Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File:                     qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier:          56R2IBTHIhkok1qx4y1G7t7sCos3/EZdezpI6UTbKtE=
Subject key identifier:   6D:09:CD:82:90:81:1D:EE:08:46:09:C2:99:00:FB:8D:18:F4:CD:9C
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer:       /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial:       01A17C291D188157158AE86FB87223EC4E6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number:          13E3
Signing time:             Tue 27 Oct 2026 07:00:31 +0000
Manifest this update:     Tue 27 Oct 2026 07:00:31 +0000
Manifest next update:     Wed 28 Oct 2026 07:00:31 +0000
Files and hashes:         1: 2laheRZxUjH9nDxMrHlm80h7z5Q.roa (hash: iosXrqOVeIIOelMUJUYMuylT0ggApUkiu1y8GJhCfso=)
                          2: NotYCgUHoY2zetpjr5kSm9qBY_k.roa (hash: oJRB8iWYyMlRGM13QOWyb/5+9ImlksyZccjTnLMZZYE=)
                          3: YOBJXpEHAMny3YxgbXhGFE9H1Dc.roa (hash: ubjGl6NH+8cXpUPkiXxOW4R61YalXFLiA+y8Gn0QEic=)
                          4: qCMtdNbgJxgOSQYV3tEUbqIOdY8.roa (hash: r+cNCVi+xN//eSGsdFZSqHcQfWONCTfSi30h0I+XoMk=)
                          5: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: uYVk2B8WGyFj5qbSzhS8JGIVzmMBhGCeUodVzDMvdzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:29:1d:18:81:57:15:8a:e8:6f:b8:72:23:ec:4e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
        Validity
            Not Before: Oct 27 07:00:31 2026 GMT
            Not After : Oct 28 07:00:31 2026 GMT
        Subject: CN=6d09cd8290811dee084609c29900fb8d18f4cd9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6f:48:5d:c9:ff:15:8a:6b:69:26:67:b4:2e:
                    b0:ee:1f:28:12:ad:c4:6f:57:45:b7:32:f1:84:55:
                    ef:ed:1a:ac:00:70:f1:39:84:49:c5:b5:5b:9b:d1:
                    80:b9:6c:2b:79:bc:d9:48:86:48:58:62:fe:94:bc:
                    f4:7a:8b:ec:ad:39:dc:b3:fc:7c:9d:50:b8:86:b7:
                    00:1a:cb:2f:42:50:c6:0d:eb:25:be:73:21:8f:e4:
                    eb:c4:27:04:d1:d2:cf:50:81:bf:19:c8:43:cd:7d:
                    fb:a7:68:37:d8:5d:82:25:e7:23:b4:d3:3c:c7:f8:
                    64:79:32:83:60:ec:55:a0:f7:ec:c0:0b:ff:8f:40:
                    a7:52:d8:a8:0d:61:e5:7e:8f:9f:ed:93:63:a1:fc:
                    e3:7e:20:9a:8a:dd:ec:1c:f8:fc:93:2d:dc:2c:98:
                    66:0c:9d:2c:66:30:42:8b:2c:2e:58:8f:41:f7:3a:
                    c0:44:b0:51:19:4a:59:b6:cd:26:e3:d7:8d:c5:ce:
                    43:6e:e0:56:8d:ba:4c:75:4b:96:1a:51:6d:72:2e:
                    b3:79:e9:5a:aa:ca:32:0e:cc:a5:12:e8:7b:ba:d0:
                    b7:d0:1b:7b:1a:77:f6:70:87:95:35:ad:5f:34:66:
                    47:66:7e:42:ce:9e:a9:d9:43:55:a9:dd:ee:72:69:
                    e1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:09:CD:82:90:81:1D:EE:08:46:09:C2:99:00:FB:8D:18:F4:CD:9C
            X509v3 Authority Key Identifier:
                keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:81:af:7d:c7:de:9a:7e:3b:dc:2d:4c:49:10:5b:e1:3c:d5:
         76:e3:31:9a:a1:2f:cf:56:cb:3f:dc:14:79:db:1f:37:d8:7b:
         88:bc:4b:ff:72:c0:8b:1c:fc:38:ff:6a:0b:d1:22:c1:4b:79:
         94:1d:40:2b:b5:5a:91:9b:b3:35:ab:44:be:4d:fa:07:0a:b8:
         e5:de:6c:c4:19:56:1b:32:7a:20:7c:6a:da:05:69:8a:fb:eb:
         ab:50:c0:b1:03:02:12:9a:22:b2:ee:ec:5a:c9:3f:d4:3b:88:
         32:4b:33:b8:8b:48:1c:d7:42:79:42:1f:93:f2:6e:43:2e:71:
         60:cf:86:4d:68:14:71:9f:2c:40:c9:bd:5f:95:17:4b:ce:ae:
         79:9d:0c:5e:92:fd:df:20:7b:25:b5:e1:3f:ed:00:1e:be:b8:
         bd:b9:66:a1:79:a4:48:44:4a:46:0b:4d:af:0d:96:83:4c:11:
         d4:87:76:0b:59:f7:4b:d1:73:3b:be:b3:d3:0b:ad:b8:e5:ad:
         a0:e1:47:31:11:df:38:64:30:14:3a:03:14:23:8f:0a:64:22:
         d9:8e:4f:e8:bc:9f:82:54:e1:10:0a:b7:29:5a:08:15:a2:e4:
         96:11:4f:d7:6b:e7:82:67:5d:1f:1e:14:c3:eb:9f:19:89:fd:
         7b:ba:0b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:48:38 2026 by rpki-client