Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File:                     8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier:          Ecj5spXOj9u0aqPs1abTI9BMjd15ZB/O/mQF23MT9qw=
Subject key identifier:   47:34:BB:73:7B:55:14:19:BC:1E:5E:5D:A7:12:21:3A:14:BC:47:DD
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer:       /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial:       01A0F18BDDEE0E85439368A46BE75035B132
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number:          146D
Signing time:             Wed 30 Sep 2026 09:01:10 +0000
Manifest this update:     Wed 30 Sep 2026 09:01:10 +0000
Manifest next update:     Thu 01 Oct 2026 09:01:10 +0000
Files and hashes:         1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: b+q4+izuBUP0Ahjogs1LtG76LKTgH+7V74yD4g48hj8=)
                          2: l6iMzA5rUEZhAgCUEOvnKTqShV0.roa (hash: gAUd2yvULPzYOcnL9Q+REp9EtdgiHuOMJuUR7tJ6Oq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 09:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:8b:dd:ee:0e:85:43:93:68:a4:6b:e7:50:35:b1:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
        Validity
            Not Before: Sep 30 09:01:10 2026 GMT
            Not After : Oct  1 09:01:10 2026 GMT
        Subject: CN=4734bb737b551419bc1e5e5da712213a14bc47dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8e:46:d4:34:ab:af:31:c9:d4:bb:3a:e2:d5:
                    95:85:0a:25:3f:0b:7a:62:72:3c:d7:6d:47:7c:cc:
                    5c:53:5f:2c:16:c4:21:5a:c0:2b:fb:a2:43:9d:21:
                    2e:44:6a:e4:a6:d3:78:95:23:45:c4:3f:14:61:27:
                    97:06:01:3e:21:b5:d0:19:88:7e:a8:06:eb:eb:da:
                    68:45:08:bf:ca:72:51:0f:ef:7d:ea:32:cf:2a:40:
                    84:90:9d:e7:f1:ad:b3:5c:54:74:fa:19:92:11:5b:
                    1e:28:08:42:0d:5b:6c:e0:41:f9:a8:3c:ef:d4:52:
                    da:86:15:45:54:8b:11:d0:e3:fb:20:fe:31:e3:7b:
                    17:9a:c2:2a:73:57:52:02:c6:4a:2e:f8:d1:98:2d:
                    de:95:e6:88:9b:2f:73:5d:08:cf:cc:69:9f:a3:a9:
                    f1:db:b5:61:cb:f2:cf:42:64:02:74:a3:96:d1:7c:
                    de:03:ba:6e:d3:00:83:dd:84:b9:ef:7f:1f:80:77:
                    39:6e:f0:53:b9:fc:b5:c2:0e:4e:9e:28:fc:e6:d6:
                    b0:82:cb:ea:ef:1e:9a:f7:7f:5d:21:ec:24:33:d6:
                    0c:99:3f:1b:32:0a:f8:83:4b:ed:f9:4d:4d:03:ae:
                    8e:46:c8:1f:4c:92:98:be:0e:d6:ec:00:f4:b6:ee:
                    ea:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:34:BB:73:7B:55:14:19:BC:1E:5E:5D:A7:12:21:3A:14:BC:47:DD
            X509v3 Authority Key Identifier:
                keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:2d:29:1f:29:62:de:51:0b:db:df:30:cc:e2:15:2f:2d:ba:
         fd:dc:e1:17:3e:06:39:16:ee:af:84:9e:49:cc:ab:89:26:e6:
         28:8e:d2:e2:45:d3:6f:e6:5c:0f:ec:48:6e:c4:5d:5f:7a:c5:
         71:05:c4:5d:b3:a1:a7:24:01:8f:58:01:08:37:01:77:7a:3e:
         8f:f8:d3:d9:64:f0:9a:74:52:d9:cb:3d:40:f7:d3:70:fb:f2:
         87:36:b5:7c:97:a3:27:e9:eb:28:e9:7a:60:aa:45:eb:c0:b5:
         6c:a4:cf:6c:fc:ae:2f:7e:ea:93:67:af:64:99:45:1b:bf:ef:
         b5:39:01:c7:5a:57:c2:90:31:75:5a:f4:78:e3:e9:f3:40:32:
         6b:f0:b0:a0:f6:a9:ad:5a:b6:bc:f2:98:9d:80:a0:d8:a1:72:
         a7:36:63:33:79:12:74:1b:35:20:25:d2:12:4d:74:f5:1a:0b:
         c3:e2:04:a1:d2:f4:f4:2a:c2:91:a3:11:88:2e:af:c6:97:f3:
         19:e2:b1:ad:9f:41:c4:b5:bb:ee:88:cd:17:1e:51:db:ec:ab:
         53:6c:b5:7f:32:0c:92:cf:58:5b:97:c9:58:de:41:5f:62:e8:
         c9:98:67:55:3b:8c:94:56:84:a2:f6:6c:74:73:b4:ee:14:0b:
         46:e2:9d:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDxi93uDoVDk2ika+dQNbEyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMDAzZDJjNzFhYjA3Njk5MWZiMDNlZDY2MDBiZjFkNDhi
NzJiZTUwHhcNMjYwOTMwMDkwMTEwWhcNMjYxMDAxMDkwMTEwWjAzMTEwLwYDVQQD
Eyg0NzM0YmI3MzdiNTUxNDE5YmMxZTVlNWRhNzEyMjEzYTE0YmM0N2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi45G1DSrrzHJ1Ls64tWVhQolPwt6
YnI8121HfMxcU18sFsQhWsAr+6JDnSEuRGrkptN4lSNFxD8UYSeXBgE+IbXQGYh+
qAbr69poRQi/ynJRD+996jLPKkCEkJ3n8a2zXFR0+hmSEVseKAhCDVts4EH5qDzv
1FLahhVFVIsR0OP7IP4x43sXmsIqc1dSAsZKLvjRmC3eleaImy9zXQjPzGmfo6nx
27Vhy/LPQmQCdKOW0XzeA7pu0wCD3YS5738fgHc5bvBTufy1wg5Onij85tawgsvq
7x6a939dIewkM9YMmT8bMgr4g0vt+U1NA66ORsgfTJKYvg7W7AD0tu7qkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEc0u3N7VRQZvB5eXacSIToUvEfdMB8GA1UdIwQY
MBaAFPEAPSxxqwdpkfsD7WYAvx1ItyvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84NDZhMDMtZGUyNC00ODViLWI5Yjct
YzRiYzgwM2Q4OTNmLzEvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84NDZhMDMtZGUyNC00ODViLWI5YjctYzRiYzgwM2Q4OTNm
LzEvOFFBOUxIR3JCMm1SLXdQdFpnQ19IVWkzSy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIy0pHyli
3lEL298wzOIVLy26/dzhFz4GORbur4SeScyriSbmKI7S4kXTb+ZcD+xIbsRdX3rF
cQXEXbOhpyQBj1gBCDcBd3o+j/jT2WTwmnRS2cs9QPfTcPvyhza1fJejJ+nrKOl6
YKpF68C1bKTPbPyuL37qk2evZJlFG7/vtTkBx1pXwpAxdVr0eOPp80Aya/CwoPap
rVq2vPKYnYCg2KFypzZjM3kSdBs1ICXSEk109RoLw+IEodL09CrCkaMRiC6vxpfz
GeKxrZ9BxLW77ojNFx5R2+yrU2y1fzIMks9YW5fJWN5BX2LoyZhnVTuMlFaEovZs
dHO07hQLRuKdQw==
-----END CERTIFICATE-----
Generated at Wed Sep 30 17:16:07 2026 by rpki-client