:11:61:6b:7d:39:f0:50:96:
                    2c:f7:b0:f7:4e:69:74:3a:53:5e:1c:21:cc:48:50:
                    0b:45:79:90:9a:41:a2:c1:be:21:f4:27:41:49:2b:
                    d8:c9:3a:5b:56:05:ff:c3:ef:59:22:0c:9d:b9:58:
                    ea:03:aa:c1:1d:3b:11:07:f2:33:d8:8d:3d:64:be:
                    1a:ca:bc:ed:e0:cd:03:40:b2:be:28:9a:3d:5b:8d:
                    14:8c:f8:01:f9:7a:8b:f0:44:38:71:71:ba:08:39:
                    c8:8b:a4:20:fe:01:fc:05:10:34:c0:af:b5:f1:af:
                    02:22:0d:84:b6:03:c6:36:75:75:27:62:7f:13:1e:
                    b3:92:ed:83:e9:56:34:ec:ff:0c:07:f6:fe:48:f8:
                    6a:03:19:9d:db:cd:fe:cd:d2:9d:17:3b:90:3b:36:
                    08:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E2:57:CB:D2:FD:AE:DA:52:A5:BA:FF:99:BA:31:81:DF:ED:C6:DE
            X509v3 Authority Key Identifier:
                keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:de:b9:4b:4e:a0:33:a6:c9:65:fa:39:55:bd:2e:e8:b6:31:
         8b:29:22:f0:7b:52:9c:ff:ea:13:c9:0d:32:bb:cb:bb:71:76:
         3a:a2:49:fb:f5:e3:86:68:7c:fb:46:f4:4a:1b:1e:c3:7d:8b:
         ba:46:12:25:6d:76:1e:25:be:39:ad:40:e4:64:93:30:47:c2:
         5d:98:eb:94:54:d1:f4:bb:ae:cd:5b:6b:17:6e:a4:94:4f:a9:
         13:6c:80:10:74:a1:f1:99:22:92:38:cb:23:5a:53:66:fd:06:
         f6:c8:31:07:04:79:6a:6c:57:a6:4f:11:1e:16:52:be:c0:ad:
         48:16:cd:a1:d5:05:01:41:9a:c0:12:18:50:fd:8c:f3:88:a9:
         89:e5:06:b8:d4:90:f0:50:f5:df:6c:63:13:cc:21:fa:1f:4a:
         a8:ca:f1:ed:59:d9:96:84:b0:af:61:68:ef:0f:b7:a4:45:a6:
         07:af:03:72:aa:2a:30:55:8a:66:4c:6e:4b:ad:6c:ad:f6:18:
         15:53:31:d0:f2:06:41:c4:26:ca:72:a1:ad:83:f5:b4:95:20:
         db:a2:af:1b:85:f7:2b:ee:2b:aa:0e:94:da:d2:e9:02:b3:f6:
         3a:e5:84:80:15:6d:cc:bb:9f:c8:73:00:fa:eb:ea:3e:e2:b4:
         fb:6f:b8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:39:07 2026 by rpki-client