Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
File:                     sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json)
Hash identifier:          hMMUXMi5UV25wtNq+XUogTQxonnjjvpz+UK3Npi5/t0=
Subject key identifier:   81:B9:5A:BB:9E:7C:9C:FA:EB:54:EA:A5:62:69:7E:1A:7D:F9:8B:EE
Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
Certificate issuer:       /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Certificate serial:       01A0CD114A4FCBEA5CC3F27B4B8A225A25DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
Manifest number:          061D
Signing time:             Wed 23 Sep 2026 07:00:57 +0000
Manifest this update:     Wed 23 Sep 2026 07:00:57 +0000
Manifest next update:     Thu 24 Sep 2026 07:00:57 +0000
Files and hashes:         1: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: lfvExdPNrfTJaiPooQUzfsDtLSM4VZP5P/Ay1s/3GHw=)
                          2: wS-jaaEMUTGS5DqxQuN95qXPBc8.roa (hash: 06h366lvWqKC+ftnxISHm/f+AJodcmHOYMbCi4Dh0pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:11:4a:4f:cb:ea:5c:c3:f2:7b:4b:8a:22:5a:25:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
        Validity
            Not Before: Sep 23 07:00:57 2026 GMT
            Not After : Sep 24 07:00:57 2026 GMT
        Subject: CN=81b95abb9e7c9cfaeb54eaa562697e1a7df98bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:3a:06:4f:68:7e:a6:d8:c2:0b:0a:7f:49:
                    c9:98:63:df:82:41:3c:94:8a:b4:06:20:ff:fb:ff:
                    b7:82:4c:95:f0:2b:e0:c7:6e:d0:9e:4b:c4:7a:95:
                    71:d9:0c:c9:b4:d1:d7:1f:88:11:46:98:d3:61:c8:
                    05:dc:e9:09:5f:6e:fe:c8:3e:37:39:3d:d4:06:d7:
                    cf:85:e2:2e:de:5d:d3:27:69:d3:3c:11:1f:c8:c2:
                    a6:d9:77:62:53:9d:cd:61:30:e7:69:6c:61:80:8c:
                    69:d6:79:22:63:67:c8:b3:e1:d3:19:82:2e:f1:df:
                    b3:c2:67:85:a8:d6:1a:52:bd:ea:88:69:e3:60:66:
                    84:d9:66:89:d0:5b:95:14:05:fb:7c:7d:a7:2b:fb:
                    d7:35:97:dd:1e:f8:55:47:ba:8f:3d:d8:f9:1f:f6:
                    16:2f:cf:f1:3b:ff:0e:02:41:8f:d2:e9:e8:cf:30:
                    c4:de:1a:59:c2:c6:11:ac:5b:b6:b2:7c:26:cd:6d:
                    af:a9:af:87:db:73:2e:31:7a:30:cc:46:cf:66:86:
                    21:6b:c9:8f:27:15:ab:49:52:39:45:14:30:e2:09:
                    da:a2:ef:46:5a:d4:87:f8:c1:ea:f8:18:df:56:2b:
                    90:71:b1:76:42:80:a7:c5:a0:34:a5:9f:38:46:1c:
                    0b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B9:5A:BB:9E:7C:9C:FA:EB:54:EA:A5:62:69:7E:1A:7D:F9:8B:EE
            X509v3 Authority Key Identifier:
                keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a9:4b:36:e7:0b:2a:79:99:76:bf:fb:c8:2a:92:08:e7:a3:
         a1:23:b9:df:75:90:c6:79:56:8b:06:5c:18:1d:ed:bc:62:f1:
         75:97:21:fc:75:e0:2f:9c:3c:fa:56:33:c6:f7:61:65:2a:f8:
         b6:a0:6b:78:af:65:e3:06:c2:01:b5:c9:ce:91:84:20:9f:81:
         01:df:38:e9:e3:d7:4d:0d:bf:15:e1:f2:72:18:33:68:0f:30:
         51:08:7d:5e:b9:80:95:6d:28:42:3c:fd:aa:e2:10:dd:19:f4:
         28:c3:8c:f5:c7:61:1f:43:d0:33:81:1c:e8:0b:94:90:3b:19:
         bc:c4:c4:35:52:83:1d:58:af:34:c2:a3:55:9e:d8:2a:b8:01:
         1b:e7:b7:ae:68:b9:26:cd:49:fd:95:a3:72:47:69:04:a9:71:
         07:0c:5b:05:38:f5:f5:f5:33:42:1e:56:54:63:f4:fd:74:19:
         14:c8:1c:56:31:62:fd:96:6c:50:87:7d:9f:a9:bd:42:fb:8b:
         a3:98:18:f3:fc:37:c8:a6:96:fc:05:14:a5:da:e1:79:39:c6:
         7f:92:32:ea:a5:b2:fa:7e:33:1f:f2:57:0d:21:65:ab:a0:28:
         fd:2d:6d:0e:d6:3d:f0:ed:50:38:28:80:90:95:d2:be:7e:42:
         7b:fa:3d:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNEUpPy+pcw/J7S4oiWiXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYTRmZTNjMzcxOTU1YjkyMTJjYWRlNjQ5Y2JmMTdjNWZj
NThlZTIwHhcNMjYwOTIzMDcwMDU3WhcNMjYwOTI0MDcwMDU3WjAzMTEwLwYDVQQD
Eyg4MWI5NWFiYjllN2M5Y2ZhZWI1NGVhYTU2MjY5N2UxYTdkZjk4YmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWg6Bk9ofqbYwgsKf0nJmGPfgkE8
lIq0BiD/+/+3gkyV8Cvgx27QnkvEepVx2QzJtNHXH4gRRpjTYcgF3OkJX27+yD43
OT3UBtfPheIu3l3TJ2nTPBEfyMKm2XdiU53NYTDnaWxhgIxp1nkiY2fIs+HTGYIu
8d+zwmeFqNYaUr3qiGnjYGaE2WaJ0FuVFAX7fH2nK/vXNZfdHvhVR7qPPdj5H/YW
L8/xO/8OAkGP0unozzDE3hpZwsYRrFu2snwmzW2vqa+H23MuMXowzEbPZoYha8mP
JxWrSVI5RRQw4gnaou9GWtSH+MHq+BjfViuQcbF2QoCnxaA0pZ84RhwLqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIG5WruefJz661TqpWJpfhp9+YvuMB8GA1UdIwQY
MBaAFLKk/jw3GVW5ISyt5knL8XxfxY7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2Yt
YzhjY2RkOWU2ODdhLzEvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2YtYzhjY2RkOWU2ODdh
LzEvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKlLNucL
KnmZdr/7yCqSCOejoSO533WQxnlWiwZcGB3tvGLxdZch/HXgL5w8+lYzxvdhZSr4
tqBreK9l4wbCAbXJzpGEIJ+BAd846ePXTQ2/FeHychgzaA8wUQh9XrmAlW0oQjz9
quIQ3Rn0KMOM9cdhH0PQM4Ec6AuUkDsZvMTENVKDHVivNMKjVZ7YKrgBG+e3rmi5
Js1J/ZWjckdpBKlxBwxbBTj19fUzQh5WVGP0/XQZFMgcVjFi/ZZsUId9n6m9QvuL
o5gY8/w3yKaW/AUUpdrheTnGf5Iy6qWy+n4zH/JXDSFlq6Ao/S1tDtY98O1QOCiA
kJXSvn5Ce/o9gg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:22:16 2026 by rpki-client