Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
File:                     4QBqBtxJCZf_j8OkLs84m-090Xg.mft (raw, json)
Hash identifier:          SsK5F3X30A4TMz7XbzukXJ2F+12lEk7mfdqGAlQL9qM=
Subject key identifier:   80:FF:9F:8B:7A:9A:65:63:23:21:4B:38:40:2C:61:F0:E1:0A:BC:A6
Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Certificate issuer:       /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Certificate serial:       01A0D5390249B6428A95DEBA4E8DE7CCE0FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
Manifest number:          1A6F
Signing time:             Thu 24 Sep 2026 21:01:18 +0000
Manifest this update:     Thu 24 Sep 2026 21:01:18 +0000
Manifest next update:     Fri 25 Sep 2026 21:01:18 +0000
Files and hashes:         1: 4QBqBtxJCZf_j8OkLs84m-090Xg.crl (hash: ZLqrZ3YHDYPDb7PhXMEWzKL9dihQgIO2tHe8pX7ymbk=)
                          2: UdwPC5AdaFNXtHywAO0ry8S25cM.roa (hash: tBmGJBJCpxYDGJAJLW9uH/5FtF0sovEOEcwJbFRoFVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:39:02:49:b6:42:8a:95:de:ba:4e:8d:e7:cc:e0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
        Validity
            Not Before: Sep 24 21:01:18 2026 GMT
            Not After : Sep 25 21:01:18 2026 GMT
        Subject: CN=80ff9f8b7a9a656323214b38402c61f0e10abca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5a:7d:a0:18:c0:ef:3d:b1:c6:f0:47:a1:d9:
                    ec:65:79:89:a7:27:5b:f2:e9:30:fe:f7:9f:0b:1f:
                    73:df:50:3c:5d:10:e1:a3:b2:13:5e:32:03:bd:4b:
                    11:06:ad:7d:68:1c:46:47:8b:aa:6e:a9:2c:87:5e:
                    32:f4:88:c0:57:f1:74:dd:43:f0:9d:9a:a6:5e:81:
                    24:50:9b:68:86:2f:83:b6:52:1d:da:0e:f4:73:2f:
                    48:57:3d:b2:a4:7b:0a:bd:7c:ef:31:7f:a8:15:f2:
                    7c:fa:8c:61:9d:4c:6b:80:77:e2:74:5c:3a:28:f9:
                    f6:7d:b2:ab:69:bd:a0:77:a1:6d:a9:23:94:2a:06:
                    b2:f3:a3:39:56:8e:76:72:3c:5d:97:65:98:e7:d3:
                    7a:87:77:21:f8:9b:f9:37:44:6c:fc:0b:d8:98:8f:
                    25:c8:d5:ee:e0:a7:f3:3b:56:a2:49:94:8c:76:45:
                    08:ca:b9:2d:ca:2a:b9:2f:5d:39:31:bd:47:dd:34:
                    52:46:87:bb:28:07:ab:a6:fe:85:98:48:32:3a:ee:
                    47:ae:61:54:51:09:0b:f9:56:9c:7f:02:ee:38:59:
                    16:05:39:16:cb:de:6d:0e:a4:7d:22:c3:4e:6a:4c:
                    c4:00:69:ce:fa:c4:3d:79:bf:a2:6e:49:b7:9a:b7:
                    7a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FF:9F:8B:7A:9A:65:63:23:21:4B:38:40:2C:61:F0:E1:0A:BC:A6
            X509v3 Authority Key Identifier:
                keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c0:c2:db:4c:b1:30:2f:93:22:73:17:eb:5a:10:dc:30:69:
         df:cb:1e:0f:d8:e9:97:97:c7:b8:7f:1d:09:5c:27:d7:c6:df:
         a5:66:f7:a6:3e:db:71:e2:ac:23:0c:78:7e:79:a6:5e:bd:f2:
         bd:2a:89:00:fc:6f:dd:8a:5a:18:c4:0c:98:68:1b:56:58:d1:
         ce:03:dd:f0:71:b2:01:f1:22:dd:a1:8b:d7:5d:3a:28:64:b8:
         b5:de:c2:5c:67:d0:06:b9:26:75:dd:b0:45:c4:32:08:f2:fa:
         7a:d3:d6:f4:6e:db:3e:59:85:d7:09:9b:12:67:b7:f9:11:cd:
         e5:1c:cd:96:ed:0b:00:6f:65:f9:eb:c3:24:4c:5b:58:12:fd:
         cf:a6:89:3c:04:ce:09:79:bd:69:a7:42:60:a9:50:34:db:ac:
         b0:c1:e0:b5:54:c9:3e:75:ff:d3:31:d7:58:04:6b:39:33:eb:
         4b:e3:7c:96:9e:f8:34:ae:a5:0a:6d:db:ca:b5:7c:8a:b6:57:
         2c:5e:51:ec:a6:93:9c:a4:a0:29:79:fb:6b:cb:8e:e2:40:b4:
         7e:e6:fd:4f:14:27:64:c3:f7:6d:62:a2:6f:97:89:08:fc:42:
         6b:90:fa:34:35:a3:e2:81:51:5f:b4:ba:09:d1:e8:46:88:59:
         f3:56:be:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:03:31 2026 by rpki-client