Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
File:                     rqwbISmrusZTn4DaZVDElyHQqMQ.mft (raw, json)
Hash identifier:          okVrz1sraCXiYjmdVsD/Sz664W2L+/tIFOMPOnJOISA=
Subject key identifier:   66:94:31:07:49:52:A5:6B:B6:38:EC:5F:54:60:C8:E1:17:00:EF:DB
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Certificate issuer:       /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial:       01A0C2FB463A1175500DBBED5EDE212F70EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
Manifest number:          1A66
Signing time:             Mon 21 Sep 2026 08:00:42 +0000
Manifest this update:     Mon 21 Sep 2026 08:00:42 +0000
Manifest next update:     Tue 22 Sep 2026 08:00:42 +0000
Files and hashes:         1: 3oYuOEcw1b9v0ouS6gA5UBDk4tQ.asa (hash: nrqhWNV+Xc5NkmygiKViAPbV5PLyvcfSxXDvQeMjjJs=)
                          2: UYOEbjPyLAeXDjmWXka43xNSBrc.roa (hash: Ea7vb/KbqpdCWL5Nsui+X7+vrHZiuSMLp+d9Fc0ie4Y=)
                          3: W-LfzjkBmc4oTKnPhjs0kfHNJ6Q.roa (hash: ftW/H5OGOvc73tGHyq9jUHDKeB+UWHSYf4rvMWEvpmQ=)
                          4: rqwbISmrusZTn4DaZVDElyHQqMQ.crl (hash: gMyV24Pn6dzE7CHqeED8qhD81090fswlrLFxz0VZNSQ=)
                          5: w_LZxwyOUgD4IGBy1szvQwuznT8.roa (hash: YO+GhiXP/lIUMsu3S7EDreywlrg58HTztRPtniTveWM=)
                          6: x7TD4pUm1hOHrZRLC3TJ-5O5zTI.roa (hash: L8tddTG9LQKbBaTsHjpHN79P5a7dlI7sXDT4x985xho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fb:46:3a:11:75:50:0d:bb:ed:5e:de:21:2f:70:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
        Validity
            Not Before: Sep 21 08:00:42 2026 GMT
            Not After : Sep 22 08:00:42 2026 GMT
        Subject: CN=669431074952a56bb638ec5f5460c8e11700efdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:88:9d:95:1d:f5:e5:a3:e0:13:20:4e:6d:37:
                    02:f5:16:84:e4:60:28:30:8e:ef:99:c6:6c:45:a1:
                    f4:4c:d4:97:ca:b7:64:f4:15:8d:6f:98:48:a1:d6:
                    f0:56:9e:6a:93:b1:a0:14:e4:f8:2a:21:7f:c5:2f:
                    6d:28:f2:83:7d:40:38:ab:c0:63:e0:eb:05:3e:ab:
                    df:2f:f0:75:39:fb:bd:05:7b:d5:d5:77:ad:a0:5e:
                    e9:3e:6e:79:6a:bd:bb:bc:89:1f:db:db:6d:23:19:
                    a3:36:47:69:02:3e:29:7f:53:d2:16:6a:29:ea:05:
                    7d:6a:2c:cb:95:5f:80:d4:94:47:98:1c:a3:c4:c9:
                    4b:e6:ce:c9:2f:c6:77:6e:3b:a7:0f:71:ec:74:73:
                    8f:ec:db:32:b8:a5:e3:72:13:06:9b:b2:30:c2:ee:
                    71:f9:5c:d6:5d:74:62:50:06:33:14:37:08:48:09:
                    53:6c:2a:5b:af:cb:fd:a3:0d:91:1b:24:66:3a:dc:
                    a6:ae:15:17:82:28:5c:54:6d:b9:15:61:69:9f:02:
                    15:2a:e4:9d:83:ad:c2:a1:02:d0:ef:bd:ed:25:20:
                    16:af:7a:cf:16:28:98:03:22:69:1d:6c:e9:38:2c:
                    e9:34:35:ab:88:f5:97:87:5b:b1:0f:98:fc:43:76:
                    77:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:94:31:07:49:52:A5:6B:B6:38:EC:5F:54:60:C8:E1:17:00:EF:DB
            X509v3 Authority Key Identifier:
                keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d2:2d:cb:eb:a0:a4:fb:3a:60:b0:8f:37:36:73:da:e7:2d:
         4d:2d:fe:34:cc:ba:fb:7f:fe:6e:98:4f:96:ba:da:11:39:ce:
         22:5b:6d:8a:2c:7c:ae:b0:e8:13:ab:2f:e3:c1:f1:9d:0d:31:
         a7:6a:be:6c:e1:40:11:fe:86:fa:3d:9a:b4:53:a9:db:45:03:
         7b:61:4b:0c:62:89:e2:fd:40:7c:3d:35:c3:77:73:e6:31:61:
         a7:23:7d:1f:76:94:fe:90:09:0e:a2:b0:08:10:7c:ad:4c:16:
         0b:74:1a:fd:fe:cc:64:c1:fd:de:7b:51:6f:4c:f9:ac:d4:ab:
         31:9e:ce:a5:c4:a8:5c:9c:c1:ff:15:8f:96:39:3b:68:2f:33:
         43:9f:b4:0b:99:b3:a2:09:f8:ad:ce:24:ad:01:a9:62:33:3b:
         16:ed:c4:c1:51:55:1c:fa:8f:e6:33:8d:43:a7:c3:65:55:bb:
         2f:ab:3d:db:49:ae:6f:fe:b4:35:10:a2:30:0e:5e:74:f1:d3:
         1a:0d:d5:89:ba:5c:c0:a3:91:9e:b6:a0:af:98:25:db:27:c6:
         33:b1:1b:1b:b6:e8:e0:8c:c9:97:9b:7b:19:b4:81:d9:3c:40:
         20:26:23:bc:fd:0c:d3:08:dd:6b:60:a8:4f:99:1e:2e:f6:d9:
         d3:27:3c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:17:01 2026 by rpki-client