Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File:                     1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier:          W4NgoBOxbKxOeJj5zX2JHJQhJYlS3fpuY6GxmRLj4t8=
Subject key identifier:   36:97:CD:F8:12:EC:B6:C3:05:FC:C2:0C:FA:3A:28:92:18:CD:DC:EB
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer:       /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial:       01A06E394A2F224D9C5FA4A59D97F1577476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number:          152D
Signing time:             Fri 04 Sep 2026 21:00:43 +0000
Manifest this update:     Fri 04 Sep 2026 21:00:43 +0000
Manifest next update:     Sat 05 Sep 2026 21:00:43 +0000
Files and hashes:         1: 1j1sIxN7dokPMeqtWpa2O79IJ2E.roa (hash: curzmuQMCpShAx5Xjvb+jxSDTma4OGIGe6t1amKgW4Y=)
                          2: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: 9+mkwVl1ZsDMD8I9urQlALfTeeLvqW5EcSZDCxMSGLM=)
                          3: H41pXcA8VjDWzAOdUw8kJkHTePo.roa (hash: vd9X0KNO4KjRnGRSxo8WoFeqcJXdexnSKn3TUknAjFQ=)
                          4: og4k5qVFbhVmLtxHVp2XKWNx-Vw.roa (hash: t6ZkyRFXAOHZOC93uE5FiUdcUyb51CT48WJCdjiZU/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:4a:2f:22:4d:9c:5f:a4:a5:9d:97:f1:57:74:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
        Validity
            Not Before: Sep  4 21:00:43 2026 GMT
            Not After : Sep  5 21:00:43 2026 GMT
        Subject: CN=3697cdf812ecb6c305fcc20cfa3a289218cddceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:f6:42:d3:51:89:b6:61:ab:b3:11:56:57:
                    b7:57:6c:bc:06:41:1f:ae:74:e4:97:e6:77:dd:3b:
                    02:5d:2d:09:70:0b:c5:2c:bd:82:d2:60:20:eb:c4:
                    ff:84:6f:68:3a:93:22:f9:19:a6:f5:56:20:af:98:
                    94:7d:e3:11:84:ee:3c:f3:47:2a:3a:f3:79:16:58:
                    fe:a5:90:80:93:4a:95:73:64:f8:c2:b6:b0:7d:59:
                    c2:a7:d0:b8:49:dd:e4:78:84:86:a6:2e:22:ed:e4:
                    6a:de:75:98:34:a3:d0:16:9d:dd:9c:1e:4a:56:57:
                    f6:43:08:74:2b:b7:38:44:b6:09:b6:5c:84:57:8b:
                    f2:53:c6:5f:ac:fc:84:16:bc:d5:8b:58:df:91:02:
                    af:b4:de:5b:a0:00:29:67:1e:ad:57:54:13:c8:f0:
                    51:f1:6a:cf:7a:ee:33:a7:2b:03:a1:07:34:e5:49:
                    b3:92:3a:f5:92:7c:8f:db:2c:c7:94:6d:2e:88:56:
                    54:a7:f7:1c:ad:02:17:f1:e2:19:7c:cf:68:ad:42:
                    31:81:ee:e9:fc:03:11:15:09:48:fe:0f:32:ac:4d:
                    47:db:48:96:d6:b4:c3:9a:ec:0f:76:15:39:11:41:
                    59:7e:ee:6f:00:4d:7c:0a:e7:c0:10:1a:48:c6:76:
                    66:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:97:CD:F8:12:EC:B6:C3:05:FC:C2:0C:FA:3A:28:92:18:CD:DC:EB
            X509v3 Authority Key Identifier:
                keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:4a:7f:37:1e:bd:f1:f1:2f:29:cb:e7:92:d5:c3:ac:82:e3:
         2f:a0:af:77:28:e1:3e:80:ef:ec:a7:1f:69:0e:fb:bd:e1:58:
         eb:d3:c5:52:61:1a:23:5c:b3:43:2f:af:50:1f:33:90:f2:3b:
         5b:cf:00:5e:7e:bd:cc:04:30:da:cc:09:c9:21:b3:90:9a:ef:
         d2:c2:fb:c0:c0:1a:6d:ad:4e:0c:fd:3c:4e:1b:21:3f:dc:5b:
         ce:1c:ca:8b:fd:f1:71:93:95:f7:9f:80:79:38:11:c0:69:34:
         fa:1e:25:17:65:8f:17:94:6d:52:a4:9b:53:15:f1:6f:cb:38:
         18:c3:87:dc:e6:ed:e6:a4:60:b1:5a:81:3f:c1:0b:21:bf:ab:
         2a:b3:d4:3c:7c:4b:19:92:73:40:ff:b1:a3:64:a6:00:47:d7:
         06:7d:5b:4c:b9:84:11:5c:a7:34:14:ff:7c:44:99:ee:24:33:
         35:9f:71:58:f4:53:eb:ee:e4:a3:95:9c:34:cd:6d:70:9b:14:
         cb:5e:28:5f:ab:41:61:d9:45:e8:d8:1a:29:a8:6e:fd:5b:ac:
         08:92:b8:81:61:2a:83:6b:ed:c7:88:a1:89:df:23:35:5d:cb:
         41:82:a6:ef:f9:08:af:85:60:22:45:f9:91:66:6f:07:a4:84:
         75:77:4a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:03:26 2026 by rpki-client