Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
File:                     fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft (raw, json)
Hash identifier:          izvxUBQeeCqLIzgQ4tPeaLAYLp2aBOJ28n+OPZERSZA=
Subject key identifier:   C5:91:33:B7:A5:05:84:FB:6A:89:94:3E:24:30:6F:0C:AF:74:18:40
Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
Certificate issuer:       /CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Certificate serial:       01A0C6D873B24E83A377E5DC072A3C8E386E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
Manifest number:          1A6A
Signing time:             Tue 22 Sep 2026 02:01:09 +0000
Manifest this update:     Tue 22 Sep 2026 02:01:09 +0000
Manifest next update:     Wed 23 Sep 2026 02:01:09 +0000
Files and hashes:         1: WJpebRSVLbQrdcjeB04EXCpIhRg.roa (hash: XP6zMi85BeS7CS6gjX07ym99dXpvUnSFZsiLXXS4Qvw=)
                          2: fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl (hash: 5rbg+RYzLLXWghkJK59QZ6AtdkZYW3auww9fLIOmAW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:d8:73:b2:4e:83:a3:77:e5:dc:07:2a:3c:8e:38:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2
        Validity
            Not Before: Sep 22 02:01:09 2026 GMT
            Not After : Sep 23 02:01:09 2026 GMT
        Subject: CN=c59133b7a50584fb6a89943e24306f0caf741840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:46:23:99:7d:31:34:c7:a8:34:af:2c:dd:
                    42:07:9b:b9:bd:dc:42:ac:32:77:74:2c:82:f5:c2:
                    26:66:25:57:e7:3f:b1:e2:a8:81:d2:1c:db:31:75:
                    0b:01:6e:66:d3:9d:9a:75:71:8e:c2:78:df:18:41:
                    ca:0a:cf:3b:fb:d7:21:e2:1b:6e:1e:1e:49:76:b1:
                    fd:50:f9:fc:25:b3:d8:42:4e:f7:87:d7:b0:82:73:
                    36:0a:dc:6e:e1:b5:2f:c8:73:3c:32:98:73:9c:96:
                    86:a9:ba:38:44:8f:ca:6a:0a:85:41:66:5e:4f:b8:
                    d6:9e:0e:06:d0:3c:00:85:61:c8:b3:7f:16:59:e2:
                    9f:76:5c:0c:fd:77:5a:cc:bd:f2:5c:9d:89:51:74:
                    ed:bc:bd:47:54:df:8b:69:30:67:a9:a3:0b:8c:98:
                    4e:c1:f8:72:6a:67:e3:8c:95:7d:3e:e0:2c:7c:14:
                    d3:b3:fd:ff:af:75:35:8c:14:2c:a5:30:fe:ad:fc:
                    21:0f:25:55:98:05:5a:2d:9f:c5:a4:7a:a3:08:52:
                    4b:94:84:2b:3d:43:94:c5:43:35:b8:86:33:6f:4f:
                    c3:06:75:48:88:54:68:ef:b2:4e:77:c1:fe:34:5a:
                    92:f0:90:bc:c6:d4:bc:ed:cf:82:d6:9c:98:58:7e:
                    85:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:91:33:B7:A5:05:84:FB:6A:89:94:3E:24:30:6F:0C:AF:74:18:40
            X509v3 Authority Key Identifier:
                keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:31:37:bc:5b:f1:ad:17:3a:ab:40:ba:07:11:3a:1e:45:c6:
         a8:13:e1:55:f0:66:a7:a9:91:87:ae:61:dd:d0:ce:d7:fb:29:
         d5:c8:c4:c0:73:7c:8e:93:ea:a6:15:94:7b:7c:74:eb:a4:82:
         88:3b:01:a0:89:99:6f:50:27:d2:5f:59:ec:5c:e1:d5:2e:d4:
         bc:79:85:a5:5d:d2:3c:77:ae:39:70:9e:9a:51:ad:a8:e9:16:
         40:53:75:a7:4d:49:05:5e:61:c3:6d:c0:ca:26:72:cb:b0:07:
         8d:27:f6:17:10:d6:e1:cb:bb:8f:66:96:fe:87:63:64:1e:56:
         55:11:99:25:b2:c2:00:ec:dc:d1:3c:77:ea:6d:55:bc:03:b5:
         50:86:4f:4b:d2:bb:c6:9d:55:31:a2:47:41:e1:ce:87:2f:e2:
         70:df:fe:be:7c:56:b4:16:ac:b8:6b:0d:31:63:89:c8:13:a4:
         50:73:32:88:ac:45:1c:d8:99:db:5f:da:f1:88:2e:04:aa:b8:
         10:04:25:d7:51:59:ee:68:ec:ec:33:9a:ba:3e:8a:4c:d1:43:
         53:80:4e:72:c5:2c:13:e0:ba:c9:b1:70:83:01:7f:1f:0c:06:
         a1:e8:f1:67:d0:ed:d3:94:94:92:37:f4:6e:c9:a9:e3:6a:b8:
         31:52:18:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:14:49 2026 by rpki-client