Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
File:                     qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft (raw, json)
Hash identifier:          UxJeY9KODKylNv4CqtgdCWx9fgygZMS6z2SWTsmL78M=
Subject key identifier:   BB:9D:FA:F5:94:FF:04:20:F7:DF:51:75:EA:68:AB:37:99:3B:09:61
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Certificate issuer:       /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial:       01A0ED93C6525DC61329015F7822B9F2F9AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
Manifest number:          17C9
Signing time:             Tue 29 Sep 2026 14:31:19 +0000
Manifest this update:     Tue 29 Sep 2026 14:31:19 +0000
Manifest next update:     Wed 30 Sep 2026 14:31:19 +0000
Files and hashes:         1: 540dlO-AJLVfcuxXIcBEnEhADCs.asa (hash: yW8W3OcRiwXg3Ew3hr59S/Kqve2OAMPzKvd8bih2nRI=)
                          2: SbmHVzvJLZyr_oPkt5P1usWrh6Q.roa (hash: +6pflE25NuOpLZJ9n8zoa9cmzK6oT49Q5ARbBS4vrXQ=)
                          3: qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl (hash: vTLLfwkr+k3ZDEH6SJNKI0IALsLDupxUAIK4QH9Lx7I=)
                          4: y1xvK7lHBhE4mJfORtJta3k7QLw.roa (hash: ifW/r0S+8T3HM1pq3eDXlZA/lxPnTJhYCS5bj7w7VBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:31:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ed:93:c6:52:5d:c6:13:29:01:5f:78:22:b9:f2:f9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
        Validity
            Not Before: Sep 29 14:31:19 2026 GMT
            Not After : Sep 30 14:31:19 2026 GMT
        Subject: CN=bb9dfaf594ff0420f7df5175ea68ab37993b0961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ee:d0:a0:eb:cb:78:15:d0:8a:0f:be:29:b1:
                    54:06:e3:96:17:0f:c6:bf:09:1a:7a:87:50:c8:70:
                    05:69:3c:80:fe:52:72:fb:f3:56:c8:d2:d6:df:bb:
                    06:ca:a1:23:6b:a2:91:12:f8:a8:d3:57:91:b5:84:
                    7f:cb:10:7a:0a:8b:6f:d9:26:19:77:16:1d:c8:e0:
                    6b:51:bc:c7:20:63:4a:37:ee:7f:a3:ed:84:4c:41:
                    4b:06:9d:9c:ab:25:46:1e:6f:9c:38:a2:7c:f8:1a:
                    f7:41:ce:19:5b:fe:d5:f0:c8:53:17:32:7c:8d:9f:
                    ab:e3:f6:5f:f8:e0:75:72:c1:e3:b3:49:18:19:42:
                    67:22:d8:52:92:64:a1:d2:4b:40:39:30:07:19:a8:
                    fa:45:ef:a3:ee:3f:d5:fa:68:8f:fe:57:70:2a:72:
                    c3:fc:e6:a0:32:72:81:e6:ef:dc:7e:f7:18:db:e0:
                    4a:64:72:1e:87:bd:2f:87:62:1a:4e:ad:b2:0a:e1:
                    09:c4:67:33:47:ea:40:86:94:19:65:e1:d6:b6:77:
                    72:ca:58:ff:7b:1b:23:85:af:33:78:89:56:3f:97:
                    f5:4f:1b:37:89:b0:cf:4e:3a:e9:e3:78:05:4e:fa:
                    bc:84:78:9a:55:be:fc:54:da:b0:4b:09:b2:e7:2c:
                    1a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9D:FA:F5:94:FF:04:20:F7:DF:51:75:EA:68:AB:37:99:3B:09:61
            X509v3 Authority Key Identifier:
                keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:33:8d:8a:59:eb:7c:f0:f2:ee:78:6c:3b:42:ff:9f:3f:10:
         4a:e6:91:bf:af:85:2f:ef:b5:5e:59:33:e2:e8:01:7c:cf:72:
         77:ce:61:12:b4:4d:b1:6c:6a:1c:cc:30:26:68:f4:14:37:b8:
         15:02:8e:40:77:5a:d8:b3:c1:00:5d:a1:da:69:bf:3f:36:ce:
         3e:34:73:ec:ff:e7:df:07:ae:e7:34:f7:af:ed:36:86:8d:d9:
         88:8b:ea:b2:0c:49:54:69:07:e7:5f:0e:a6:b8:20:82:5d:5c:
         e4:3e:3f:80:02:15:d1:f9:9c:31:4c:96:dc:c6:eb:dc:22:03:
         76:c8:b8:9b:57:e3:07:57:f9:6f:01:b0:9b:69:2c:0c:f6:05:
         13:d2:4e:0d:dd:cf:b1:3f:67:b1:df:43:a1:a4:11:48:aa:67:
         0c:76:20:d2:3d:45:7f:83:69:07:7d:d5:73:19:f6:33:97:df:
         0c:ed:fc:da:ba:12:93:38:93:b3:e6:2c:84:03:9a:57:15:ac:
         b5:70:a3:ef:86:6a:73:8e:cd:40:b8:62:8c:e3:b9:56:50:b9:
         3b:ff:60:44:b0:d4:12:96:9e:de:33:bf:d8:4e:62:12:26:cb:
         c8:a7:4d:f3:3c:fc:b8:a6:b3:09:89:c3:cb:54:7d:6b:68:d3:
         06:6d:97:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 00:17:45 2026 by rpki-client