Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
File:                     qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json)
Hash identifier:          /0Q1VkRw0Ng9BxN0WfPqsAcbYa5MmGGnw6Vu+vDc6sk=
Subject key identifier:   04:0B:6B:D3:53:19:85:27:C6:2B:3E:6F:AC:1C:DC:32:99:24:F8:EF
Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
Certificate issuer:       /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Certificate serial:       01A06DCB878B354DDF3DAD87A89033DB8975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
Manifest number:          0899
Signing time:             Fri 04 Sep 2026 19:00:49 +0000
Manifest this update:     Fri 04 Sep 2026 19:00:49 +0000
Manifest next update:     Sat 05 Sep 2026 19:00:49 +0000
Files and hashes:         1: aHdJjEV_MZGQhS1-oSIoUxNhu0w.roa (hash: V1XVv/qtFeaO0uUYLoorR9Olh/izTLbjNE3cg3DaNhc=)
                          2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: s1SRf3kKF3bqe9d5/3Nf8OPGtUyLpXT6XYmBFHX9nAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:cb:87:8b:35:4d:df:3d:ad:87:a8:90:33:db:89:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
        Validity
            Not Before: Sep  4 19:00:49 2026 GMT
            Not After : Sep  5 19:00:49 2026 GMT
        Subject: CN=040b6bd353198527c62b3e6fac1cdc329924f8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d4:4e:82:f2:61:ba:9f:02:8d:06:71:40:c9:
                    96:31:e8:99:eb:cb:a2:eb:4e:78:20:10:3b:14:c8:
                    dd:7a:49:36:fe:58:34:34:ad:e1:85:09:6a:30:f6:
                    59:c1:97:39:f2:f0:b5:71:ea:56:28:81:8e:0b:6d:
                    21:26:31:50:6e:11:87:59:58:ae:09:10:8e:54:f5:
                    0e:80:07:0e:91:2b:5c:b5:a3:05:c9:81:49:2c:3e:
                    1d:01:f7:13:43:2b:59:a3:2f:4f:88:fe:ec:0e:1f:
                    88:0c:26:00:41:39:b2:d9:81:e8:97:95:c7:40:b1:
                    16:5d:3f:b6:95:1f:94:53:85:e5:8d:3f:b7:b6:9c:
                    c1:6e:4b:b4:5c:9b:3f:6f:eb:a4:16:7f:70:53:07:
                    83:48:7b:91:77:47:90:e6:0e:a5:56:89:e6:11:f9:
                    27:60:c3:18:39:bd:ac:4b:f3:75:96:a3:c5:0a:fd:
                    7c:c8:75:3e:80:30:ce:04:bb:8d:fd:0e:f5:ac:0a:
                    33:f5:7b:d0:76:93:98:f7:bc:df:0b:fe:9f:c9:66:
                    da:2a:90:e0:40:d3:30:08:20:ba:48:cb:34:e4:97:
                    3a:f1:7f:5e:6d:d9:a8:43:73:94:06:ca:20:b6:de:
                    73:50:74:d7:5b:77:82:42:22:ec:52:09:4f:74:16:
                    b1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0B:6B:D3:53:19:85:27:C6:2B:3E:6F:AC:1C:DC:32:99:24:F8:EF
            X509v3 Authority Key Identifier:
                keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e3:8e:e7:0f:34:fb:7f:b1:90:8b:c2:28:76:77:60:20:2c:
         48:14:17:17:eb:74:a0:d1:e4:24:5a:64:2d:95:3e:e4:29:ff:
         9b:12:7c:e8:9b:4b:ab:4d:f1:26:81:dc:26:2f:8c:0d:29:cd:
         f6:b4:79:88:1b:76:f0:b5:64:21:16:11:5f:5f:29:23:75:8d:
         e8:85:0c:39:a4:42:d4:ef:ab:d6:c2:34:0a:23:41:27:a5:a5:
         77:11:11:74:35:1b:4b:dc:92:bc:ee:c9:59:1a:fd:1d:76:16:
         2c:7d:5a:14:56:16:e0:91:4a:72:11:b3:1c:a9:d2:09:3e:51:
         86:5f:41:e5:45:72:e6:79:15:ab:f3:e1:d1:36:7e:8f:aa:cf:
         73:16:da:32:f0:33:6c:a6:1a:3c:df:04:ac:0c:a2:24:db:af:
         f7:6d:2e:c1:cc:05:74:0d:58:4b:1d:b1:de:77:4c:e0:32:ad:
         1c:d7:be:ef:b9:55:6d:88:8e:49:f7:20:b5:f7:ea:2c:08:ed:
         86:17:47:04:9e:51:cf:4f:68:9a:7f:2d:5c:8d:c7:58:7b:62:
         78:03:0d:32:e6:4c:7a:12:1c:84:b7:73:91:f8:4c:99:9d:38:
         fb:22:df:55:11:3f:34:fd:0b:6d:ab:65:45:c8:5f:70:d5:ab:
         b3:7a:2f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:15:20 2026 by rpki-client