Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File:                     r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier:          N2BQ4LsBSzQCASUQNZPf6d2eT2Vya5c2fIG7EjKnluY=
Subject key identifier:   EE:91:99:DE:C5:B1:58:24:AF:F6:69:C6:AF:50:0D:C9:70:BA:5B:6D
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer:       /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial:       01A0C6D7CEB632C67620F372E565B4079E53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number:          175C
Signing time:             Tue 22 Sep 2026 02:00:26 +0000
Manifest this update:     Tue 22 Sep 2026 02:00:26 +0000
Manifest next update:     Wed 23 Sep 2026 02:00:26 +0000
Files and hashes:         1: 0llklTGwRpo1D7HWMMbydisxDQ4.roa (hash: 3z2IZ4s8AyOuNF65gLQqbep0m2rYxv6RvjyL7CQP75U=)
                          2: QWs1csGK8KUFGhfj2QFKlBU8El0.roa (hash: 0iVAN86kduscSDUBK67oi4SEPANLs+DqgTgFkRGgbJQ=)
                          3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: I5498NjKUxv+JMFf9FXmOgB3xTttY4AgOVH9HEPj5Vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:d7:ce:b6:32:c6:76:20:f3:72:e5:65:b4:07:9e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
        Validity
            Not Before: Sep 22 02:00:26 2026 GMT
            Not After : Sep 23 02:00:26 2026 GMT
        Subject: CN=ee9199dec5b15824aff669c6af500dc970ba5b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fd:95:4c:43:78:25:d8:ee:c4:c0:35:9c:08:
                    b9:16:97:0e:c8:b9:02:45:fa:46:29:f2:68:a5:9b:
                    fd:b2:d0:9f:a8:53:61:ff:1f:c5:e3:ad:11:23:cc:
                    6f:1f:01:b5:c3:28:54:b7:6c:48:27:4f:06:2d:1c:
                    a7:43:85:7d:eb:ad:b0:5b:00:63:a0:99:60:76:99:
                    f4:ed:0d:c0:29:57:4d:4a:d7:ea:b4:f5:f7:8f:53:
                    cf:9a:e6:48:ee:32:68:29:87:91:30:57:9e:0a:15:
                    ef:c3:75:8e:17:79:f6:60:0f:3b:64:f0:bc:ca:e6:
                    b7:f0:20:01:5b:ef:ae:cb:78:6a:c2:6a:5d:ef:bb:
                    22:d2:e7:13:27:75:2a:ad:76:2a:66:2f:e4:30:2b:
                    ad:da:2a:ab:bb:21:57:2c:2f:1d:c7:db:d9:c7:d0:
                    17:af:00:b9:c8:b3:09:9c:e8:66:07:ef:85:54:bc:
                    48:36:7c:16:e3:43:f2:69:c3:40:69:88:45:5d:f7:
                    f7:90:99:c7:27:3a:f6:5d:54:1e:e7:4d:e5:41:ea:
                    48:d6:3c:7f:87:d6:53:29:76:75:10:43:e1:31:32:
                    27:b7:26:56:9f:5d:f5:7c:f6:42:e1:69:a4:e3:32:
                    96:37:52:70:e3:f4:eb:8b:ac:6e:e2:eb:88:e4:e9:
                    77:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:91:99:DE:C5:B1:58:24:AF:F6:69:C6:AF:50:0D:C9:70:BA:5B:6D
            X509v3 Authority Key Identifier:
                keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:2a:3e:3f:8d:74:e5:13:5f:10:f2:3c:77:75:dc:19:fa:f6:
         fb:be:12:fe:f1:1d:f3:1d:db:7d:d7:7e:f0:1f:f6:30:f6:de:
         6e:ae:d6:21:57:37:c7:a9:80:e7:bd:dd:34:c7:80:2b:7f:79:
         2c:c9:70:41:0f:19:ac:22:cf:ae:38:9a:9c:32:b5:7f:09:ad:
         35:55:94:01:07:2d:b1:e7:3b:58:f9:06:ab:6c:86:df:c6:e4:
         af:14:66:2b:e9:11:06:20:e2:79:8a:27:0c:ba:0d:ec:9a:72:
         59:f7:4a:2d:65:78:40:08:69:41:06:f5:da:c2:64:92:16:cd:
         34:6d:50:34:1a:ad:0e:dc:3f:9a:77:61:23:bb:99:b0:4e:c9:
         ca:f8:a6:57:0a:df:c7:28:74:fe:14:d0:30:d1:1b:20:fe:19:
         1f:af:92:57:73:93:b8:77:3f:ba:b0:4c:63:9c:6e:d6:30:96:
         b4:3a:3a:76:ce:10:eb:3e:2d:16:e4:f7:86:c0:7a:66:5d:43:
         82:58:20:f0:61:fb:73:65:d3:48:4f:7e:f4:af:2b:39:11:28:
         45:32:31:b5:bb:d2:40:fb:86:07:42:3a:83:82:c0:d9:ef:8c:
         7a:f2:df:09:4f:a6:65:f6:e7:2c:27:95:88:0e:bd:35:95:ce:
         84:c2:f3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:55:09 2026 by rpki-client