Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
File:                     qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json)
Hash identifier:          03AFVR924mmVkLkWp7s0REKu2CbECHr+XvJ3B6KojRY=
Subject key identifier:   51:9F:6A:C0:1D:A1:7F:65:D9:CC:31:7A:46:DC:61:E8:BF:56:18:A3
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Certificate issuer:       /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial:       01A0D048DD142FDCC67E9FAB0291D5DA63C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
Manifest number:          0B76
Signing time:             Wed 23 Sep 2026 22:00:31 +0000
Manifest this update:     Wed 23 Sep 2026 22:00:31 +0000
Manifest next update:     Thu 24 Sep 2026 22:00:31 +0000
Files and hashes:         1: J_Or8KZX1wZ3vXfvww5iG8YKGng.roa (hash: d0jCHNsxIqtKvODKfik7z9iL8EdgI8lCwjcpoaXOc1E=)
                          2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: zMIHTsLSlB0B0gklvEu5sIH6RPjDyxJTDR/aBrkTAJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:48:dd:14:2f:dc:c6:7e:9f:ab:02:91:d5:da:63:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
        Validity
            Not Before: Sep 23 22:00:31 2026 GMT
            Not After : Sep 24 22:00:31 2026 GMT
        Subject: CN=519f6ac01da17f65d9cc317a46dc61e8bf5618a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c4:76:fe:79:4a:42:60:bb:a3:96:41:63:0c:
                    49:07:47:64:c2:f1:ba:81:3d:bb:a9:89:a4:ce:85:
                    75:5e:d2:3d:d7:b0:30:da:a3:5d:db:9e:45:44:31:
                    ba:78:d9:41:ff:22:c3:63:ce:71:17:70:6d:06:c3:
                    6f:32:b6:8a:06:2e:6e:a6:4b:6d:32:e9:d4:db:92:
                    18:18:72:3e:fd:11:76:5d:84:1d:ac:0b:67:52:40:
                    05:83:f0:cf:58:5b:fc:cd:87:6a:a3:d7:2f:ac:0f:
                    4b:0d:b8:fe:dc:41:d0:e0:ae:d4:be:50:75:1b:c5:
                    c2:9d:66:20:11:e9:1a:f4:c9:87:a6:73:d8:47:b9:
                    66:db:00:0a:7a:d4:91:ee:dc:bf:81:52:7c:b9:08:
                    76:72:4c:93:fe:a6:db:ca:9d:51:e3:11:8a:6d:f7:
                    e6:a5:34:ef:8b:3f:49:f4:e0:04:fc:42:8d:3d:96:
                    d7:c9:70:ee:b6:7b:62:47:ad:c4:a4:98:fb:db:93:
                    8b:8f:d1:50:e7:d7:48:c1:08:d4:df:a5:ef:5f:2a:
                    6f:c5:af:10:a1:ff:fb:59:d8:a0:27:26:5f:bd:96:
                    22:44:35:19:0b:7f:2b:03:1a:1c:e1:bd:10:c0:b9:
                    7b:7d:94:ce:d2:2f:4f:d0:8c:60:18:36:90:1b:ab:
                    b6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9F:6A:C0:1D:A1:7F:65:D9:CC:31:7A:46:DC:61:E8:BF:56:18:A3
            X509v3 Authority Key Identifier:
                keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:62:04:55:7a:8c:54:4e:37:81:04:78:24:48:b2:71:a0:70:
         bd:ed:b6:5d:01:c1:04:d0:51:22:7c:71:85:f4:d5:4d:7d:fc:
         07:b0:a5:50:58:bd:2c:bb:28:12:93:a0:45:d5:56:35:ca:e0:
         d7:b3:4f:e8:c2:62:02:03:24:c1:07:74:4b:d0:76:dd:6c:a8:
         ea:85:ec:b1:3c:44:d5:53:b8:d8:35:4f:7b:ba:ad:27:ec:f6:
         cb:68:27:4e:08:98:26:12:9d:b1:76:bc:28:f9:2a:53:04:55:
         a0:85:12:c6:81:d1:b9:99:eb:25:24:e0:ab:75:e1:96:14:eb:
         87:d1:48:41:7e:cb:33:22:20:49:89:a6:2f:a4:16:be:79:3c:
         1a:07:9b:4e:73:6f:84:b5:63:c4:0e:c8:f6:6a:cf:39:1a:12:
         cb:fc:3c:2c:33:1b:6e:db:09:04:75:30:9f:69:b7:6e:11:ac:
         83:0a:38:80:f7:e1:de:a9:8d:55:94:85:ad:01:a7:5f:0b:84:
         b0:51:56:ee:e2:45:5b:56:2c:33:60:7c:03:49:79:1b:17:29:
         e8:3a:0c:21:b4:e9:c0:e3:74:bc:e2:1a:fc:2e:39:8e:11:16:
         c6:4a:c4:75:79:cc:b5:1a:0a:94:f9:83:77:c6:04:20:29:2c:
         bd:2a:ba:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:43:23 2026 by rpki-client