Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
File:                     QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft (raw, json)
Hash identifier:          guIX32cshyiFJUAZb1uWry9CfQNVYW9tbQy7Xk5TPgQ=
Subject key identifier:   50:5B:2A:EA:37:D7:1F:79:ED:DE:A8:21:12:CD:6D:58:62:A4:6C:98
Authority key identifier: 42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
Certificate issuer:       /CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Certificate serial:       01A0C6A10B3FBEF1B79F98359DADAC987346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
Manifest number:          02F1
Signing time:             Tue 22 Sep 2026 01:00:37 +0000
Manifest this update:     Tue 22 Sep 2026 01:00:37 +0000
Manifest next update:     Wed 23 Sep 2026 01:00:37 +0000
Files and hashes:         1: QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl (hash: UhsKxHFSJJZJ3RbutV7TymvMFRcqbfrbZsq4T31iFgY=)
                          2: t7k_beV3qkNWRdLGwtpfAS6V7HA.roa (hash: vZai5iXmOI1X+EFyUMtGKdKYCWdym2JXQnnjYc/fJOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:a1:0b:3f:be:f1:b7:9f:98:35:9d:ad:ac:98:73:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
        Validity
            Not Before: Sep 22 01:00:37 2026 GMT
            Not After : Sep 23 01:00:37 2026 GMT
        Subject: CN=505b2aea37d71f79eddea82112cd6d5862a46c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:73:c8:e8:65:c3:ac:61:49:f7:78:88:59:
                    fd:34:7b:49:de:da:46:ba:70:4e:68:45:8c:dd:13:
                    4a:47:fd:de:d2:68:24:61:88:54:f1:38:08:98:d1:
                    33:70:95:38:67:0c:cd:a1:53:18:6a:82:1a:ba:65:
                    1e:fd:86:88:8d:5f:32:40:9c:cf:08:92:aa:78:f2:
                    56:66:9f:e6:8b:02:ff:1b:ae:63:a0:5c:81:92:6d:
                    9b:fb:a2:1b:71:84:88:d3:dd:05:74:68:68:48:9c:
                    ac:77:83:4e:19:9d:bc:54:91:bc:8c:ba:e9:a8:3a:
                    c5:14:41:18:e4:04:27:a9:f6:20:e6:e3:e4:88:c3:
                    2a:21:8a:52:16:74:6f:a7:33:5f:47:8f:7c:6b:0c:
                    4f:52:29:28:42:39:ef:a7:78:33:08:af:15:ae:b3:
                    2c:fc:4c:ac:8a:b4:46:91:17:1a:b1:98:f5:d1:5e:
                    7f:04:56:00:00:71:2d:0c:37:7b:f4:45:17:db:7a:
                    a4:54:ec:97:ea:9c:4f:f5:40:89:45:5a:ea:58:62:
                    a6:1d:9a:48:83:47:6d:0c:12:b2:1f:2a:fa:5f:a7:
                    0b:0b:27:fe:76:f8:94:65:8a:d9:57:e8:80:61:bf:
                    4b:4f:a8:9d:48:43:e9:62:fb:05:84:db:25:9b:14:
                    5f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5B:2A:EA:37:D7:1F:79:ED:DE:A8:21:12:CD:6D:58:62:A4:6C:98
            X509v3 Authority Key Identifier:
                keyid:42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:75:9a:05:0e:0a:14:fe:e0:15:c5:b8:e2:e3:2b:c7:82:f0:
         64:90:36:60:81:cd:1c:dd:3b:91:a3:94:51:16:b6:ea:be:f7:
         c8:23:e6:11:53:2a:7e:61:ea:ff:27:b2:ec:8d:f5:d4:fe:ac:
         cd:58:bb:71:cf:60:30:23:ae:13:13:2c:df:b6:42:01:e8:3e:
         8f:0c:85:fb:44:0a:bb:69:2a:b7:4a:8c:34:80:3e:30:e7:85:
         ce:e4:dd:21:17:29:f0:01:c9:f5:95:47:89:a8:47:e9:f1:39:
         46:fd:6c:7b:0c:84:61:91:c7:4c:93:2d:c0:07:fb:2b:ef:db:
         ea:06:0b:8f:47:ec:37:c5:8f:d8:1e:34:96:c7:e5:da:62:27:
         59:9a:5f:8a:60:58:8f:ea:6a:72:f4:fc:5f:a0:97:45:d4:cc:
         a3:e1:1c:bd:4f:a2:17:4e:bf:66:82:45:8e:ad:27:c4:8a:23:
         55:3e:c0:b9:42:ee:fa:b6:e2:45:80:64:67:2f:c6:8d:50:4a:
         f6:13:b3:cb:a7:2e:ab:28:99:2a:0b:e1:fa:7a:7a:36:fb:f3:
         0b:d6:1b:17:1b:02:f0:ea:20:3e:a3:f9:7c:29:e6:e8:dc:91:
         d1:f7:04:66:c5:dd:e0:e9:ad:d0:20:cd:a4:f4:19:9f:a6:53:
         7c:67:db:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGoQs/vvG3n5g1na2smHNGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZDllYzVlMjI4YjRhZjdmMDNjMzQ1YmMzOTY3ZjUxZDZm
ZjhhMDkwHhcNMjYwOTIyMDEwMDM3WhcNMjYwOTIzMDEwMDM3WjAzMTEwLwYDVQQD
Eyg1MDViMmFlYTM3ZDcxZjc5ZWRkZWE4MjExMmNkNmQ1ODYyYTQ2Yzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzidzyOhlw6xhSfd4iFn9NHtJ3tpG
unBOaEWM3RNKR/3e0mgkYYhU8TgImNEzcJU4ZwzNoVMYaoIaumUe/YaIjV8yQJzP
CJKqePJWZp/miwL/G65joFyBkm2b+6IbcYSI090FdGhoSJysd4NOGZ28VJG8jLrp
qDrFFEEY5AQnqfYg5uPkiMMqIYpSFnRvpzNfR498awxPUikoQjnvp3gzCK8VrrMs
/EysirRGkRcasZj10V5/BFYAAHEtDDd79EUX23qkVOyX6pxP9UCJRVrqWGKmHZpI
g0dtDBKyHyr6X6cLCyf+dviUZYrZV+iAYb9LT6idSEPpYvsFhNslmxRfOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBbKuo31x957d6oIRLNbVhipGyYMB8GA1UdIwQY
MBaAFELZ7F4ii0r38Dw0W8OWf1HW/4oJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXRuc1hpS0xTdmZ3UERSYnc1Wl9VZGJfaWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kZGUzNTEtNzlhMi00M2E0LTgxYjkt
NmM5YjQ4YmRiZmU1LzEvUXRuc1hpS0xTdmZ3UERSYnc1Wl9VZGJfaWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9kZGUzNTEtNzlhMi00M2E0LTgxYjktNmM5YjQ4YmRiZmU1
LzEvUXRuc1hpS0xTdmZ3UERSYnc1Wl9VZGJfaWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXWaBQ4K
FP7gFcW44uMrx4LwZJA2YIHNHN07kaOUURa26r73yCPmEVMqfmHq/yey7I311P6s
zVi7cc9gMCOuExMs37ZCAeg+jwyF+0QKu2kqt0qMNIA+MOeFzuTdIRcp8AHJ9ZVH
iahH6fE5Rv1sewyEYZHHTJMtwAf7K+/b6gYLj0fsN8WP2B40lsfl2mInWZpfimBY
j+pqcvT8X6CXRdTMo+EcvU+iF06/ZoJFjq0nxIojVT7AuULu+rbiRYBkZy/GjVBK
9hOzy6cuqyiZKgvh+np6NvvzC9YbFxsC8OogPqP5fCnm6NyR0fcEZsXd4Omt0CDN
pPQZn6ZTfGfbBA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:33:27 2026 by rpki-client