Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
File:                     QpxUvh2n5zjjyW_7QfHqOQCme-g.mft (raw, json)
Hash identifier:          ErUjRrsqcwTuOw7F4TTRYKQocSrL4zF498kl7tYGnLY=
Subject key identifier:   E2:7A:A6:A7:79:D1:0A:0E:AF:3D:A8:97:B9:09:F6:0C:4E:C5:E6:2E
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Certificate issuer:       /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial:       019FFAC8BDAC3A3FB75BCB189B45CDB989FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
Manifest number:          1A02
Signing time:             Thu 13 Aug 2026 11:01:27 +0000
Manifest this update:     Thu 13 Aug 2026 11:01:27 +0000
Manifest next update:     Fri 14 Aug 2026 11:01:27 +0000
Files and hashes:         1: 1ZIz7YN38-qhWIRp9vEMaUVo4QI.roa (hash: 9n+bNBmpRuyTg1duJe1cszusX19nYZTZjRrw7qApMWA=)
                          2: 6wrwVwIOmyHRFv2kHnVse0hIMz0.roa (hash: 3Bl4eyRcujw6eiEUMKOOuOVx73Mu069CKt56gjYDvno=)
                          3: MaMuRhJpZN3sUs2ReczUrxtPqog.roa (hash: CIDmAVgYtghMXGXHEdC7pvKkJAeXg2JMbpBDZ4AJ2O8=)
                          4: QpxUvh2n5zjjyW_7QfHqOQCme-g.crl (hash: AGGyjTLk8CIj1hGokUky21bekC6PgqS1R7mLYA98MHg=)
                          5: u-TU9G3PdLn2qXtYJqzV7mCbrOE.roa (hash: aE5QPdx1k0+mZxz3uvB3CV2aBguWuJ+V39vAnK3fkyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fa:c8:bd:ac:3a:3f:b7:5b:cb:18:9b:45:cd:b9:89:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
        Validity
            Not Before: Aug 13 11:01:27 2026 GMT
            Not After : Aug 14 11:01:27 2026 GMT
        Subject: CN=e27aa6a779d10a0eaf3da897b909f60c4ec5e62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:77:76:d3:e7:17:82:7f:19:17:35:7d:40:
                    8c:1d:84:dc:a5:8f:63:28:35:39:5c:5b:bd:68:6f:
                    10:02:1f:78:1a:20:4d:20:c7:9e:f6:93:c1:22:e6:
                    d3:62:83:6a:bb:9b:95:94:a0:39:2f:37:84:96:7c:
                    0b:2d:82:f6:ef:36:c1:e5:b9:91:c9:eb:e5:de:51:
                    29:d1:e2:77:65:07:f3:ec:0c:4d:b9:d6:f6:db:95:
                    a6:aa:38:06:af:d8:40:e7:03:61:61:e6:22:91:9c:
                    28:7f:c6:73:b7:45:cc:2f:a8:ef:58:66:a6:26:6c:
                    f4:4e:98:77:3f:10:48:e1:20:87:8e:e1:4f:c4:fe:
                    81:df:ab:76:5c:07:9d:d1:a5:bd:21:25:9d:37:aa:
                    23:25:58:d2:de:1d:0d:4e:b1:ba:71:b8:01:14:47:
                    cc:69:fe:f1:35:7f:d7:e9:d2:fc:a6:e8:d2:69:c8:
                    30:ce:6a:72:73:a8:5c:c5:ad:36:ca:c0:fb:63:83:
                    88:70:19:6b:b9:2a:d5:86:b7:80:93:83:e3:7e:f4:
                    3d:5b:4c:a4:92:06:6a:b0:fd:fe:82:37:3f:a8:9b:
                    49:b9:ab:d0:56:ac:fd:ea:fb:04:42:36:7f:7e:dc:
                    a6:26:19:17:0e:8e:81:f6:d0:3c:3a:35:57:99:4a:
                    f2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7A:A6:A7:79:D1:0A:0E:AF:3D:A8:97:B9:09:F6:0C:4E:C5:E6:2E
            X509v3 Authority Key Identifier:
                keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:f2:45:91:93:1f:ea:38:4c:ab:46:e2:4e:81:3a:5a:5e:a6:
         01:98:cc:00:5e:7d:e7:cc:80:2c:91:9b:aa:4a:e2:a7:b4:c6:
         32:9b:f8:3e:5b:f8:a7:bd:8a:c9:84:63:46:f6:98:78:5f:25:
         3c:38:3e:9a:73:47:7f:58:53:3a:16:60:5a:e5:52:6e:77:3e:
         f3:bc:96:7c:19:f1:88:b5:95:f6:a9:de:9c:34:1a:a5:2a:15:
         c4:37:bf:1e:30:a6:1f:cf:db:55:53:35:fb:06:ec:12:b8:85:
         33:30:b5:e4:4d:15:0a:73:0a:d1:fb:45:fd:3c:cf:62:44:1e:
         3f:c4:de:33:cc:08:aa:dc:51:cf:93:22:9c:fd:44:38:6e:00:
         7c:0e:92:3a:b7:ad:ed:3e:c6:10:8e:4a:8b:66:91:49:bb:5c:
         87:f5:74:b6:2c:67:8f:36:9c:72:40:98:f3:b4:59:e3:c9:3d:
         a9:dd:49:83:a8:a0:a9:2f:cf:70:3f:a2:17:43:73:c4:66:98:
         ac:2b:63:cf:4d:d2:78:11:c8:02:e7:f1:4c:57:b6:dd:4f:ce:
         04:2c:f1:27:5a:1d:5f:76:f5:76:db:6a:f1:c9:b3:74:4d:56:
         0f:c6:47:dd:23:a4:a8:61:f0:43:74:da:b0:98:aa:c0:46:5c:
         59:94:03:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:24:21 2026 by rpki-client