Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
File:                     CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft (raw, json)
Hash identifier:          l/QAPfCf2FzXDMl0qBWFqUTQsdrYYmv4mJqUq8C0fiI=
Subject key identifier:   A7:17:4E:70:83:9A:07:F7:34:06:AA:EE:BE:C5:F8:3B:2A:6E:A7:C7
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Certificate issuer:       /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial:       01A0BD3072038D7E3BA308D21A6E1DF98529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
Manifest number:          0B51
Signing time:             Sun 20 Sep 2026 05:01:03 +0000
Manifest this update:     Sun 20 Sep 2026 05:01:03 +0000
Manifest next update:     Mon 21 Sep 2026 05:01:03 +0000
Files and hashes:         1: CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl (hash: aX18bzptnZSA1mkEJ007ra1grUo9GqFDVxjgKaydumk=)
                          2: EifqMte_p2hR8_voNohWJOKKqhg.roa (hash: VpJaqS/G3zsMVGj86DP/RWB8XHMl4pOeKmlpX3T50F0=)
                          3: ePY7pKo_r6F5r4kushtbD4C6B8c.roa (hash: OOhXQHhG608Rk4uBCg7UcjZxEcLM+GjApQwGOTyy+Xk=)
                          4: hwJ3-YNSrCqijae1QuiJB84SYmg.roa (hash: j/M4BOIxFvg+NIIATCea2/4NOx1tHXpNrYiqr3qUrhw=)
                          5: phyf72oMEtXEeQf0b55IBK65kHk.roa (hash: R8eau6VdwgmovkLrdipJ4ZSn0SB3UvS4sKRU9OlPGpc=)
                          6: wVU65YFNMO8Ep4zr--w9w3jHWZs.roa (hash: JFMbeTIXPuRVVHgvcSxnXPOuYpUsPsT7/VM/0sAVCh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:30:72:03:8d:7e:3b:a3:08:d2:1a:6e:1d:f9:85:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
        Validity
            Not Before: Sep 20 05:01:03 2026 GMT
            Not After : Sep 21 05:01:03 2026 GMT
        Subject: CN=a7174e70839a07f73406aaeebec5f83b2a6ea7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:8a:06:3d:50:e4:9f:8d:cc:3f:53:7f:23:
                    73:8e:1a:35:8b:94:99:8c:30:df:f9:3c:59:fe:47:
                    68:aa:e0:d2:61:d6:66:6e:bb:b1:b4:37:ff:c2:a4:
                    66:03:cc:04:b1:c7:ac:3d:fe:6a:04:ca:6a:06:ef:
                    03:a7:79:f0:63:e2:23:9a:1d:2d:5f:98:17:0f:f5:
                    97:18:b1:bc:03:53:67:5b:a7:71:cc:6b:d2:3f:0b:
                    a6:10:1b:09:75:f0:92:8b:2d:f4:79:2b:a4:9e:26:
                    a4:7b:8a:de:1e:05:19:14:b6:3d:30:76:11:32:ee:
                    b1:00:9e:bf:32:1c:09:d6:c6:2f:04:0b:c3:60:e2:
                    95:a6:0b:12:00:03:e4:76:fc:f3:23:03:1e:60:a2:
                    a8:16:a3:a1:50:67:8c:e5:30:68:0d:f2:56:df:36:
                    b8:35:fe:cb:a2:ed:e3:05:8d:7f:dc:48:b3:b9:e2:
                    1a:6c:58:6b:9a:8b:8f:a0:2c:c8:06:66:bd:54:17:
                    a2:0f:ac:b0:f2:7f:45:43:24:a0:2b:cd:a0:32:51:
                    f4:71:ef:25:4e:a0:5c:79:07:51:e1:0b:12:de:06:
                    ca:69:b3:22:a1:c0:34:7a:8b:9f:37:b2:68:5c:06:
                    cc:9e:19:1f:92:ba:31:5d:78:37:b9:02:a5:d7:a5:
                    77:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:17:4E:70:83:9A:07:F7:34:06:AA:EE:BE:C5:F8:3B:2A:6E:A7:C7
            X509v3 Authority Key Identifier:
                keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:85:bd:77:86:c4:6e:bd:fa:cf:59:d5:fb:14:80:71:bd:59:
         2d:b4:f6:63:d0:c8:69:82:c9:11:d1:1d:25:39:cd:ea:12:21:
         c5:87:f5:3d:2b:3b:c1:9d:fb:51:d4:59:2f:28:ff:3e:39:11:
         b8:77:0a:80:d2:ce:7e:5d:6e:68:1c:e1:14:c2:a6:91:4e:6a:
         60:4b:97:7b:c7:17:9e:b9:41:15:c6:5b:17:13:c7:eb:98:36:
         b7:c2:cd:dd:b9:a1:50:49:78:3d:ef:c5:43:01:3b:d6:ea:4c:
         08:c9:e9:e7:c5:8a:50:72:30:fa:3c:c8:67:f4:92:1f:fa:90:
         18:75:7d:a8:60:99:25:33:89:1d:56:f1:81:ec:81:ba:49:4b:
         3c:07:7e:73:c1:af:e4:ce:6a:95:ef:53:06:a9:d6:a2:e4:64:
         2c:19:79:1e:7e:73:01:7c:2e:6b:a2:34:68:bb:6c:e5:05:e5:
         4e:b0:a6:e6:9b:0d:45:be:fd:47:69:5a:d0:ab:91:12:1d:1a:
         18:91:84:7b:31:81:3d:3a:42:a4:90:64:ab:0f:6c:69:52:92:
         02:f3:c6:72:f4:27:b4:c8:35:26:70:9f:26:7a:74:b1:84:04:
         a8:8a:30:d4:21:b1:ba:77:c9:7b:dd:d1:ff:c9:a5:eb:d3:0a:
         5b:33:24:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:25:27 2026 by rpki-client