Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
File:                     Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft (raw, json)
Hash identifier:          P9sCsQVg3GRmoQhUEXt3JYQKWisl+RhR0Wb2/7YHtkk=
Subject key identifier:   B0:99:1B:99:BB:F1:36:7B:61:40:AE:8B:CD:53:6E:44:3D:FC:9C:FD
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Certificate issuer:       /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial:       01A0FA8FEC9E248CBD6D28A7891ABB21AA54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
Manifest number:          1AB4
Signing time:             Fri 02 Oct 2026 03:02:11 +0000
Manifest this update:     Fri 02 Oct 2026 03:02:11 +0000
Manifest next update:     Sat 03 Oct 2026 03:02:11 +0000
Files and hashes:         1: 1QwxBzzrzbLhE53UBSnG0QYKMDg.roa (hash: CVaxoZfOngTvB/Tbw2XbJcH9Ku/qNCgCrqppI4x0a68=)
                          2: 5F_6MYJ3Tjsft0v2m--XYj9QajM.roa (hash: ptSYdcQn4vRSLxP94ghZiixDk850vlzn8oi5PdxtV2k=)
                          3: Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl (hash: ZvCkADEZVdIVyqu2eAiy475I9sIlEzAC5wamb4DFImU=)
                          4: HiS0kZkH7nLEUXjDWu9S5wYFAWo.roa (hash: dQ7ZhvwA3P8FoUNbgD8WD+l4uyObPXiywcp7g1zCAOA=)
                          5: WlhMchBpnT-b11_eX-zMEkQyhtw.roa (hash: F7yII+JajBHZk9uba+HGWYQBLwn8rdDHWthC6lkIqoI=)
                          6: YPfuRkTgnJf0mW0FpNkvVPNS8RQ.roa (hash: paVGX+E91uT2+A9iHUixNqfj4PoBmhTXUi+0RH12uAA=)
                          7: _mXNiEyzoLTdlZS540O0pnwDOW8.roa (hash: j1fVCxk0bP7hRI+j87ih0al1KJnzWkx9KyZJo2+Hlm4=)
                          8: az65XDjo2ppJEAUDxgONjCii4JM.roa (hash: KKW2/9btopQsCSi6Q0T0i2j+xys3nWakyAcxPszdD+E=)
                          9: es3spOIawUyIvWJULYnuVd5QiYA.roa (hash: bnj1HUQLd6UyOiRwZwWc9Ab/jXrxjH+WENuDNP86ym0=)
                          10: yytX6z-UgD_m9pf3_kgEgiT2POQ.roa (hash: 3RbgmrnsRsLF2URHt+dab8OKV2m4vBqwqKQUl1xF2CI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 03:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fa:8f:ec:9e:24:8c:bd:6d:28:a7:89:1a:bb:21:aa:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
        Validity
            Not Before: Oct  2 03:02:11 2026 GMT
            Not After : Oct  3 03:02:11 2026 GMT
        Subject: CN=b0991b99bbf1367b6140ae8bcd536e443dfc9cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:94:a6:2d:f0:ff:42:09:a7:e3:58:06:b1:8b:
                    0e:e4:a9:d7:a0:2c:52:2f:9c:d2:21:f5:48:c2:83:
                    3a:a6:77:01:95:1f:cf:1e:53:1e:fd:a2:eb:5c:83:
                    5a:9a:02:1c:0e:68:f3:d4:dd:08:f5:ac:53:3e:7c:
                    1a:08:00:4a:1b:a7:ca:28:d6:71:92:c8:b9:83:1d:
                    0a:04:f8:c6:f2:77:6b:86:10:9b:aa:c0:fe:bf:4a:
                    66:ab:e2:50:35:f5:5f:b4:6e:09:4b:ae:49:44:9d:
                    6a:88:04:1a:81:81:a3:68:5c:32:f4:38:af:1e:27:
                    c4:ab:84:60:4d:d2:d1:cd:32:24:36:52:10:36:6a:
                    8a:56:a4:f4:d7:cc:f4:71:5a:ef:ed:aa:72:60:f8:
                    fc:7e:d7:46:4f:b1:de:b5:fd:a7:c9:fe:1b:b9:74:
                    55:79:02:cd:c3:dc:b3:e8:a1:44:01:e1:14:a6:0f:
                    a2:54:f8:d1:be:48:2f:23:80:14:14:ce:88:f4:e8:
                    51:e4:7d:bb:63:4e:b1:f0:2d:5b:74:7d:47:3f:67:
                    f8:b9:46:fb:8e:35:af:b2:6f:c9:88:b6:57:79:ad:
                    d9:3c:d6:aa:43:d7:43:5f:59:77:3e:7f:bc:b8:e1:
                    a2:cf:ef:01:69:b0:fa:8f:1e:79:ac:94:73:35:12:
                    c8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:99:1B:99:BB:F1:36:7B:61:40:AE:8B:CD:53:6E:44:3D:FC:9C:FD
            X509v3 Authority Key Identifier:
                keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e2:41:6d:50:fd:18:b4:ab:ca:6b:c3:86:7a:90:fb:e2:10:
         15:51:0d:9c:d7:c5:87:fc:d0:7e:db:fa:28:26:f2:b0:b6:ea:
         cf:e4:55:3d:7c:57:d2:6b:60:f3:c4:3b:52:57:59:39:95:71:
         71:7f:8f:f3:13:0d:2b:9f:75:f1:05:95:bd:49:9f:71:64:b9:
         42:75:1a:cc:63:e5:a5:80:61:4f:0f:90:79:b6:c1:08:b9:84:
         5b:a7:80:a5:cc:7d:8e:88:12:5a:90:3d:10:0d:7a:00:15:ab:
         b0:0c:bc:30:86:93:f6:a6:24:4e:a8:1c:10:6b:a1:38:c2:ca:
         af:20:8c:51:e5:eb:09:9b:27:ec:c5:39:6f:10:86:82:8c:37:
         8f:c5:ea:81:1a:16:06:1b:52:cd:77:64:77:5c:77:22:d6:32:
         a3:bb:9f:4f:cb:5e:d6:2c:96:ae:b9:f5:cf:f5:f6:0f:55:a2:
         b3:65:b4:61:f3:65:03:a7:c3:ea:66:a1:84:ef:19:85:2b:d9:
         11:7b:4d:72:c6:7d:1a:f1:d9:ec:f9:02:b6:80:9a:ab:45:10:
         22:9e:cf:11:6b:ae:40:cf:83:0f:ec:1c:b5:ca:78:3b:2f:1b:
         98:53:0f:4b:e3:98:bd:55:e7:56:84:4c:1b:d4:11:bd:c8:18:
         d4:6d:ea:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:59:52 2026 by rpki-client