Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
File:                     QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft (raw, json)
Hash identifier:          QtpwcTAdFCdPLE4zgkN9UiOycVPRKJXQ9SmKfzBHzr4=
Subject key identifier:   35:16:F8:39:31:33:44:65:3A:46:7F:56:BB:76:0F:D9:39:5D:38:FD
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Certificate issuer:       /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial:       01A132595CB1E274F0B52F3EAEE163E64889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
Manifest number:          1AA0
Signing time:             Mon 12 Oct 2026 23:01:19 +0000
Manifest this update:     Mon 12 Oct 2026 23:01:19 +0000
Manifest next update:     Tue 13 Oct 2026 23:01:19 +0000
Files and hashes:         1: 6P9heqcjWC1rgYXIRmhdx-97RQI.roa (hash: Wmt5NIZ7B735D829/2kh7N0lg+ZEmMiQ2DIicb7NPis=)
                          2: CeZNOwjANN4HMY30DhoMsqh7kc0.roa (hash: Eu0R/pH+qqACExevGNpBWZPYFKUIF3usiZ6pHAqzeUg=)
                          3: H9vdOoMnNvcj9O3pGR64p1cw7mI.roa (hash: IwVpFDPCmKPKuO6vfa3AZGtMLLchqRt7QtT34xytDoc=)
                          4: QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl (hash: zhfX5w+XDn6/rx6bRPgqXLu86t0z/Mea3oXn2vR40Zg=)
                          5: lhRrxFX2ddbsLjVa14L7LqCeSk0.roa (hash: VWU2mBVhm/guPrYibtgL6oEOWFxdxHR0S2Eb5+SbI98=)
                          6: zjfJO2RH5SIxJF2laNjzaWPFUmE.roa (hash: CH64B9ZYUzeZok1rFlTbLuLN/vSRqUxl6QpPK+7D75o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:59:5c:b1:e2:74:f0:b5:2f:3e:ae:e1:63:e6:48:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
        Validity
            Not Before: Oct 12 23:01:19 2026 GMT
            Not After : Oct 13 23:01:19 2026 GMT
        Subject: CN=3516f839313344653a467f56bb760fd9395d38fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:50:e0:16:76:4b:f8:92:b0:3a:8f:58:64:8c:
                    f5:70:52:cd:29:75:74:91:df:37:6e:82:f3:2b:d7:
                    2e:6f:5f:79:ec:19:db:a9:5d:4b:b7:0f:92:36:fa:
                    77:94:55:90:94:f3:f8:8e:83:46:4a:6f:5b:7b:67:
                    4a:d3:66:bf:19:0a:1a:cf:51:05:ad:d7:12:f6:3c:
                    b1:63:e2:5b:d5:d1:7a:25:84:fd:19:1d:a5:17:a4:
                    6c:b2:d8:f1:55:dc:ef:e3:6a:d5:66:60:5d:2c:2e:
                    77:82:e8:2f:66:1f:f3:4c:a9:7e:46:02:7a:4a:e0:
                    8d:f9:cf:9a:07:8c:3e:d7:d5:92:79:86:79:3e:e1:
                    f3:60:6c:33:e7:eb:03:82:dc:ab:f6:b5:5d:9b:5f:
                    fc:40:0b:e0:87:54:3e:09:28:05:63:ad:93:fa:3d:
                    4b:7f:62:46:69:b7:21:f7:0b:5f:d7:17:d6:f2:a2:
                    b5:a4:16:5c:e0:c2:60:08:7d:17:06:4f:ed:7c:0d:
                    fb:62:d3:82:35:eb:ac:a7:84:ae:04:b4:4f:c7:7d:
                    36:6a:86:c1:93:18:a8:e0:ad:cc:69:78:73:79:4d:
                    36:69:fb:e1:34:98:6c:9e:8f:c1:67:98:dc:25:d8:
                    d3:0c:52:65:1a:3b:66:07:c6:d6:53:89:6b:1f:56:
                    28:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:16:F8:39:31:33:44:65:3A:46:7F:56:BB:76:0F:D9:39:5D:38:FD
            X509v3 Authority Key Identifier:
                keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b8:2c:b0:8e:15:7b:b8:e0:17:ea:74:9e:5c:09:cc:d8:b2:
         9e:d9:ee:9e:33:c5:89:56:5d:8c:f9:4a:e3:e1:d8:b4:25:9b:
         69:7d:b8:96:89:11:96:76:56:2a:20:d6:40:5c:3a:e6:70:b4:
         f1:d7:8c:a3:ae:d7:9a:89:20:25:2c:5e:51:f2:94:14:5f:45:
         c1:c2:71:03:a6:dc:59:d3:7f:9f:76:4e:20:df:50:01:6f:97:
         de:ea:94:89:89:a9:ac:10:93:db:0f:05:e7:f2:1a:d0:7c:f1:
         1f:84:0e:86:87:05:0a:d2:23:c0:10:22:65:2b:23:65:15:de:
         68:88:66:a4:57:d2:64:4b:8a:34:cc:44:c2:52:f6:ec:6d:6a:
         d4:b3:05:77:55:a8:e3:4d:e6:82:95:36:c8:e2:0e:ba:d0:60:
         77:aa:52:ff:32:f2:6d:6e:66:a6:a0:d2:ad:9e:38:41:22:a1:
         8e:ae:d2:77:ba:07:90:6d:b5:32:42:be:f5:4e:74:0f:c1:ed:
         a0:7f:fb:7c:7c:f9:04:2e:ee:5d:e6:76:5f:63:f0:07:37:52:
         25:f5:f1:d4:98:6d:72:8d:b3:d7:6e:6f:75:d3:7a:c4:3a:3b:
         be:b6:1f:0b:df:d6:86:20:e9:ff:bb:87:dc:9d:d2:dc:8f:15:
         02:ce:8c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:10:18 2026 by rpki-client