Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
File:                     QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json)
Hash identifier:          qVsNo6KyWHaHom9mKDN57xJOZROj9oWoYRv1tDqSfY0=
Subject key identifier:   49:BF:A7:38:47:E6:43:4D:BA:7D:C7:98:66:71:B2:14:26:F3:F3:7A
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Certificate issuer:       /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial:       01A17BF26DBF3A5A8C68255CB72F1378A968
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
Manifest number:          1ACC
Signing time:             Tue 27 Oct 2026 06:00:47 +0000
Manifest this update:     Tue 27 Oct 2026 06:00:47 +0000
Manifest next update:     Wed 28 Oct 2026 06:00:47 +0000
Files and hashes:         1: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: OVSveRFdegV1+w0u8UBFPCvJPdnV8BigcCry0ewXqK4=)
                          2: mTYFd1745jhrZ9TtN2i23HR2pUI.roa (hash: ydADvfnj2q9V4OlnDPfNddiaxsr5Yrl3BEkKtbnsrx4=)
                          3: nOreBNvB9sHvjaOwA-7mkOrWqLI.roa (hash: PolGTwJfcBCQ5ul8B/u+HLxsm0nGBzqvFUKDQhFP6Lk=)
                          4: pPjzGwxRrQB5-40BluFsbIPRays.roa (hash: sQ+RWTCTmzmCdnVJPlVfZs+TlcOrO5vdITrduRsIAW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:f2:6d:bf:3a:5a:8c:68:25:5c:b7:2f:13:78:a9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
        Validity
            Not Before: Oct 27 06:00:47 2026 GMT
            Not After : Oct 28 06:00:47 2026 GMT
        Subject: CN=49bfa73847e6434dba7dc7986671b21426f3f37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:92:1b:d5:85:4d:2e:cb:f2:35:3c:98:ee:
                    93:3e:97:75:49:7c:85:89:40:9f:7a:9f:3f:42:27:
                    33:87:84:b7:41:24:5c:99:14:f6:2a:fe:b8:41:ee:
                    83:e1:1b:69:4c:63:60:88:c5:5d:3a:f1:52:6e:f3:
                    ed:9a:4d:7c:71:b3:12:68:21:7e:c4:8e:78:7e:17:
                    93:2f:20:1b:cb:20:dd:26:b2:74:68:aa:16:19:78:
                    50:81:4e:48:5d:49:29:02:d5:d4:b1:ec:47:ce:06:
                    37:49:23:66:c2:56:97:fb:6e:a0:8a:91:50:78:8f:
                    3f:12:12:29:68:de:ca:f6:e9:72:2e:2e:28:66:53:
                    f2:a5:98:9c:6d:f5:4c:77:e9:25:6c:db:23:91:ea:
                    b8:33:59:e8:32:d2:37:39:f1:8e:c7:d5:a1:29:65:
                    c0:78:39:3c:89:4f:73:f5:9d:f2:67:75:30:58:5e:
                    2d:fc:f9:54:5c:33:3c:7d:ff:ec:2f:bf:f1:82:b7:
                    32:a7:d9:f6:f4:b3:7d:bf:b8:53:11:0b:eb:c2:ad:
                    22:af:e6:a0:6b:0c:2a:b0:8f:8f:1b:02:15:3d:c8:
                    3b:aa:c4:c9:8f:16:29:c9:37:2c:a4:66:e5:fc:0b:
                    35:65:42:76:6e:4d:96:1b:ad:f9:31:5f:9e:62:de:
                    40:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BF:A7:38:47:E6:43:4D:BA:7D:C7:98:66:71:B2:14:26:F3:F3:7A
            X509v3 Authority Key Identifier:
                keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:fa:57:30:8b:a3:53:2c:45:e8:19:e9:b5:fb:43:67:dd:eb:
         27:81:1b:66:34:48:41:88:68:1b:33:6b:1d:5b:dd:bb:91:f0:
         e4:ef:62:50:dc:a6:cd:c8:5f:7b:b2:8d:46:77:a4:01:79:ab:
         01:cb:1f:8b:99:df:20:7b:1f:f1:85:cf:62:e7:f0:af:c6:ee:
         2b:cf:07:a9:25:ab:ce:e5:13:85:29:6b:9a:92:cd:25:3c:8f:
         c3:61:3a:78:1b:db:cc:a0:61:ff:78:93:9f:18:12:42:b8:59:
         27:89:64:49:0d:31:59:2c:ec:0a:4a:4a:8d:89:08:ae:6c:45:
         ff:62:65:45:cc:03:6a:fd:2d:53:8e:cf:ef:c9:0b:a3:31:d7:
         dc:0c:10:c9:86:8a:af:74:08:3b:0c:6a:f6:59:a7:78:54:83:
         c4:13:96:e3:a1:f6:7d:41:c3:50:b2:c0:46:1d:93:5d:f8:fd:
         dd:14:53:c4:47:ae:84:d7:72:b0:95:a4:e7:21:c0:2f:ad:37:
         37:57:7b:95:6a:67:3b:80:b8:11:6c:0a:42:e8:74:5f:23:a7:
         53:9b:7a:ca:bc:df:7c:d5:22:b9:11:5e:9c:c2:b5:f2:c2:d8:
         72:85:17:b6:a0:57:5c:73:ca:19:a1:a7:d6:78:c9:a4:7c:d7:
         25:9a:63:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:17:32 2026 by rpki-client