Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
File:                     Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json)
Hash identifier:          KfEkcFL81HNcrjpUf76YAzWECdHRm+D3U5hkztrM9vY=
Subject key identifier:   15:D9:65:ED:68:A2:D4:DF:2C:F4:6E:CB:C1:83:17:64:EE:16:82:0B
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Certificate issuer:       /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial:       01A002B8DAF9A0735C4E7E4700CBB100B35F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
Manifest number:          1A03
Signing time:             Sat 15 Aug 2026 00:01:04 +0000
Manifest this update:     Sat 15 Aug 2026 00:01:04 +0000
Manifest next update:     Sun 16 Aug 2026 00:01:04 +0000
Files and hashes:         1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: FQfjPxr3b36SxYS+lEKPFAICC1McHOOiRJ7s4Qx7GM8=)
                          2: rAsphywSAM45eBEoOtw-q7qBbQw.roa (hash: FZ6A8RzJ7kKd3l/6WGQbggDtZVXr3jcROQOsJNRBJLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 00:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:da:f9:a0:73:5c:4e:7e:47:00:cb:b1:00:b3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
        Validity
            Not Before: Aug 15 00:01:04 2026 GMT
            Not After : Aug 16 00:01:04 2026 GMT
        Subject: CN=15d965ed68a2d4df2cf46ecbc1831764ee16820b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0f:ad:3d:0c:cf:9c:7d:46:14:2d:ed:d7:a1:
                    e3:15:74:59:c8:bf:25:fd:d1:e2:63:fc:82:73:13:
                    d1:34:ab:6a:f3:43:6b:72:aa:ca:6b:c3:3b:81:bf:
                    5b:36:16:e2:04:09:69:ac:c1:0e:bf:96:0c:de:7e:
                    2e:34:f0:39:94:ef:20:4b:74:04:f9:3b:00:d4:ca:
                    88:c5:e0:7e:50:39:f3:74:c8:7e:64:9a:b4:cd:7a:
                    af:fd:db:33:f5:d2:70:49:55:e9:6d:bd:e2:5f:4a:
                    f9:3a:96:8c:89:bb:03:02:8b:db:8f:94:87:90:34:
                    93:7d:a1:eb:79:e7:46:e1:0a:c2:0a:d0:c1:61:4c:
                    10:db:4b:b7:a5:77:5a:1d:38:46:1c:97:7a:92:5f:
                    ed:f1:d1:59:7e:95:49:ad:69:43:5a:b1:53:34:5e:
                    05:c9:e8:6a:2b:3d:36:dd:3c:fa:be:3b:7c:17:74:
                    54:3f:5b:18:2a:e2:b0:f8:62:30:a0:59:61:40:09:
                    03:b6:55:4c:26:a9:70:4d:0e:95:a7:cd:c9:ce:21:
                    93:2b:d2:a5:8a:f4:53:d0:a1:81:8f:b8:34:f4:95:
                    b9:9f:02:24:3e:8d:0b:27:07:ed:30:b8:5c:f0:34:
                    1a:75:38:0f:f5:22:6d:9a:32:87:3c:46:2a:73:17:
                    2f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D9:65:ED:68:A2:D4:DF:2C:F4:6E:CB:C1:83:17:64:EE:16:82:0B
            X509v3 Authority Key Identifier:
                keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:29:2b:68:8d:76:19:33:c0:d4:53:89:92:b4:1a:55:1d:af:
         80:b9:ec:4c:c5:9a:8c:28:16:11:e0:ba:e1:36:a4:72:5d:96:
         e0:c3:37:1c:bb:cf:82:0e:cf:6c:9f:b0:24:0a:dd:e7:17:5d:
         bd:35:c6:28:72:65:50:85:75:5e:da:6a:f6:a1:4c:3f:5f:44:
         b4:5c:3f:74:a5:90:7c:a7:7d:21:7b:d7:e4:05:21:75:82:a6:
         d6:51:8a:ab:84:97:fb:e3:89:9a:8e:52:ea:9c:87:58:b1:b3:
         23:04:8e:ea:19:c1:fa:e5:2b:5d:74:8d:39:c1:8d:6c:62:e5:
         d1:f2:93:c6:7b:d1:e5:27:40:85:3f:cf:6b:14:31:b3:68:c0:
         5f:6c:5e:31:29:c5:31:2d:d7:bb:4c:77:64:a1:f8:47:c3:da:
         9f:fa:85:d3:4e:2f:2e:81:f1:03:30:38:49:d6:91:c1:7c:3b:
         e0:ec:eb:b7:9e:a5:89:de:8c:c7:41:64:0b:e2:00:af:0c:da:
         8e:29:30:cd:10:03:6e:5b:c3:c3:87:7f:5f:c9:6b:b0:de:e6:
         e1:a9:a3:ac:53:c5:4d:d3:9e:5b:93:ea:b6:bb:e3:b0:cc:71:
         7f:ee:53:d1:ee:55:fa:57:9c:b3:76:6a:35:bb:80:5a:75:19:
         11:73:aa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:14:10 2026 by rpki-client