Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.mft
File:                     Q7pTGvV2eeAhG9aUG1wYjwCgwlo.mft (raw, json)
Hash identifier:          +jCgDzsNsptUqvGZik8dxPIccsVr3Zqfr8QM/RRhJMs=
Subject key identifier:   6A:A7:C2:CC:0D:84:69:5E:14:01:B7:10:96:F6:D9:2A:80:6A:A9:1E
Authority key identifier: 43:BA:53:1A:F5:76:79:E0:21:1B:D6:94:1B:5C:18:8F:00:A0:C2:5A
Certificate issuer:       /CN=43ba531af57679e0211bd6941b5c188f00a0c25a
Certificate serial:       01A0BD672DB59A7E852AB2339DDA35B42FEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.mft
Manifest number:          54
Signing time:             Sun 20 Sep 2026 06:00:50 +0000
Manifest this update:     Sun 20 Sep 2026 06:00:50 +0000
Manifest next update:     Mon 21 Sep 2026 06:00:50 +0000
Files and hashes:         1: Q7pTGvV2eeAhG9aUG1wYjwCgwlo.crl (hash: szcMzgsRKmi/iHM3yuNO9AgLru0MQpIWt91C+EGcj5U=)
                          2: _rJomAVDyaUPIP51qpIHk0he1_A.roa (hash: LACdANMwb01Joa8dmiDnz13f/H7H+NN+qC4YeeakcbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:67:2d:b5:9a:7e:85:2a:b2:33:9d:da:35:b4:2f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43ba531af57679e0211bd6941b5c188f00a0c25a
        Validity
            Not Before: Sep 20 06:00:50 2026 GMT
            Not After : Sep 21 06:00:50 2026 GMT
        Subject: CN=6aa7c2cc0d84695e1401b71096f6d92a806aa91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:52:c0:64:87:76:c4:eb:f7:ef:bf:36:99:e5:
                    1c:79:99:4a:6a:42:37:b5:a6:1e:36:ca:4b:05:a2:
                    37:69:31:f1:e3:25:aa:d0:b7:38:84:ae:8c:99:d8:
                    39:70:f1:7e:d4:0b:e8:eb:cb:65:4e:3b:64:65:fd:
                    3d:1a:a6:bd:17:27:2c:93:59:f4:a3:33:b7:2f:62:
                    e5:d5:46:a0:e3:ba:58:79:b9:0c:b8:31:f2:95:3f:
                    a7:65:b6:47:fd:ea:8e:07:7e:ac:9d:80:1c:00:69:
                    bb:28:96:1a:08:79:5e:9b:f0:cf:9f:3b:9a:2a:b2:
                    8b:e4:76:a9:be:8c:34:99:07:1b:db:8e:62:e1:8c:
                    8d:1c:98:42:ec:16:e3:66:21:a6:db:ad:90:e7:35:
                    eb:9e:b6:f6:b0:0c:c2:7a:a9:d6:5c:fd:15:5b:a6:
                    95:2f:57:21:7e:3d:39:9a:63:f8:01:db:0b:0a:8e:
                    a2:3f:44:e7:c5:c5:ff:ca:88:bf:4c:73:a5:5b:18:
                    0e:1b:9c:b9:49:ac:de:a0:a5:7a:cf:2f:b4:4f:76:
                    18:3e:31:de:f4:7f:a1:3a:a3:c2:b5:a8:b5:fc:11:
                    ca:a0:99:27:6d:1f:1d:26:79:8f:84:0e:fa:c4:22:
                    1c:34:4f:d6:3d:79:05:bd:93:44:3f:43:95:96:3d:
                    24:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A7:C2:CC:0D:84:69:5E:14:01:B7:10:96:F6:D9:2A:80:6A:A9:1E
            X509v3 Authority Key Identifier:
                keyid:43:BA:53:1A:F5:76:79:E0:21:1B:D6:94:1B:5C:18:8F:00:A0:C2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:11:78:a9:aa:f8:91:8d:dc:0a:76:a0:0a:9d:11:5b:42:20:
         ce:d5:2e:dd:56:29:2e:cc:76:58:97:94:23:70:02:7e:2d:01:
         fb:ea:07:83:2f:32:d8:4c:7b:a9:ff:6f:97:5d:0c:57:12:41:
         8b:fa:c0:af:3b:05:7e:f4:d9:5d:95:86:26:96:42:b4:45:55:
         c1:99:aa:cf:fe:b3:ee:d1:75:e6:fc:ca:2c:06:54:ad:8d:d6:
         3b:44:e6:16:b2:a6:ab:48:d8:70:42:d4:b4:b2:85:99:c8:d4:
         80:ab:f0:61:62:7b:03:98:19:15:10:a2:fc:f5:bc:17:e8:e0:
         a6:43:19:09:48:fb:9c:fa:79:d5:d9:40:8c:a8:8a:90:64:85:
         fa:2d:b9:a5:da:b6:61:51:50:db:b9:a5:2e:70:be:d9:99:aa:
         3d:96:6c:92:db:19:9a:e4:6d:43:e1:fd:9e:9c:15:5d:e3:0d:
         63:73:c2:6c:8f:8e:34:1b:ea:8b:fb:a2:f8:01:48:91:57:94:
         b0:79:1f:69:1f:c8:63:83:f1:c8:ae:7d:94:65:a9:d9:24:e1:
         a3:fb:50:81:4d:7c:de:b1:8a:a3:aa:5d:c2:ee:74:a1:b0:cb:
         cb:6a:f9:9f:38:a5:e6:bb:fe:8f:c2:35:53:52:36:ec:2e:ad:
         2e:c9:c5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:21:53 2026 by rpki-client