Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File:                     qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier:          ob4qyqLwHhyuH5hKhLGWWJY0quzRYAcR6+gn8SDRyiY=
Subject key identifier:   51:0D:1C:84:BC:08:7F:95:E7:04:D8:0E:95:4A:8D:41:8B:9E:EE:E0
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer:       /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial:       01A0C74663981DEB91FF0D9956EB52643C9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number:          136B
Signing time:             Tue 22 Sep 2026 04:01:14 +0000
Manifest this update:     Tue 22 Sep 2026 04:01:14 +0000
Manifest next update:     Wed 23 Sep 2026 04:01:14 +0000
Files and hashes:         1: Io1aFz3FdR5Bh1mYcrCe9mIequ8.roa (hash: MsqgD4dNC1FiLIJAOYEnGOt34n4HFw6UdIBX7nTzrgg=)
                          2: TKU8Yc2L0FbHGl3NXxfpL1eDNnE.roa (hash: c75+0er1lGRbZ38ME3BfFzi74fQVT9//khB7uqu1zrM=)
                          3: k71EKLBF_cl_NNSjkCcESijpJkY.roa (hash: NcQun5U6vnHcxP8j+XhrdDKMSW0mSEQmABKKB6veuXY=)
                          4: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: wVoNcsnkHpWQagPCYLAAHhZ/LAMsiNyJafWECaZBt7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 04:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:46:63:98:1d:eb:91:ff:0d:99:56:eb:52:64:3c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
        Validity
            Not Before: Sep 22 04:01:14 2026 GMT
            Not After : Sep 23 04:01:14 2026 GMT
        Subject: CN=510d1c84bc087f95e704d80e954a8d418b9eeee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:16:5e:08:da:09:04:04:07:cd:4b:2d:9e:3d:
                    39:21:4a:f9:42:a5:29:60:cb:ab:ac:be:4f:16:44:
                    7a:91:bb:f5:26:fa:08:f8:a7:b6:76:08:5a:85:0f:
                    36:32:bb:f2:da:81:8d:b5:dc:4c:63:9e:d9:fd:b7:
                    1d:a5:4a:4b:6b:03:c6:d7:d3:61:12:5d:ba:d7:b4:
                    9a:6d:2e:bf:de:35:66:2c:9e:71:bd:db:db:b2:be:
                    86:ed:db:80:0a:cf:1a:00:4e:81:29:72:a0:0e:e4:
                    be:d1:f2:4a:94:0d:95:d1:49:1f:61:ed:36:15:94:
                    4b:48:76:66:7a:9b:4a:a9:0e:ff:fd:42:c6:dc:65:
                    38:9f:1b:30:17:30:f5:7d:81:5e:a1:b4:e5:df:5c:
                    21:0e:5f:e6:e4:db:86:dd:47:67:84:24:74:92:54:
                    93:33:50:18:16:5b:07:6f:99:23:7c:b3:f7:81:fd:
                    21:0f:96:fa:13:30:f4:2e:09:0e:b4:35:69:ee:ea:
                    9b:22:49:91:1b:c6:e9:14:93:05:83:2b:fb:0a:e5:
                    33:6f:40:91:72:13:93:08:bc:bc:70:49:c8:0e:8a:
                    e0:d2:0c:6d:14:90:c5:97:8c:57:fa:bd:d3:8e:75:
                    39:61:5c:2d:ff:4c:a9:78:fa:c0:11:5e:8a:c5:27:
                    32:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0D:1C:84:BC:08:7F:95:E7:04:D8:0E:95:4A:8D:41:8B:9E:EE:E0
            X509v3 Authority Key Identifier:
                keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:25:90:48:3d:82:14:9b:37:6f:8e:68:d2:1a:0e:25:d9:5a:
         5f:ae:cd:d4:13:0a:7d:39:cc:c2:bf:d9:e1:f9:60:a6:83:47:
         59:95:19:45:c8:5a:07:24:cf:84:34:82:c2:66:11:be:dd:70:
         02:2d:7a:39:5b:8c:64:fe:ae:7e:fe:24:92:2b:75:ca:e1:f2:
         69:fb:04:71:c6:5c:d9:e6:f9:d5:68:83:2d:75:e3:9d:f0:d7:
         9d:c9:13:1a:aa:35:77:6a:8b:bd:ad:f0:45:fe:40:65:d5:3d:
         c4:68:b9:a3:0f:f9:aa:02:f5:95:56:e9:6d:4b:9a:fb:8f:86:
         db:c7:66:67:c1:f7:31:9d:d1:ab:7d:94:3c:3c:07:7f:b4:f2:
         9f:b4:a4:b1:18:fa:1b:e1:c3:e5:71:bd:a7:0d:0e:ef:28:30:
         04:0a:aa:c1:16:3b:92:68:10:9f:dc:dd:f6:02:1d:0e:1f:c2:
         07:3d:c5:82:4b:45:f6:79:86:bd:fc:2e:c9:30:db:ac:bf:3c:
         d3:01:15:b2:e8:fb:b7:07:4c:5b:c9:cf:ef:8b:4e:08:af:d1:
         45:ae:5a:b0:23:e6:3d:2a:1f:c5:ce:21:0f:b6:c9:bf:be:6e:
         c7:3d:bc:81:9b:43:88:b9:8d:91:43:60:09:2b:4e:c1:da:9b:
         67:8a:15:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:03:06 2026 by rpki-client