Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
File:                     QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft (raw, json)
Hash identifier:          Px9FV/4ku/eiHbUBb/ZkKQvXD6h7b1UGez5TjL/E9dI=
Subject key identifier:   95:60:1D:1F:E3:09:A6:FA:BF:69:AD:72:EF:08:5A:E1:31:78:FA:9D
Authority key identifier: 40:6E:F1:8F:58:F5:AD:18:04:E9:B6:C5:AE:F6:E2:32:CC:B8:A1:E2
Certificate issuer:       /CN=406ef18f58f5ad1804e9b6c5aef6e232ccb8a1e2
Certificate serial:       01A0BB78903C25067A3074DF5A23D97213C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
Manifest number:          01B6
Signing time:             Sat 19 Sep 2026 21:00:35 +0000
Manifest this update:     Sat 19 Sep 2026 21:00:35 +0000
Manifest next update:     Sun 20 Sep 2026 21:00:35 +0000
Files and hashes:         1: QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl (hash: D+iiBMubXC5NytlNztf7vbi5YO2WiVb/Gm6wr7kSVfE=)
                          2: bc_rDqdFLWG9EqOE3XpdCbzci7A.roa (hash: QX2e7Tpj37ujdBJf37YYj5ilDYHQsrFIORHYzhmx2Mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 15:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bb:78:90:3c:25:06:7a:30:74:df:5a:23:d9:72:13:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=406ef18f58f5ad1804e9b6c5aef6e232ccb8a1e2
        Validity
            Not Before: Sep 19 21:00:35 2026 GMT
            Not After : Sep 20 21:00:35 2026 GMT
        Subject: CN=95601d1fe309a6fabf69ad72ef085ae13178fa9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:99:03:eb:cc:71:aa:95:fc:3a:95:c9:40:
                    30:c9:7a:f2:72:72:71:1d:3c:f4:38:5c:72:42:7f:
                    00:42:86:cb:48:83:2a:27:c8:6b:04:b8:3b:db:91:
                    01:fa:40:f3:17:6f:88:67:e0:31:db:26:02:e0:56:
                    a7:66:9d:3d:97:10:b1:2d:e8:58:39:04:27:fc:b6:
                    90:9e:fc:c7:b5:dc:66:77:be:20:ff:23:e8:e8:9e:
                    fa:8d:a5:62:0a:57:f6:ea:d4:6d:bb:a5:9e:ff:b0:
                    70:bc:92:e4:7f:7b:8e:72:37:3e:e8:92:d6:b8:b7:
                    38:ec:5e:60:d6:28:cd:a0:5f:e2:19:7d:7c:3d:85:
                    02:e5:26:d5:cd:e4:03:19:5c:ff:f4:93:88:37:ed:
                    be:63:1d:b5:97:85:70:31:c8:78:ed:4b:1b:d5:3f:
                    e9:32:04:77:20:b7:04:9a:20:b8:f6:b9:cf:67:07:
                    e5:48:30:7e:ad:94:af:f4:8b:f0:8e:9b:26:6b:77:
                    ef:5e:67:f1:bb:d3:c7:9d:3f:e1:7e:ae:4b:23:a8:
                    f1:18:a7:ee:90:7c:2d:b0:ca:4a:c3:b4:78:8b:ad:
                    be:67:3f:54:48:27:eb:de:0e:d0:ba:6c:4a:f6:71:
                    e4:f6:1c:22:b9:1c:cc:6b:35:c1:48:0a:38:21:18:
                    5e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:60:1D:1F:E3:09:A6:FA:BF:69:AD:72:EF:08:5A:E1:31:78:FA:9D
            X509v3 Authority Key Identifier:
                keyid:40:6E:F1:8F:58:F5:AD:18:04:E9:B6:C5:AE:F6:E2:32:CC:B8:A1:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f8:a5:5c:67:54:18:d4:e5:52:b2:b3:63:68:78:90:49:05:
         34:ab:b9:9f:a3:f8:51:d0:31:78:d6:bd:78:2e:6d:46:38:9c:
         fb:7e:dd:28:fb:27:a5:76:c8:8f:49:a0:56:73:db:50:2c:f9:
         fb:8b:27:85:69:a9:25:12:4c:16:34:65:e0:a2:07:c7:eb:6e:
         10:8b:ff:02:59:8a:c0:03:9b:04:f8:97:38:c4:4b:32:05:33:
         5e:af:50:e7:28:9c:79:d4:7f:0a:89:c8:7a:f3:23:e2:a2:61:
         f1:74:2a:52:bc:b8:ca:fa:a0:f4:c1:30:6e:fb:3f:c1:0e:8e:
         f8:80:d3:d6:13:a2:c4:73:58:6b:8c:4f:01:c3:fc:fe:1f:a4:
         8c:9a:49:91:f4:9b:6a:9c:61:f0:36:55:57:47:8c:db:4c:e8:
         f0:9e:fb:bc:66:c0:a7:ce:6a:94:7a:98:42:6a:9b:30:f5:ef:
         c6:77:3b:94:17:25:8e:63:15:c3:38:64:e3:0d:a9:32:9e:4a:
         c4:06:ef:42:15:b2:7c:be:c2:69:1c:52:c8:2f:04:92:27:8a:
         93:e0:2b:53:0e:d5:1e:7b:2f:ab:ae:ce:9e:21:2f:09:bd:f5:
         87:06:d3:d9:a6:28:4f:bc:7d:fb:0e:11:4a:5f:2c:0c:c4:c3:
         6a:0a:56:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 23:26:06 2026 by rpki-client