Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File:                     qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier:          I/CaoMdYRCLg5UBJ8bvAReklDM/bNp/bDKolWML54pw=
Subject key identifier:   98:AF:8A:C8:9A:22:D1:19:08:A5:77:97:48:B6:87:72:CE:E4:BA:B0
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer:       /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial:       01A12D69FDF147529C56985B1DFFF9279EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number:          177B
Signing time:             Mon 12 Oct 2026 00:01:23 +0000
Manifest this update:     Mon 12 Oct 2026 00:01:23 +0000
Manifest next update:     Tue 13 Oct 2026 00:01:23 +0000
Files and hashes:         1: bZqOUIU_1IqMOnS3XXUrS60GrpM.roa (hash: LFmDzSYfJ7mk0ygK5bmtim3i/wVzAaEknmN17hltFu0=)
                          2: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: 5MGoiwamCTPtzTUNNcLMmEo+BYxy3akk8GrBywp0qlk=)
                          3: qxRVneBb_uUd_NsM3Vb645rM-7A.roa (hash: G6Y/r+hYk+mMByjpNJdV1U1ctvTf0yt3EQ8Sq5betwQ=)
                          4: sPMgSkKer_29geM5-1T1-keLLGw.roa (hash: 4QbBQJWJYkQw7XP4lLebE7Woxf8+43i+sSWLrzO/9j0=)
                          5: tP-zd4fvUG5Ghj_hj4jy-iA0H5M.roa (hash: dncyiHvUZh8Otlmg0Vs+Wpy7Azdi/J7dNn/2EsRGlWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2d:69:fd:f1:47:52:9c:56:98:5b:1d:ff:f9:27:9e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
        Validity
            Not Before: Oct 12 00:01:23 2026 GMT
            Not After : Oct 13 00:01:23 2026 GMT
        Subject: CN=98af8ac89a22d11908a5779748b68772cee4bab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:9a:69:3b:e5:af:ec:2f:7c:d8:38:c9:08:
                    40:41:c8:9f:a5:16:80:87:92:76:97:cd:9f:47:72:
                    99:6c:46:26:86:16:45:f9:17:da:35:0d:22:27:ff:
                    9a:98:58:a6:f4:ce:b9:c0:75:37:94:8b:bb:08:78:
                    6c:c6:36:b3:52:14:f4:04:91:39:62:c6:9a:39:d0:
                    a6:56:dd:9e:42:60:a5:7e:22:92:a4:55:18:5b:4b:
                    f2:a6:e0:0c:21:c7:6c:43:b1:3e:b9:d7:83:28:b0:
                    14:c3:39:fa:92:e8:ed:8b:35:a3:42:df:2f:78:ac:
                    91:22:50:98:1e:f8:f1:9f:b2:22:e6:41:0c:54:90:
                    a8:c8:72:1b:14:5b:55:8f:f2:33:79:7a:72:ba:67:
                    7a:bb:42:7a:93:65:e3:43:10:9a:eb:e9:21:a8:b3:
                    68:b7:30:90:6f:71:fc:29:a0:cb:4b:62:3a:f3:3c:
                    6a:f6:a0:c2:5d:ac:76:b0:b5:4c:24:aa:ec:8b:2e:
                    a3:cc:78:5b:02:5d:d7:7d:d8:5f:9f:00:22:50:94:
                    c0:50:94:0d:25:04:90:e8:ab:46:ca:ea:6b:ee:5b:
                    a5:9e:89:6b:70:19:c2:75:d5:4d:24:e0:c6:ef:02:
                    bb:dd:44:17:11:ab:65:9d:b2:55:48:54:da:0c:61:
                    d8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AF:8A:C8:9A:22:D1:19:08:A5:77:97:48:B6:87:72:CE:E4:BA:B0
            X509v3 Authority Key Identifier:
                keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:14:4a:12:e1:82:bb:a6:a2:26:2b:07:05:17:98:8a:2d:47:
         09:cc:be:ef:9c:69:0a:c1:99:70:0b:80:9e:3f:81:33:49:95:
         42:41:7f:3a:36:f2:af:6b:fc:69:a8:3b:8b:f2:e8:dd:da:48:
         ce:b5:6f:06:75:0e:8b:1d:4a:90:68:39:2a:43:be:d4:30:4b:
         36:7d:ed:5a:83:ab:21:1a:30:3c:79:7e:d4:c1:4d:4c:c2:3c:
         ed:f2:0e:2c:21:57:95:42:84:96:44:3e:d7:6c:86:bb:75:3d:
         4a:05:21:33:47:e7:82:b0:2e:b2:ac:81:9c:2e:f3:d1:0a:b8:
         f0:a3:2d:19:e5:50:3a:61:f2:80:7e:ab:5a:d2:b6:e3:5c:0e:
         99:c1:b4:18:85:8d:bf:8c:89:52:28:17:07:b7:7a:ea:54:49:
         e5:5e:f4:85:d3:ef:ac:e5:4d:47:f7:b5:a2:b5:cc:a4:00:35:
         1b:8d:8d:61:62:ff:49:7f:9b:a6:aa:79:f5:16:ff:e5:04:51:
         63:e0:a6:41:89:0f:70:d7:99:28:13:09:06:06:cd:e0:7b:fd:
         ac:b9:e5:8a:56:0f:3b:f5:3c:67:5e:c0:1a:a8:eb:34:35:34:
         8e:b0:9a:0f:7d:69:f7:ed:bd:4a:4d:c8:02:44:62:cc:53:82:
         3b:ee:11:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 05:57:50 2026 by rpki-client