Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File:                     QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier:          wJNOcqrS0NekVkL6bbXGMQL6kg8QCnbdF5kr3HNS+Ac=
Subject key identifier:   A3:D3:A9:19:38:C3:2B:D9:D1:E9:AC:5A:A1:5D:45:78:96:BC:6B:9D
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer:       /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial:       01A0BD9DAF3F3183840A7977CDCFF4B9CB87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number:          1AF9
Signing time:             Sun 20 Sep 2026 07:00:22 +0000
Manifest this update:     Sun 20 Sep 2026 07:00:22 +0000
Manifest next update:     Mon 21 Sep 2026 07:00:22 +0000
Files and hashes:         1: 0k-1e23Nnsj5tw_awEN0WvPaAY0.roa (hash: BtLailLpSoIf7271BKNE7tm6wk0WQ2XZ6vsIZUFj/0A=)
                          2: 1-0zBT1lgylSb8x2-aAc9ZqBqBVk.roa (hash: 5CRP7SsSnCJL5rSj4NtE2ZZEkcwBzexSUUdMCu4JfX8=)
                          3: 8d1aydDuAEXfQxk3W61T0a2FlkU.roa (hash: 8cEwTeGphfNoRcWbQQHMMDzfPHsfDPvaBz9Pwfy3hzg=)
                          4: 8tfDpKEOP4tO54l8BA74VEElz0U.roa (hash: 3HvXpDKqeH117tdB+1AhYb8DfbjA/+DxrzrT/MrltyY=)
                          5: ANbnsWF-JLHqejX2Av48LjJnZgs.roa (hash: 9c6ZcPPtFkeQLm/HVh4TWJ/ypShUXQ5+qlsGmHtD58M=)
                          6: GWnwP1AQMRZv69dFYerjFDhOT5E.roa (hash: Zl+8vWvBaHrqBkSv+uhHpOMY7xVbiKanNR9dKqsC4eA=)
                          7: Gj_Gr-caeyvMu7IQ2gfNN7YRqnQ.roa (hash: ro4ubpZ2t4HfdmEU7x4fQb0eH2RexmTzvNHwvvx6Dvo=)
                          8: H-sJquMx0B9zaiEd2E3ZAwhMIY0.roa (hash: Qz5OBe4elYp8/kALuORw31r1oAByBlhUSN3w2LlmMFc=)
                          9: JOafdpaRUl88PgC90VL5xpYKcjE.roa (hash: ZlP86SaiYRDtD1HSEnrHmifz4GMyg0MfqdTIcETJl8k=)
                          10: JjaZurkudx-UKkST6atudJj3AIU.roa (hash: dRfqQWg4++hOM2BitZpArCb7fIVbWUXdPwFxajSITpU=)
                          11: NKWHCYzNepWbSsW4Fdxn7US24kg.roa (hash: GmLgFf+CDpdyG1pPKSxadcb5exdWjVthfa2WpFffGps=)
                          12: OQTikXZqi1CYO00Z7qqLK_7l6sY.roa (hash: ATNTfM8Dm6LwV9QBEZffW+T0+RYubS9zfbW6xwmllZo=)
                          13: PSTGomZ1ObMqQqpGdFQH1zvbUBQ.roa (hash: afnFmYkWhiN9F+mMJUqb2R4wmcsEqxZEBV5b+sQWhDE=)
                          14: QthJXudO0zJ_SoO-p4daHRyo8rE.roa (hash: x/6ZPFkD9BwlmqcIPLYJGD19yNmLXpe/bj8QFfb0eMQ=)
                          15: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: Q1WjkOrGydKKVf5HqrKBeE+j4eWUaLChkcNC3f0SA3c=)
                          16: RWNZJSEiBfn1wB9oIDfPPv-6iDU.roa (hash: YWHdoHexy9yOia35AdSs7CrATv21q3km7UUVFr0uFQg=)
                          17: RaFD1qIa1FBUHdH1NBKzltHz-BE.roa (hash: QJ4vh7+fg+2vbDLAlShsEsZ766Dpe7V2hwZH9ZczJ2M=)
                          18: RgoVuEZzrB6iPeoDkS2VZ5UJEjM.roa (hash: 7eIfiRclCfgNOCGCCRoqijzNwFTi6X6q7V5T2mrxMRU=)
                          19: U_ZLkvUUAkI4RwZMyq2Jjf32RV4.roa (hash: ZA+c3pV+IS0ReWusbsSPVJltdHE5p1qLZ8/Eb5F1S/A=)
                          20: XqV0597Xo_MkEED3jLDmcWL6fvQ.roa (hash: kyh2gbblSVguPugHg4ygFbc+GDfw8j5BLGulCOFHoBI=)
                          21: Yhh2c5k5LhDOhYle3vNv0DyJTfw.roa (hash: 5rg3Zm+cCVynOrEVlUJGi6HocKZPKPBOqGy0u2RMqq8=)
                          22: aCrBApyDuKijuFQpX20WNh4unzc.roa (hash: RUfwA5/PkM//szQwil20D8d8AR2S1/InQiu9dABqgmA=)
                          23: b5VOfYsngZbVCSYSWuCVZzy3P-Q.roa (hash: t2BVxSRMg1PdBU4XB2zXlf0uBbFPlcL38V60oFFybJA=)
                          24: bOwoeGXB2wja2W0aIO7cJEqFn0c.roa (hash: TjrVmHhe6qTnTA+IeFLgJO+nqktu8K34RwVXqHJjTPE=)
                          25: c0KJ2P5Rcttwd8OKo1GAKG5wK0I.roa (hash: 6gfKNgu/Js8TKH019d+hABZigWq8HE/Xz+piBtXfQX0=)
                          26: dD3wtncmwp5EMLah3RRT9eWt4Wk.roa (hash: Jz9K2HmdYtISFkDAHum3xUe88nlsxFm7689ruYtn/OQ=)
                          27: eg-dC7-vvWJiDSYDZiH6xaOQOec.roa (hash: sC47Vwp9nCQThUP6arB1TrIxrRHoT/y10hj3aRxTokc=)
                          28: f015adFaATlW5JvEZeSXsa1hjQQ.roa (hash: GKXh92dvGDb4027E44++nL+DrElheoPfQ05C/idzNLI=)
                          29: fOJAq1swbmkh20dmWLCzyArzpkI.roa (hash: kX9r2C4lqqAIqj4EY1SToSstb8rKWuOuq4K6oCRN74c=)
                          30: g7OEvj-I_if4W8QwVaEOQmtYIPU.roa (hash: 7zwTAwNBRArK8Nf/+0ESq9tDOl3mtAYedb94VgTa7j4=)
                          31: gNAyrBVoFaWeREXzr33gHPdjLuc.roa (hash: 9t3cAZDPUcX15JFGLDAbTwFu6aPFTfX5yposYhTNwLc=)
                          32: gfZI4IQTC0ezUMVBFSxLag6FqdI.roa (hash: uT4KnHoYYVdfwJWh8J9YXV6bwz4BpsS1dLHpl2DqdnI=)
                          33: ijGkWwYVORg8Tu7PMqv3s3GYh9c.roa (hash: +8uIyDzsIpDEcEGhMLdsjhN/19cB8kOUhUyL7Er61Ro=)
                          34: kuKa_RbKBF-8apG5eNAA7ZGrk64.roa (hash: 8GXXom7MNoYYjacR6QL5aPwdId669M5Mrd0b2uKdYxk=)
                          35: l7h90_iUHk_Din7DKKJ4QwOoNgQ.roa (hash: aWTZYHPJ7er/oSFUnE0527gC5z0vLHQ0zP6YSEVaWno=)
                          36: nH7gC0A7tnD9psDoH0OJ31kdyeU.roa (hash: R/7TBye0UFeEZNsucxTN2YluARZDvoPXoxZFH713aK0=)
                          37: r2HCLeyltEGA_hqzatfeQM2CBho.roa (hash: YwyR5/CmHx99oGk6Tb5irnpTZ36vyJlRZ9chIz7XE+Q=)
                          38: r4gojXpCfVfMsKXfq3IcqeiE878.roa (hash: T3XdnQciJ8C4NOqpLw2BOhgbQDlMQMjf7FhYEgWICW0=)
                          39: s0P0zrsw80VgnPS3_ivxkr8CHak.roa (hash: mmzJAojtZdun1M9hZZOT0W/OKF4bt3iycS8+Z0cqRSI=)
                          40: tFOqYeDH3lLeYNt7fwV-QtAZUnE.roa (hash: LilK2m+4vGz0x/pO6ZW3viZdV1XDW+8QHDp0GCFsdwY=)
                          41: vJNky0OYG-s6GxQTQKzzit5N7SI.roa (hash: 6wwR42Zck48w94gcUmxTMmFRQdk7cmngccy6bjI113E=)
                          42: vanYw-zAW1B03Ap8EGM-X-9boHo.roa (hash: KXoGvYV70RLHSvH90MfYI8MYqhrQDWCU5Yc8cSTrOI0=)
                          43: w4XR7nwro5wjJE5JtKRUqOgZf5k.roa (hash: KiumyrEOqBPi+erguwa4/UEHEHESuukLcClHJxfKhnI=)
                          44: xw2XXt5PPsZeg5vj7vtPE1TH3tE.roa (hash: TFidTL5I8XfL87xIhewmgkAs0eQCaKHu5VsnRgFZ1CI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 07:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:9d:af:3f:31:83:84:0a:79:77:cd:cf:f4:b9:cb:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
        Validity
            Not Before: Sep 20 07:00:22 2026 GMT
            Not After : Sep 21 07:00:22 2026 GMT
        Subject: CN=a3d3a91938c32bd9d1e9ac5aa15d457896bc6b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:5e:15:90:54:ae:94:09:fa:c5:35:6a:b5:
                    20:a5:55:5f:68:08:d0:54:d1:50:72:68:41:36:a5:
                    df:d2:d4:20:19:f7:ba:12:00:3d:f2:0a:b4:fc:8b:
                    b0:a0:8a:2d:ba:e8:ce:09:ef:a5:45:58:e6:90:e9:
                    57:7e:05:dd:eb:05:f2:d9:93:7b:c3:04:33:32:15:
                    d6:ca:72:6b:35:19:dd:c5:d3:a4:6e:21:0e:10:e2:
                    67:a8:09:76:4c:62:3d:64:55:c5:97:44:be:03:75:
                    78:26:7a:bb:8d:36:56:21:52:9a:af:69:b0:7c:c9:
                    a1:ce:df:f1:ec:db:16:86:75:06:04:e9:38:3d:8a:
                    fd:1e:28:b6:0f:12:8c:82:e9:65:0c:b7:5d:70:5f:
                    d9:60:e2:11:3e:b6:b9:dd:76:2f:7c:53:2e:8a:1a:
                    60:25:ae:d8:ac:1e:44:69:4b:ca:e4:48:b1:f6:c6:
                    11:50:07:e2:0d:95:63:d2:f1:ac:db:ba:45:7c:7a:
                    cb:3a:40:4c:54:b9:84:11:5b:e2:e8:72:68:8b:f1:
                    8c:78:df:29:a0:40:b8:36:c5:70:5e:29:f4:36:b3:
                    9f:04:66:5e:be:94:d4:39:07:c3:00:7e:dd:b0:a2:
                    da:b4:ca:08:8f:52:94:f9:4e:ab:35:d5:f2:67:d2:
                    f5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D3:A9:19:38:C3:2B:D9:D1:E9:AC:5A:A1:5D:45:78:96:BC:6B:9D
            X509v3 Authority Key Identifier:
                keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b2:ff:0a:b3:2a:2f:58:9e:bc:4f:d5:00:12:04:09:ca:75:
         97:59:18:4e:fb:13:9d:12:fd:0f:57:b2:ee:dc:ac:76:8c:e5:
         1d:fc:ae:a4:7c:82:ba:61:7a:66:4d:9d:2e:06:59:fe:ca:8f:
         52:1c:36:1b:dc:8c:67:76:29:79:83:20:fe:29:86:4e:21:4e:
         0f:b6:ac:ad:81:86:5a:55:f2:a1:e7:16:71:73:bf:05:d1:c7:
         50:01:73:b5:7d:3d:65:17:37:9a:83:8f:78:fe:31:7f:f7:05:
         d1:4b:f9:e9:93:4c:ef:22:9b:8f:7e:5c:75:df:04:d6:b3:29:
         a0:30:06:f3:90:05:2d:b7:4c:a7:fd:d9:cb:4d:d1:c3:c7:73:
         d2:3a:9e:72:02:d6:7a:da:5a:25:63:65:90:44:5b:13:41:fb:
         79:40:d9:8a:be:3f:42:3e:f5:f6:07:8a:ce:fc:55:ec:1d:27:
         39:80:6f:da:83:af:0c:a5:52:de:be:52:5f:d7:48:a4:8c:06:
         3c:56:dc:5b:7b:32:a6:d3:f8:e1:cf:6a:d2:e4:0c:1c:ec:c9:
         09:2a:3c:30:2d:36:de:a8:14:a8:aa:0f:5c:aa:33:7f:ce:83:
         2e:53:5d:43:09:9a:9c:e0:af:5d:ab:8d:4d:71:9d:bd:81:a9:
         06:07:91:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----