Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
File:                     _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json)
Hash identifier:          LToEg4l0nndd7K2O5tUwpto2MPkKV5fOjn0zsYbPp5E=
Subject key identifier:   CF:85:F5:79:7E:EB:63:DF:FC:D6:55:D7:3E:6A:62:93:0A:29:5D:D6
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Certificate issuer:       /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial:       01A1449633708A94C9CA1F84DA23EFB3E00E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
Manifest number:          152A
Signing time:             Fri 16 Oct 2026 12:00:56 +0000
Manifest this update:     Fri 16 Oct 2026 12:00:56 +0000
Manifest next update:     Sat 17 Oct 2026 12:00:56 +0000
Files and hashes:         1: DzshirtWicNrDuK0JWqKHNIqs0I.roa (hash: T2DQWKAIsgzJl63HpzB70Owqfsg5T+wUK5RjGOLK3uY=)
                          2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: wCJH7WOIXTNnAR9yPtua3M9AFpB741qXP6cWHeTske4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:44:96:33:70:8a:94:c9:ca:1f:84:da:23:ef:b3:e0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
        Validity
            Not Before: Oct 16 12:00:56 2026 GMT
            Not After : Oct 17 12:00:56 2026 GMT
        Subject: CN=cf85f5797eeb63dffcd655d73e6a62930a295dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:cd:17:60:6c:39:84:c1:31:7a:23:35:cb:
                    b5:95:11:33:49:e0:35:d0:2f:9f:5f:50:ad:a8:61:
                    bb:85:f4:fc:b1:ca:4f:75:4a:d3:2d:d9:05:95:70:
                    9f:a9:c6:9f:3e:34:bf:be:35:c7:ca:23:54:65:81:
                    8e:d3:11:db:00:95:34:6f:a9:84:a7:0e:ff:e2:8d:
                    f4:01:e6:12:67:9e:c1:7d:cf:7f:27:4a:9f:a7:a1:
                    1f:50:c3:61:c6:3b:e7:0d:57:93:5b:a0:42:d4:2a:
                    7a:45:d7:1f:6e:5e:d1:6f:ef:f1:96:9b:b4:9c:11:
                    e1:79:be:98:8d:5f:0f:a1:92:49:60:9c:40:88:67:
                    e2:2c:1d:af:e6:7e:59:07:96:54:3a:21:2b:9e:e7:
                    c4:fc:83:f9:a2:7a:50:61:89:3b:08:e4:40:15:bc:
                    15:3f:cd:a8:4a:e7:44:db:14:42:2d:bc:d4:4f:c1:
                    27:cf:8d:3b:5c:f2:6b:49:8a:02:c6:1b:25:21:cf:
                    27:63:9f:0e:4d:3e:b6:1d:1d:f8:01:77:7b:2d:5a:
                    cd:e3:ca:b5:11:78:2b:6b:3b:8a:55:e3:2b:35:5d:
                    2b:06:62:d7:86:f3:4f:c9:c7:6c:38:54:a7:4c:eb:
                    03:cc:94:f2:45:3e:ad:db:96:05:0a:28:41:62:69:
                    08:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:85:F5:79:7E:EB:63:DF:FC:D6:55:D7:3E:6A:62:93:0A:29:5D:D6
            X509v3 Authority Key Identifier:
                keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4a:66:d2:b4:ed:18:a4:04:4f:69:e1:ac:04:ec:3a:ce:22:
         7c:36:7c:36:0a:28:cf:84:a4:52:ba:4c:6d:10:df:46:3e:2b:
         fb:e6:31:d8:27:20:6a:aa:11:7e:65:ea:c4:74:09:4b:ae:ee:
         77:db:8e:31:0d:ae:c4:b1:99:a2:62:8e:d0:f7:55:c5:65:b6:
         83:c6:ad:f8:59:a0:52:e3:6d:fe:da:d0:da:a8:a1:b4:3a:e3:
         86:3a:60:d3:5e:97:bf:f9:d7:c6:90:16:ac:ab:f9:18:49:62:
         b0:6f:da:b1:68:2a:c5:cb:c2:73:30:1f:ad:96:fc:54:2b:ae:
         28:4f:79:77:ae:ce:64:27:ff:98:c7:b6:3d:34:be:a5:da:09:
         21:e9:09:65:3e:b6:a5:26:39:88:d3:1e:b7:ca:bc:8d:aa:9e:
         19:c1:43:7d:26:9e:d7:89:d3:77:7a:3e:f7:93:b1:e9:6e:87:
         16:2c:32:28:e8:85:9a:6b:bb:60:7c:0c:74:04:0c:ce:98:7b:
         ae:c1:67:66:a6:9a:af:ff:bb:89:30:a8:f3:0e:26:cc:f7:c3:
         12:73:68:7f:64:f2:72:0c:68:07:d8:a3:46:85:95:4d:a4:39:
         63:61:8e:3d:66:79:64:39:ac:69:f4:6e:91:44:9b:53:7b:f1:
         2d:9d:e3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 22:31:59 2026 by rpki-client