Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
File:                     auSqdx_QpXjqOqxLTT7IPYlGRj0.mft (raw, json)
Hash identifier:          8eXR8mDajVI2EFcXsmblgrlZFeU+Npf1Nh9lMHblpas=
Subject key identifier:   73:76:71:87:D0:59:71:07:63:44:43:08:5D:C4:A9:F5:55:0E:52:77
Authority key identifier: 6A:E4:AA:77:1F:D0:A5:78:EA:3A:AC:4B:4D:3E:C8:3D:89:46:46:3D
Certificate issuer:       /CN=6ae4aa771fd0a578ea3aac4b4d3ec83d8946463d
Certificate serial:       01A13258C09F9EE8A81B0EB5BD10527664B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
Manifest number:          02E4
Signing time:             Mon 12 Oct 2026 23:00:39 +0000
Manifest this update:     Mon 12 Oct 2026 23:00:39 +0000
Manifest next update:     Tue 13 Oct 2026 23:00:39 +0000
Files and hashes:         1: GDQQ0FqYT9AvbB4OzpV_W08txF4.roa (hash: +7D1/7LzTXBfcdD4Y5uzQNgYSY1go2hv/v2LnVgCR1Y=)
                          2: auSqdx_QpXjqOqxLTT7IPYlGRj0.crl (hash: P+hz7n66LEUVMHjMtrw2wCgC35uocN2L3jbjycgsdug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:58:c0:9f:9e:e8:a8:1b:0e:b5:bd:10:52:76:64:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ae4aa771fd0a578ea3aac4b4d3ec83d8946463d
        Validity
            Not Before: Oct 12 23:00:39 2026 GMT
            Not After : Oct 13 23:00:39 2026 GMT
        Subject: CN=73767187d0597107634443085dc4a9f5550e5277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:93:64:b1:e4:86:9d:c2:68:5b:18:a7:ba:bd:
                    7d:8f:42:89:67:f1:bd:bf:8c:b9:0a:0c:ee:6d:21:
                    41:19:77:f7:ec:a2:b8:1d:39:85:0b:68:ce:a7:91:
                    25:fc:6e:13:cb:2c:71:46:bb:d3:0b:38:57:39:d2:
                    b1:8d:0b:c8:37:73:21:03:49:e8:8f:c7:f7:fc:c0:
                    2c:be:33:65:8b:1f:a3:f0:a2:a1:80:d5:d3:88:05:
                    76:aa:79:48:a1:ba:91:e3:08:0c:65:22:cf:e5:da:
                    bd:86:72:f4:aa:af:0d:e6:55:1b:d6:36:f3:fc:8b:
                    c4:82:7a:b9:23:40:d2:d3:b2:64:30:9e:1b:94:23:
                    2a:d1:39:86:a2:5e:e3:91:2d:cf:b2:78:55:00:0d:
                    16:28:96:f2:1b:ea:81:cd:7d:59:2d:60:7e:90:b3:
                    99:84:2a:86:cc:40:d4:6e:aa:24:5a:f8:15:01:64:
                    a4:31:0c:f9:83:c0:1c:e4:e0:3a:39:38:41:f7:22:
                    26:7d:a7:51:42:bf:aa:d7:f6:04:51:d0:f1:20:2d:
                    8d:2a:6f:4d:c6:18:a6:87:b1:4a:04:61:02:e1:2f:
                    99:3c:e0:ed:b2:21:da:13:9e:b8:da:92:f8:c1:f6:
                    a0:84:26:9a:4b:41:7e:9a:cf:d7:0c:ed:b3:4f:0c:
                    d0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:76:71:87:D0:59:71:07:63:44:43:08:5D:C4:A9:F5:55:0E:52:77
            X509v3 Authority Key Identifier:
                keyid:6A:E4:AA:77:1F:D0:A5:78:EA:3A:AC:4B:4D:3E:C8:3D:89:46:46:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auSqdx_QpXjqOqxLTT7IPYlGRj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85a9ff-f5c2-4361-901e-038d24071a8a/1/auSqdx_QpXjqOqxLTT7IPYlGRj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:32:61:e1:6c:ec:f9:35:b7:7f:ca:b9:e1:bb:78:35:a1:a1:
         28:76:c1:6c:9e:a1:31:bb:36:f8:44:b2:c6:41:c5:11:2d:b0:
         a4:e1:46:d7:73:60:bd:2d:56:6c:6a:1c:fd:b4:5f:9e:67:6d:
         b0:6c:85:bc:aa:d9:14:4b:d1:ee:93:28:ee:6e:5e:4f:d6:f9:
         02:0a:b3:98:71:f4:95:b8:55:b1:aa:22:1b:0f:08:fa:27:df:
         ac:de:0a:9e:eb:f8:46:59:61:2e:9c:15:14:1e:4c:3a:ac:97:
         a1:00:1a:43:10:85:f5:25:a5:cb:a8:58:7c:92:47:4c:9e:59:
         b2:f4:1a:d0:53:92:e7:95:5a:af:90:bb:df:38:19:ea:f8:32:
         a7:b6:f4:2a:c7:1b:3f:69:14:9d:d4:b3:83:5b:70:4d:9e:96:
         52:fe:ea:b9:ac:72:99:2b:47:d3:b1:e9:b9:38:fe:f1:41:16:
         f2:92:0b:f8:29:f2:10:8f:db:2b:5c:08:81:83:e1:b5:94:eb:
         06:65:d6:23:cf:89:2c:21:ab:5b:cd:ed:f8:db:db:ca:a5:36:
         b8:4d:ab:72:7b:ae:8d:b9:02:3b:ce:80:13:b6:31:b5:db:9c:
         0f:f6:d3:22:41:c6:4a:6f:fd:c1:2c:fc:81:f7:d7:a7:8e:cc:
         fd:38:75:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEyWMCfnuioGw61vRBSdmS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZTRhYTc3MWZkMGE1NzhlYTNhYWM0YjRkM2VjODNkODk0
NjQ2M2QwHhcNMjYxMDEyMjMwMDM5WhcNMjYxMDEzMjMwMDM5WjAzMTEwLwYDVQQD
Eyg3Mzc2NzE4N2QwNTk3MTA3NjM0NDQzMDg1ZGM0YTlmNTU1MGU1Mjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JNkseSGncJoWxinur19j0KJZ/G9
v4y5CgzubSFBGXf37KK4HTmFC2jOp5El/G4TyyxxRrvTCzhXOdKxjQvIN3MhA0no
j8f3/MAsvjNlix+j8KKhgNXTiAV2qnlIobqR4wgMZSLP5dq9hnL0qq8N5lUb1jbz
/IvEgnq5I0DS07JkMJ4blCMq0TmGol7jkS3PsnhVAA0WKJbyG+qBzX1ZLWB+kLOZ
hCqGzEDUbqokWvgVAWSkMQz5g8Ac5OA6OThB9yImfadRQr+q1/YEUdDxIC2NKm9N
xhimh7FKBGEC4S+ZPODtsiHaE5642pL4wfaghCaaS0F+ms/XDO2zTwzQkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHN2cYfQWXEHY0RDCF3EqfVVDlJ3MB8GA1UdIwQY
MBaAFGrkqncf0KV46jqsS00+yD2JRkY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXVTcWR4X1FwWGpxT3F4TFRUN0lQWWxHUmowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NWE5ZmYtZjVjMi00MzYxLTkwMWUt
MDM4ZDI0MDcxYThhLzEvYXVTcWR4X1FwWGpxT3F4TFRUN0lQWWxHUmowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84NWE5ZmYtZjVjMi00MzYxLTkwMWUtMDM4ZDI0MDcxYThh
LzEvYXVTcWR4X1FwWGpxT3F4TFRUN0lQWWxHUmowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzJh4Wzs
+TW3f8q54bt4NaGhKHbBbJ6hMbs2+ESyxkHFES2wpOFG13NgvS1WbGoc/bRfnmdt
sGyFvKrZFEvR7pMo7m5eT9b5AgqzmHH0lbhVsaoiGw8I+iffrN4Knuv4RllhLpwV
FB5MOqyXoQAaQxCF9SWly6hYfJJHTJ5ZsvQa0FOS55Var5C73zgZ6vgyp7b0Kscb
P2kUndSzg1twTZ6WUv7quaxymStH07HpuTj+8UEW8pIL+CnyEI/bK1wIgYPhtZTr
BmXWI8+JLCGrW83t+NvbyqU2uE2rcnuujbkCO86AE7YxtducD/bTIkHGSm/9wSz8
gffXp47M/Th1MA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 03:53:32 2026 by rpki-client