Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File:                     qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier:          qCjqFpI7FXZ8d28kIfO0ykj4MEIHq486g67BlAZClHw=
Subject key identifier:   47:D9:0A:45:B5:C1:71:C0:5E:BD:0E:C9:48:96:53:53:C1:B8:51:E9
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer:       /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial:       01A06E39F6CADA78AAAED799CFD2A606C0D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number:          054D
Signing time:             Fri 04 Sep 2026 21:01:27 +0000
Manifest this update:     Fri 04 Sep 2026 21:01:27 +0000
Manifest next update:     Sat 05 Sep 2026 21:01:27 +0000
Files and hashes:         1: IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa (hash: BUMsO+3Md3GuCd0Sja0LiQrCDsbttYlIXUYoBXpu1Ks=)
                          2: JEsWD0_sPZeR3nDP6LBcihehfnQ.roa (hash: q6r9n8Jhyw8OGJcuwwPP+sOyeoKFsYrXF9zzzZNNxbI=)
                          3: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: M7WVh1735eukffbqm8HzsxX7Hi4LnG+zvXG9MSU8bmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:f6:ca:da:78:aa:ae:d7:99:cf:d2:a6:06:c0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
        Validity
            Not Before: Sep  4 21:01:27 2026 GMT
            Not After : Sep  5 21:01:27 2026 GMT
        Subject: CN=47d90a45b5c171c05ebd0ec948965353c1b851e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:07:4f:0d:d6:a0:26:9f:c4:a6:19:58:c9:e3:
                    52:c8:fb:35:89:9f:50:53:fb:31:ef:59:1a:0e:0f:
                    ea:7d:c1:3d:d2:c2:a3:cd:6b:2e:93:d3:2e:68:d6:
                    e6:c2:e1:b1:07:d2:93:19:74:86:78:05:19:1f:ef:
                    c6:29:92:00:ea:54:56:20:ff:43:9a:43:ad:28:b1:
                    cd:5d:e8:b9:67:28:c3:49:bb:4b:88:8f:fc:5c:03:
                    01:2c:ee:92:2d:28:fe:b3:d0:d1:86:a6:50:fa:f9:
                    01:a3:18:e4:04:81:2a:1e:3f:af:cc:54:ee:52:8d:
                    84:cc:5d:79:da:1a:bd:f8:7a:45:12:4c:39:c0:36:
                    ca:f1:4a:ea:8c:90:af:08:00:6c:a3:60:18:03:fa:
                    18:af:8a:a8:75:3e:bd:79:dd:c0:f4:7e:24:76:b8:
                    66:4b:cf:b5:81:22:e6:0d:b0:b8:9e:00:60:ce:bd:
                    f2:2f:fa:ca:74:39:dd:be:60:70:e5:14:4b:8c:84:
                    80:a9:f2:bb:c9:36:59:de:b5:90:06:c0:03:06:72:
                    fc:d9:f5:8d:a4:35:2d:8e:d0:58:33:a1:31:b2:ba:
                    e6:8f:49:21:2d:80:1c:a4:2b:74:a1:c3:2f:4e:9e:
                    4c:77:82:9b:df:0d:dc:83:0f:c8:05:a3:ef:fb:bc:
                    f3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D9:0A:45:B5:C1:71:C0:5E:BD:0E:C9:48:96:53:53:C1:B8:51:E9
            X509v3 Authority Key Identifier:
                keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b0:21:76:4a:af:71:a1:2e:83:a2:3e:e8:ca:ab:90:60:ce:
         b3:be:a1:69:05:b7:51:bd:c8:24:ef:ff:58:de:1b:60:6e:74:
         80:39:73:40:ee:01:81:65:b1:ba:59:23:a0:bb:db:b2:c1:88:
         58:13:09:3c:4b:18:d1:b1:e3:85:02:1f:91:64:c3:bf:4f:ff:
         09:0e:b9:0b:cb:f8:bf:4c:49:5a:32:52:8f:89:6b:75:e8:6d:
         50:59:7a:39:18:ca:ee:ff:92:f7:ad:ce:af:c0:0c:ed:64:7a:
         8e:33:b8:7a:ef:11:f2:ad:c4:e1:62:d3:2e:8c:b1:ca:b0:43:
         cc:62:f3:43:89:af:ff:59:82:2a:55:4a:92:c6:51:d5:d0:39:
         b2:19:08:db:87:32:36:bf:5f:40:f1:92:02:40:2b:e7:1a:0f:
         e9:40:2b:1b:1d:05:b8:2e:04:6f:1f:5c:4b:4f:ed:38:a0:f9:
         71:d2:8e:30:0c:30:0c:6d:67:4d:7b:a6:37:8c:b7:e0:66:ec:
         7c:48:a8:53:e5:08:c7:fd:f0:51:d1:44:8d:6b:87:fb:3f:fe:
         4a:97:14:2c:13:45:c3:44:a5:a3:62:fd:a0:59:8a:31:1e:f5:
         b3:8f:e2:be:1e:9a:f9:83:b3:ea:1f:62:41:17:ce:af:27:28:
         a2:07:2f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:28:41 2026 by rpki-client