Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File:                     1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier:          66bBftmTRA56ifwuMX1KJFJ1mdXkCoPBGFCTs67OWjI=
Subject key identifier:   78:72:35:65:99:86:2B:BA:86:C5:3C:DE:D0:DE:F3:7A:63:00:52:D1
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer:       /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial:       01A08A1EB2EEE4CAF58FD4838D2D2AB077D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number:          1822
Signing time:             Thu 10 Sep 2026 07:01:02 +0000
Manifest this update:     Thu 10 Sep 2026 07:01:02 +0000
Manifest next update:     Fri 11 Sep 2026 07:01:02 +0000
Files and hashes:         1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: w74dlUocSieW5cQWQArGkhIlbyzuxZ/b2dtk0nn+WHU=)
                          2: z8zovr62ahngZe9eyLY1UmJJA_E.roa (hash: h9t0xBYGXyCoUtS+tRL/Tqf5YaJCLff6uGboBY8MeD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 07:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:1e:b2:ee:e4:ca:f5:8f:d4:83:8d:2d:2a:b0:77:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
        Validity
            Not Before: Sep 10 07:01:02 2026 GMT
            Not After : Sep 11 07:01:02 2026 GMT
        Subject: CN=7872356599862bba86c53cded0def37a630052d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f0:00:9e:86:00:9f:12:6e:77:14:d7:a2:7b:
                    9d:b5:62:6e:b0:38:01:86:96:d8:c5:09:f4:87:95:
                    7c:ac:8f:9e:4c:dc:4f:ea:23:aa:71:71:fd:2c:02:
                    01:b3:f5:f1:97:95:53:3f:46:d7:b9:19:24:8c:f1:
                    81:91:bd:41:49:44:74:59:4b:ca:44:26:a6:2d:58:
                    09:8f:00:73:f5:de:ba:b6:09:72:af:f4:d8:f9:0a:
                    17:75:49:31:e9:7e:59:73:1e:7b:f6:d8:c2:89:78:
                    fc:d5:d0:0c:08:c3:fc:8b:1c:84:0f:c7:43:7a:9f:
                    9d:5a:b1:b2:ce:24:58:00:27:c1:87:dd:4e:41:46:
                    c7:72:b8:a2:86:31:07:44:c4:f4:f7:58:b3:18:b5:
                    3e:8f:b7:c1:25:98:2e:f2:94:30:20:4c:0d:52:b7:
                    d9:5f:f9:03:8a:e0:64:ec:c6:d9:bf:73:7b:97:28:
                    17:22:05:0f:57:b8:46:76:16:ac:06:0f:c1:1a:76:
                    be:c3:4b:9b:4f:07:de:18:4f:31:0e:ae:df:ca:07:
                    89:3a:c7:18:b8:be:04:4a:20:88:44:de:ca:e9:09:
                    e8:d7:89:53:07:b5:4a:63:07:84:cb:63:77:c9:35:
                    b9:51:3f:af:5a:26:96:78:2b:f2:06:a1:25:d4:09:
                    04:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:72:35:65:99:86:2B:BA:86:C5:3C:DE:D0:DE:F3:7A:63:00:52:D1
            X509v3 Authority Key Identifier:
                keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e7:96:fc:23:0a:62:a5:66:33:84:56:02:9e:9a:7c:3b:35:
         2a:fa:26:f2:9b:c9:7d:c2:e1:4a:d7:b2:5e:a4:0d:88:36:08:
         08:5d:b8:a3:81:2e:c7:44:94:79:6e:18:ef:6d:f9:31:87:ee:
         27:3f:20:bd:d7:21:20:a7:31:2b:6d:d9:24:33:e2:92:1f:e0:
         36:60:56:a1:08:f3:0d:ce:5b:58:b7:85:53:d5:d8:0a:34:74:
         49:2a:1d:c4:0c:da:9a:2a:8f:23:02:58:bd:8a:2a:62:2b:ed:
         c7:4c:a3:41:2e:23:95:ac:e1:9a:6d:4d:82:9f:cb:72:7b:e5:
         9d:8e:24:05:4e:ff:57:fd:ba:86:6c:4a:44:7b:b3:14:3a:6d:
         db:a2:bb:37:e0:af:07:0e:8a:a2:04:f9:80:b4:98:56:1a:00:
         f6:92:12:2f:6a:5d:55:41:40:34:83:f7:4a:22:a9:12:cf:c5:
         8e:57:52:43:1b:74:7f:6a:8e:fa:7e:be:cd:7b:c4:aa:36:5d:
         26:06:f0:bd:b1:f8:20:94:16:02:89:d3:7c:c0:fb:87:b5:ca:
         7b:4e:f4:65:4c:9a:fe:59:d9:d9:0a:b4:e9:b7:d8:e8:61:2a:
         6b:39:5b:63:fd:72:10:8f:79:41:b7:82:fc:42:33:73:db:24:
         9d:82:4c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:28 2026 by rpki-client