Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File:                     Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier:          qgqB+j0xtsOLL7p5PGdTst/RlDqHsz9cuMK48WQjlMs=
Subject key identifier:   E6:0E:70:79:8B:11:84:66:87:C6:41:CD:7F:14:B0:A1:E7:F2:EA:19
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer:       /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial:       01A0BF1EAB56FDBE3102ADE87F2B595236A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number:          1702
Signing time:             Sun 20 Sep 2026 14:00:53 +0000
Manifest this update:     Sun 20 Sep 2026 14:00:53 +0000
Manifest next update:     Mon 21 Sep 2026 14:00:53 +0000
Files and hashes:         1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: GlUf33bbbMRQlgLKz3965XIufbHW70rehDWbFn11xpY=)
                          2: eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa (hash: b8ZbPv94PI8PSCuaUsrniKkw7cN6jjfuOqQWfIOj1qo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:1e:ab:56:fd:be:31:02:ad:e8:7f:2b:59:52:36:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
        Validity
            Not Before: Sep 20 14:00:53 2026 GMT
            Not After : Sep 21 14:00:53 2026 GMT
        Subject: CN=e60e70798b11846687c641cd7f14b0a1e7f2ea19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:25:0b:61:0a:ba:7a:44:a7:0e:a7:bf:32:
                    58:1c:f7:d7:dd:83:ad:98:18:40:96:e8:c0:8e:57:
                    1d:67:97:60:e7:26:3c:bf:5a:bd:71:51:05:00:ca:
                    88:96:7a:82:03:ab:34:20:f3:67:a5:46:38:9f:da:
                    d7:f7:d1:0d:c5:b2:cc:56:8a:1c:22:d1:b6:60:4f:
                    71:05:41:23:67:45:af:1a:95:71:0d:64:a1:a1:c9:
                    c5:3f:36:8e:ae:2e:b2:e1:f1:5f:5d:5b:ad:a6:d3:
                    6f:b8:44:eb:cf:2a:c9:0a:c2:26:3a:56:62:62:1d:
                    47:ad:a1:c3:fa:87:df:fa:a6:43:75:6e:cf:7e:14:
                    e0:7d:3f:96:5d:39:91:cf:63:30:27:6e:6e:8e:cb:
                    c0:ce:cc:13:a4:ce:01:87:e9:c9:9b:b1:1f:20:e6:
                    28:e5:85:45:7a:92:b6:8c:42:b4:51:e5:23:b8:b5:
                    9f:83:71:8b:c9:47:19:39:21:86:a1:28:11:8e:02:
                    fe:0d:98:cb:55:b6:de:8f:b6:42:be:0e:c3:3e:a1:
                    f4:28:57:d4:d1:a8:33:0e:f5:63:65:d4:83:c9:1e:
                    e4:fe:95:ac:2c:26:e5:1a:cc:87:02:2c:c8:f5:5f:
                    74:b8:3b:62:85:9a:95:2c:6b:c7:bd:ec:ea:ff:b6:
                    02:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0E:70:79:8B:11:84:66:87:C6:41:CD:7F:14:B0:A1:E7:F2:EA:19
            X509v3 Authority Key Identifier:
                keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:3f:47:f0:d3:b7:74:41:93:cd:24:15:1a:79:2c:ec:db:f3:
         94:48:70:d0:5e:1d:67:c0:7b:1e:3b:44:12:9d:d4:fa:b3:5a:
         f6:4c:51:45:ff:e3:92:7e:6f:73:14:39:18:5d:82:49:cd:eb:
         c9:3d:ab:ec:76:b4:24:87:ca:01:57:15:d0:fa:3a:30:85:fc:
         a6:d4:fb:f3:45:28:fc:a6:36:c7:a9:05:f9:8f:20:9a:4b:e7:
         af:26:7b:2f:6f:97:09:06:40:92:0f:97:19:7d:ef:06:d6:c9:
         4e:4b:b0:96:1f:7a:25:1b:4d:11:7c:29:81:99:f6:e2:4f:ac:
         fe:df:04:81:4a:bd:1d:a3:23:a9:b7:6d:01:22:be:50:3a:66:
         a5:9c:27:fc:c7:f2:e7:a6:63:3b:b2:44:e2:f4:ee:ac:30:88:
         1c:f0:58:f4:db:b4:27:25:06:89:e3:31:13:f0:9a:4f:22:45:
         a2:ca:57:ca:70:69:9e:86:63:83:d9:fc:ec:5a:8b:23:8f:8b:
         ff:04:13:a2:46:15:f5:85:1a:94:50:d0:ee:c9:42:86:de:f5:
         8a:b9:9c:c4:19:54:03:85:65:e3:1d:e5:d5:e8:49:02:75:a1:
         c2:d5:23:ac:1a:73:b0:21:e0:70:ea:7f:bd:df:52:48:5f:0e:
         07:53:63:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:26:23 2026 by rpki-client