Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/73a4c3-34a2-493c-9b59-654241d4e12c/1/dQaZF0ZNHAuKSU6-9c46XW7epmk.mft
File:                     dQaZF0ZNHAuKSU6-9c46XW7epmk.mft (raw, json)
Hash identifier:          ECkhu9Byga7YLa9QJ2TL/dt18Ma64kjCY8SfkDoPYVs=
Subject key identifier:   1D:6F:EC:41:37:A5:CB:CD:C2:A8:B2:C7:4F:9B:D1:23:1C:44:76:25
Authority key identifier: 75:06:99:17:46:4D:1C:0B:8A:49:4E:BE:F5:CE:3A:5D:6E:DE:A6:69
Certificate issuer:       /CN=75069917464d1c0b8a494ebef5ce3a5d6edea669
Certificate serial:       01A1E0281CAD141E3F391E752D78D34562A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQaZF0ZNHAuKSU6-9c46XW7epmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/73a4c3-34a2-493c-9b59-654241d4e12c/1/dQaZF0ZNHAuKSU6-9c46XW7epmk.mft
Manifest number:          7F
Signing time:             Sun 15 Nov 2026 17:01:27 +0000
Manifest this update:     Sun 15 Nov 2026 17:01:27 +0000
Manifest next update:     Mon 16 Nov 2026 17:01:27 +0000
Files and hashes:         1: dQaZF0ZNHAuKSU6-9c46XW7epmk.crl (hash: trhyv4ssCHD8ElWhUfdxdl3xmX2PkpA8cMoz2wKn1RU=)
                          2: geG4SlpQPLvMgA3uDyLTmIWmxGM.roa (hash: E3yg6GvX7SKVYNC0tw1auLyQDADDfhOFkHhX32lzfek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/73a4c3-34a2-493c-9b59-654241d4e12c/1/dQaZF0ZNHAuKSU6-9c46XW7epmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/73a4c3-34a2-493c-9b59-654241d4e12c/1/dQaZF0ZNHAuKSU6-9c46XW7epmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQaZF0ZNHAuKSU6-9c46XW7epmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:e0:28:1c:ad:14:1e:3f:39:1e:75:2d:78:d3:45:62:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75069917464d1c0b8a494ebef5ce3a5d6edea669
        Validity
            Not Before: Nov 15 17:01:27 2026 GMT
            Not After : Nov 16 17:01:27 2026 GMT
        Subject: CN=1d6fec4137a5cbcdc2a8b2c74f9bd1231c447625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:60:f1:fc:ac:d1:ba:05:6e:f4:b4:07:5b:
                    a7:75:64:e8:fe:43:87:56:de:34:83:20:d9:43:01:
                    b0:57:f8:4c:06:f1:e0:21:7d:0d:d2:b4:d7:1b:dd:
                    d5:00:d6:ba:2b:3a:9c:59:26:73:08:65:bc:17:40:
                    67:48:01:c4:72:3a:f8:1c:1b:de:6e:63:1a:fe:a3:
                    cd:d2:f0:62:d7:6e:b4:e5:9c:96:db:67:da:f8:bc:
                    8f:ff:63:0e:3a:c9:55:d7:6c:a6:5f:90:bf:1e:af:
                    63:93:5a:16:77:e0:ad:79:23:03:e7:d8:e7:cd:63:
                    50:07:4e:14:60:05:80:34:30:7b:b2:cf:9c:70:45:
                    d3:a6:38:e0:18:8b:f3:9e:9d:4b:df:ba:89:96:4f:
                    db:d0:69:60:25:b5:05:c1:5f:70:62:31:a7:b6:22:
                    55:ff:c5:e9:b9:a4:3e:ef:ed:d0:42:f5:1a:82:b5:
                    74:f8:17:e5:12:89:a1:c4:a6:32:70:95:d6:7b:18:
                    8e:53:bf:de:07:be:6b:fa:42:31:7d:50:94:9a:1c:
                    3e:75:45:66:73:94:c4:4b:0e:9b:31:11:29:32:ae:
                    b9:20:c0:be:63:ae:3a:51:6c:b5:2f:a6:19:99:f7:
                    e0:0d:b0:f9:41:7c:fa:39:a9:dd:10:d4:81:66:f5:
                    6f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6F:EC:41:37:A5:CB:CD:C2:A8:B2:C7:4F:9B:D1:23:1C:44:76:25
            X509v3 Authority Key Identifier:
                keyid:75:06:99:17:46:4D:1C:0B:8A:49:4E:BE:F5:CE:3A:5D:6E:DE:A6:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQaZF0ZNHAuKSU6-9c46XW7epmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/73a4c3-34a2-493c-9b59-654241d4e12c/1/dQaZF0ZNHAuKSU6-9c46XW7epmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/73a4c3-34a2-493c-9b59-654241d4e12c/1/dQaZF0ZNHAuKSU6-9c46XW7epmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:48:36:d5:c0:81:d1:3d:09:f5:9d:06:4f:08:29:68:7b:e6:
         30:d8:07:ab:25:14:50:67:dc:1e:ee:ea:92:00:f3:99:ba:c8:
         87:2d:82:45:b5:76:fa:03:04:c5:a5:6e:64:40:b6:b3:98:cb:
         c1:c8:08:3c:ac:f7:ee:42:52:23:08:59:48:90:7e:9e:c5:df:
         47:8c:30:18:e3:4b:e7:d1:54:79:2d:9d:95:92:32:c7:ad:ed:
         16:ce:80:05:fe:28:a7:fc:3c:f3:b8:bf:37:c2:5c:7b:1a:fe:
         d7:fc:e5:f6:51:46:e7:ba:a6:ec:2f:d2:48:72:5e:4a:44:ec:
         80:a7:56:a1:97:ce:fe:36:8d:28:24:e4:12:9a:e9:a6:1d:41:
         12:f1:e5:a7:46:e3:8f:6a:ad:77:70:f6:65:ec:7d:e3:29:b2:
         52:0e:95:55:b2:58:aa:4d:25:79:62:e4:6b:b5:92:2c:3b:39:
         3e:a7:4c:53:d8:00:d0:ac:2a:48:9d:80:e6:92:0d:1b:1f:0d:
         e1:20:04:e2:84:ed:cc:20:5b:19:6b:3d:47:3d:12:92:18:42:
         f2:7b:9b:af:92:6e:2b:e1:8a:eb:c3:31:c2:88:e6:c2:b9:63:
         32:89:8e:46:db:9c:8d:70:da:e2:e6:fe:60:d0:06:62:19:7a:
         65:a2:0e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:52:12 2026 by rpki-client