Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
File:                     qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json)
Hash identifier:          7i+ZlnhepVDpT/LdZjYS+JdcGuTHYrgP+veLaoiYnwk=
Subject key identifier:   8E:42:2D:32:4A:14:10:E4:F4:9B:96:40:D0:45:C0:27:9D:7D:9E:9C
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Certificate issuer:       /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial:       01A10391F6A679E72C3C9EC09FE0903B3972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
Manifest number:          1285
Signing time:             Sat 03 Oct 2026 21:00:59 +0000
Manifest this update:     Sat 03 Oct 2026 21:00:59 +0000
Manifest next update:     Sun 04 Oct 2026 21:00:59 +0000
Files and hashes:         1: 74nAH9muoqGD-s4yAjGfkwaZSpY.roa (hash: D3Z53fCQBRC5btWm2TKOEsF5ZZDk5JfPmaKFAGt33yM=)
                          2: 8-p5z6a3n-5Vbg_FUQcHOfePr1k.roa (hash: T0w7zmmsEVS9b11trnjpNDiN07nDknNytyRJ3xCbFlo=)
                          3: 9c8fl-F23xypfkbqbl1n5JPG_84.roa (hash: lNc776mR+msxcq+rQeOV4AB0lZ4u3hobNqWSqkfBl4w=)
                          4: BuCCAIR_5ckodCbHgOD1MMIt-Dk.roa (hash: QG9xQu9PRC+aBkksrXZrhX4apZcVikxD0oV/WFqRvns=)
                          5: FWpOH4N6BX553FneJcU6BE5bAF8.roa (hash: ye+1JcxX5r+qQirQAz9HO4h5aJ6vN0VuXH6bacrRE9E=)
                          6: Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa (hash: DJFlUJTizA9NLrEk8PUMB7MGXkecQxJA+XnDIeJTTP0=)
                          7: L5qyY9jZaitIZWVHzJF8EMKtnJw.roa (hash: RHPOnQl7M+92fyRwAlYoQqCItx05c0P7/Yx6ROjX9QU=)
                          8: SH3pYzGJ0F7gmqFvylZKGzCQ_K4.roa (hash: k967cJxC2KK2fNAPD1SlBDWcVETDx+a636MqmbqOiTo=)
                          9: etM1AIrZp5N8xQAUS7d-EkBBO6Q.roa (hash: 62w4oF2cGdWj0o3BpcwxlZBpiXXPXN7RYr3Sd64Mob8=)
                          10: pmjWXndiYs4KEBmLyUOfoVEBC-k.roa (hash: 0OAhoLS3wlHvG79outXZ8QvOduBA5V35p0IKCSGmHXM=)
                          11: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: gI6LyiioayS+5SZpZZ+l086kahJGHOkh06403slLPN4=)
                          12: uzUF1iytiBjIXaGoXYbb89U983Q.roa (hash: GmwJF+if9a4Li6CDW3Ardtoa/NUyQLlBVKRkV0wDIP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:91:f6:a6:79:e7:2c:3c:9e:c0:9f:e0:90:3b:39:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
        Validity
            Not Before: Oct  3 21:00:59 2026 GMT
            Not After : Oct  4 21:00:59 2026 GMT
        Subject: CN=8e422d324a1410e4f49b9640d045c0279d7d9e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:16:06:dc:85:36:2f:14:ee:da:02:6b:af:2a:
                    41:a4:63:2a:f7:03:40:40:52:78:35:00:d3:7c:da:
                    b8:36:74:99:2c:3f:6e:e4:cb:46:c3:71:8a:2a:3c:
                    48:8c:90:ac:10:93:44:37:3e:20:da:3d:01:7c:b3:
                    0b:20:46:c5:0a:f7:55:e4:14:a5:d7:77:58:46:37:
                    b6:1d:68:16:2d:36:2b:a6:03:60:6b:2c:41:6b:b7:
                    98:25:f5:de:97:3e:09:33:56:a3:75:20:fc:95:54:
                    91:a1:8d:6c:9b:3b:15:17:96:bc:f7:e0:c2:ca:3d:
                    7a:4d:52:e2:bb:63:98:41:ac:5f:85:94:f7:99:a0:
                    fd:75:38:0b:33:25:55:0c:bd:b8:ee:55:da:4d:97:
                    69:40:fa:ba:8b:6f:5e:0c:82:29:f5:b0:19:89:10:
                    04:62:2d:64:ff:6d:6e:ea:a9:f6:57:81:1c:46:16:
                    ae:9a:e4:2a:c6:dc:ed:57:d1:21:65:ad:33:8a:94:
                    27:ae:e7:11:d0:cf:10:b8:61:13:11:ad:8c:0d:ee:
                    c5:ff:03:69:2e:ce:bf:3c:c9:90:57:ae:03:8c:5b:
                    a3:89:65:b3:4f:5a:5f:0f:3c:68:45:0f:d0:7e:98:
                    da:76:e3:2b:93:55:b8:21:8b:87:57:46:43:21:47:
                    8a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:42:2D:32:4A:14:10:E4:F4:9B:96:40:D0:45:C0:27:9D:7D:9E:9C
            X509v3 Authority Key Identifier:
                keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:4a:75:99:79:b2:93:7e:78:a7:81:af:4f:43:a6:62:18:c5:
         e0:a1:45:3b:ce:d2:e4:c9:c8:f2:7f:3e:22:41:9d:bb:48:85:
         ec:11:86:69:38:31:de:76:e4:a0:de:67:d0:22:a0:a1:ab:91:
         4d:d5:23:f1:43:98:bf:a5:b2:a4:0e:32:d4:47:91:b7:b9:1d:
         37:46:53:3d:86:ee:67:08:b4:b6:0b:99:95:c4:51:81:5f:02:
         44:8b:a6:07:d1:3d:af:18:7e:ab:c4:ae:d9:60:d1:8b:4f:ec:
         ad:b7:c2:34:cc:24:56:59:21:d2:5f:ce:44:9c:19:c2:1e:8c:
         ec:f0:bd:4a:5c:cd:d6:39:89:b4:1b:68:e5:39:f1:04:44:64:
         8a:1a:76:dd:20:e1:10:9e:8f:3d:ed:5b:8d:d9:a5:be:8e:77:
         36:d3:03:f8:0f:c9:68:16:62:67:2a:a3:c7:61:56:57:46:f3:
         85:3a:70:dd:45:0f:ba:cf:94:84:ec:aa:ea:50:e9:af:ca:50:
         0c:63:f5:a3:bf:6f:d4:3e:8d:d4:8a:7b:f6:7c:bd:85:79:af:
         9e:ed:69:17:f9:92:c8:a4:1f:db:20:fb:b5:2c:9b:5a:1f:c3:
         7e:22:b8:e5:e9:32:d3:aa:51:de:a0:9c:a3:45:ca:29:39:87:
         f9:25:6e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:38:42 2026 by rpki-client