Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File:                     1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier:          qLOVZIyA8pwg4i6E9vugR/lTbVi+/t/sRfhHOm9e4QM=
Subject key identifier:   47:73:FA:80:80:C7:3E:00:1E:16:96:48:C9:55:03:4A:CC:C8:BC:72
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer:       /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial:       01A0BFC2E82859C2D71EFF1C1E9E0BC46719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number:          09EE
Signing time:             Sun 20 Sep 2026 17:00:16 +0000
Manifest this update:     Sun 20 Sep 2026 17:00:16 +0000
Manifest next update:     Mon 21 Sep 2026 17:00:16 +0000
Files and hashes:         1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: q+AQD34FiBruCWUJef0r4WnN1Ik9Q+XoAgfdScgnrjs=)
                          2: 2uMy4M-82lScLvQO4h9JL6UgHrs.roa (hash: 1SK2Ox5GjfDCB9YjDm9AoIxnblV4VhFX1E6RFNXREuQ=)
                          3: 3qtJ5-IAYiPz0ALRM8n3NnbHNzw.roa (hash: +Vp1sp9zpnfs0QYd9altN13iaJXvmmbhdGnJwAEXrGY=)
                          4: 4QcJq7ej04BNda2HH9wArEkGIPs.roa (hash: UEQyy5CHXIQ8APmLlgy4w9Fknovd069hve+UPdT6u6U=)
                          5: 6SFaYFVTh_QMG8KeNR7K0vj-EJI.roa (hash: rrIArf/6b7SEIfjeCxcXUJ/HbNWPqXK+6T7Q8x8Keng=)
                          6: 9CUmT2lC-8kgnH1Pk1z5ggj9yYs.roa (hash: 2GFT3mSlK6Rmyp7D2HqdnfLGQtrA2O32IuamvEgn7Xs=)
                          7: BNFOMhR6hv1XuGHNrVMQM_JLnfA.roa (hash: 3OvYrZCCVuNvoUSnWJT9b9bxtgVNtSEoWfbO8tJ8ZDE=)
                          8: CgToz2b9vJXkfbV9wQD9McV1WUM.roa (hash: COqNxl0mp97hllEQKIgzooEhO3/ohE560HqYc+lA0+w=)
                          9: Dg6-7OIm8vlGjBApMECeqWUjQD0.roa (hash: XL6k5VLIb0mGqKu2jEbLqy1HfJEl/tavDJoVTxIQkW4=)
                          10: E_H7Paebs9UWjQyhOTE9PIN76tc.roa (hash: GaYoQTMi5zaMEXM0a3RCUI0zGFHSOAHoYBq1mnn0UNQ=)
                          11: IXAixtOPEsv7gt6BD6ensRZLEqw.roa (hash: 70EEAsdGTRKYckIJYi/F9RnlHwc1q+lU5rzi1Fys+zI=)
                          12: N9QQxg_R8io7DnlRj5HdQ23wfCk.roa (hash: T2NtuDZ7QgrXiMR/U8rf5cq5e47s3QzvGZo+eumc0Zc=)
                          13: NkBC_seP8uT6XXb_uD6ZXGc0YO8.roa (hash: U3ZBRW46vAETRPkcX5+9wqgxICZLtb+QqrCvfSsQek0=)
                          14: PgCWANz5uY2I9lsHzhkPjqX39Kk.roa (hash: Wo051Tf/z54mBPHwIYi56RQup23Z7a/uY7Wew2Lpno0=)
                          15: SZtukkjRXiwa2MP-xz2orv9e2EQ.roa (hash: SI1p9E5oAtOUP1K3tQ3v2d/3208FkwLNQ2JaBJZUxeU=)
                          16: XT24RL-I_Rj1tbACkgSxbluUjfk.roa (hash: J/9xfP0r32zX6yNiwoeZYz1WsyDhnkZEoFgf2QsjqUc=)
                          17: _N2nrplLVj988L3B9p-Xsk-Uc88.roa (hash: 7ocXDIY20rX1cn+l5zbELRN0K10bZK6Thqwp+te1Rkg=)
                          18: hchG7caJpD9W6F09IoEq2bxHBQQ.roa (hash: LWlZZ0rsDYxu7JbvD8MMa5SqnKcInLBcft31rsAtLnQ=)
                          19: lW9UCsG45tltS34IVuMEF5LF0WE.roa (hash: Fi19lc5a6ixrrZgw07Ifrk8a8hv4r0cIBwyEqxqG64I=)
                          20: mcFCwYwGHvV8_Dgby0Fqss-cGB4.roa (hash: GIeC9Y9trbiu+ClPgrrFlywdl17ZKoTgx1G0hLexXxc=)
                          21: r4xyNLWWmznvN8-2HQAUUtH8WD4.roa (hash: Yx0ueyL/bhm8eOCB3RdfcV15kiUt20hwbcXP4E9Y1js=)
                          22: vS7BVCvAnG0KF2NZJWhPCSw4Y9E.roa (hash: s2wURE5y1RzBDniFm1yyiSF2pZakk/teNC0g3kN9ZgA=)
                          23: vU8wGLsdl9hwG15OClvZT-lRw7k.roa (hash: IfJeWmbzTCTanQtLx6Swi85NrJu3wA9YDW9bngNXjE8=)
                          24: xAPk2wU0UXF9NZICJMvGDDyGQ6I.roa (hash: TA3H+2LadaNXfkohOx3ju1GF9mCySPxfGyrBLptIYSI=)
                          25: xgUIIZBXlyU4UoekW4OdzZHEuio.roa (hash: zTLHmgqXF5kL/C2aqtWKn3BqJ60YyLhv52sGpDT4SS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:c2:e8:28:59:c2:d7:1e:ff:1c:1e:9e:0b:c4:67:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
        Validity
            Not Before: Sep 20 17:00:16 2026 GMT
            Not After : Sep 21 17:00:16 2026 GMT
        Subject: CN=4773fa8080c73e001e169648c955034accc8bc72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:ca:b5:1a:de:87:1d:2c:cc:ec:62:f7:dd:
                    05:bc:57:3d:6c:38:57:db:38:98:27:a3:7e:60:bb:
                    8f:6f:b7:5f:3f:76:0a:83:96:dc:9e:55:5e:86:af:
                    09:9b:7a:82:a9:87:54:42:f8:16:06:f1:56:bd:6b:
                    82:a3:ac:8b:e3:23:eb:2b:f8:73:2c:a4:16:57:a8:
                    be:3e:fa:79:bc:51:4a:3c:83:6e:dd:37:ba:d7:f0:
                    ee:97:f6:cb:14:5d:5b:62:1f:f5:d6:4c:d1:04:d2:
                    2e:11:6f:2e:27:82:41:27:d5:5a:33:8a:42:50:9d:
                    d7:64:50:d5:37:46:d8:41:29:6a:78:38:18:11:87:
                    3f:f2:46:51:9b:e3:2b:f1:46:f4:45:43:68:fc:e1:
                    40:79:e5:55:32:8f:34:5a:f4:39:8b:08:89:d7:09:
                    d5:f1:17:82:07:00:a6:e0:c9:bd:6f:a2:3f:a0:da:
                    6d:fa:c8:60:92:d9:49:69:1f:34:a1:88:3c:3b:18:
                    d7:96:51:58:8c:6d:2e:22:56:b0:b5:a3:18:25:6a:
                    5f:08:46:80:10:d9:4b:bc:04:a5:e4:9e:4a:e7:f7:
                    38:f3:b3:1b:a3:c8:80:06:e8:58:a2:d9:5c:91:7f:
                    9c:6d:eb:20:11:3b:ee:90:a1:62:57:0f:15:0b:36:
                    c3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:73:FA:80:80:C7:3E:00:1E:16:96:48:C9:55:03:4A:CC:C8:BC:72
            X509v3 Authority Key Identifier:
                keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:18:f8:d6:fe:2f:ff:10:47:df:04:a2:17:77:04:81:2e:15:
         84:fb:7e:4f:a0:5d:71:92:6e:a8:61:71:db:ef:5d:7f:0d:d7:
         2c:c1:72:f9:5a:20:ca:53:f8:04:1c:d6:c5:74:ac:89:be:a9:
         1f:35:6c:49:f9:22:03:70:bd:00:91:ff:86:d2:ac:da:1b:c4:
         c1:34:19:d7:01:fd:c6:20:6e:37:00:60:52:8b:06:89:5f:e2:
         99:51:12:4d:f7:0e:38:8c:e0:24:f4:81:f8:fb:14:56:6c:e0:
         45:2f:14:52:22:fd:05:b0:dc:9f:df:9f:37:17:3e:09:d1:19:
         f9:9d:bb:39:95:a0:cc:c2:ff:e3:51:e8:2e:4c:e7:45:3f:43:
         55:e9:d8:f4:d6:b2:52:f8:d5:c6:9a:7a:9b:5c:4e:2f:91:07:
         2c:bc:f8:a2:02:dd:8c:94:1b:73:79:2b:7e:ab:47:94:37:17:
         03:ec:ee:18:d7:54:95:15:06:b1:94:f0:04:b9:a8:37:15:42:
         43:d5:2f:d6:72:59:78:2a:a4:de:0a:21:b5:b3:5b:59:97:41:
         e4:a1:1d:b2:39:6c:ce:b8:cd:5f:c8:bd:a6:63:d0:8e:2d:b4:
         6f:d4:1b:9e:e0:88:47:cd:2b:2b:d3:ca:23:07:2a:fa:5e:fe:
         cf:0b:46:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:14:47 2026 by rpki-client