Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
File:                     dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json)
Hash identifier:          ut6Yyr3xA9/8nmgx7YYI6Nd5lRQd0x9z3HHZnw1L+4Q=
Subject key identifier:   B4:F0:C6:49:26:6B:FD:6D:1D:FB:41:23:51:57:80:E6:5B:EC:ED:89
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Certificate issuer:       /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial:       01A0D64C5DE303E9531B1214346F6A1865D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
Manifest number:          1512
Signing time:             Fri 25 Sep 2026 02:02:03 +0000
Manifest this update:     Fri 25 Sep 2026 02:02:03 +0000
Manifest next update:     Sat 26 Sep 2026 02:02:03 +0000
Files and hashes:         1: 2snz2cHxMIqDrmWpyQdj5PDHUMA.roa (hash: PDvyyYGhi1AmhDsFwKXgGPleS0592sAJ/29+42mhJtU=)
                          2: ck9fph3pnGBfD51d6ySumkAZbWw.roa (hash: cePM5hzSAL7gxgiyzP8i8tA4JspwG2EEsvqQZVUTIU0=)
                          3: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: I/DuForHgfVsfAXp6cRSpHrv03fStCeb4/Nv6fuWRCw=)
                          4: zsYC7eTs7CKxZQzMiKBYtW02NU4.roa (hash: zfsiqu/7VESSfUyUGFpkJ4f5HeLFmZSKqmckIw2soSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4c:5d:e3:03:e9:53:1b:12:14:34:6f:6a:18:65:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
        Validity
            Not Before: Sep 25 02:02:03 2026 GMT
            Not After : Sep 26 02:02:03 2026 GMT
        Subject: CN=b4f0c649266bfd6d1dfb4123515780e65beced89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:86:21:e0:6c:71:e0:b5:33:41:69:9b:64:fc:
                    2c:4b:99:52:9a:cc:c0:33:4c:de:64:81:d8:70:03:
                    b5:00:ce:7c:05:2b:3f:7a:98:87:1e:79:43:37:22:
                    91:af:6d:e8:4e:f4:66:3d:8a:b2:80:c8:86:cf:a1:
                    25:a6:6c:d5:0b:4b:2a:dc:38:96:13:0c:1b:4a:61:
                    45:bd:14:0d:27:5e:9d:8d:aa:d3:10:89:9c:75:6d:
                    bc:d5:87:3c:ba:d2:81:00:3b:23:7e:14:af:60:c9:
                    1b:1b:24:4b:53:14:a5:23:90:8c:9f:d3:00:42:99:
                    38:56:d6:ac:30:c9:48:8e:72:e4:e4:f0:00:ce:0e:
                    7d:74:f6:62:73:d2:b3:46:97:2e:15:6e:18:0c:33:
                    09:72:da:99:6c:b2:c3:74:64:3b:9d:5a:a2:4b:f0:
                    4a:2e:00:5e:9b:fb:bd:49:6a:5b:3e:c0:e2:5f:85:
                    c5:76:2d:c1:96:fc:91:03:f3:cc:21:8f:a3:1e:99:
                    2a:49:64:21:f8:b1:4c:dd:cc:37:19:69:9c:c3:9b:
                    1f:20:72:ec:2b:8d:b2:49:30:65:aa:2e:eb:44:ed:
                    f7:ef:2a:bb:45:43:dc:8f:6e:4d:12:75:69:ed:af:
                    54:55:34:51:8b:40:db:f1:f8:82:7b:80:4b:a7:99:
                    e0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F0:C6:49:26:6B:FD:6D:1D:FB:41:23:51:57:80:E6:5B:EC:ED:89
            X509v3 Authority Key Identifier:
                keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:fe:00:4b:e4:aa:01:48:e5:7e:df:7d:0a:0f:46:53:c1:b6:
         6b:a7:ac:e9:a1:e0:3b:b8:ba:1e:6b:80:89:97:53:ca:ba:d0:
         e7:da:46:fc:75:c7:43:66:2b:ba:ae:82:66:00:a6:f7:c1:33:
         bc:a5:d3:0a:e5:d2:e1:8c:73:52:d2:4d:c2:66:43:54:44:09:
         b3:c1:4e:dc:69:82:09:15:bc:98:7a:6f:c9:44:df:69:01:7f:
         1c:d0:08:47:82:e5:f2:78:a9:79:e7:19:b3:c0:0e:49:94:8f:
         21:5a:5f:9c:6b:df:bf:4c:29:24:24:75:2c:c7:d0:9f:70:85:
         a5:3a:bd:fc:d3:1b:e9:d1:29:d6:11:d7:8a:13:1b:c1:44:69:
         fc:9c:b6:78:d0:7e:de:78:b8:59:62:a7:e2:91:ac:80:9e:bb:
         21:6d:ec:5f:ed:6e:dd:9b:fc:f5:0a:24:66:79:df:22:df:12:
         02:6c:e5:07:ce:e1:9d:48:4b:e5:fa:c8:36:52:16:ad:c6:0c:
         6e:38:33:20:f6:70:35:18:7e:9f:94:4a:d1:3d:cf:dd:c5:fe:
         9f:59:3b:aa:2e:89:d4:03:f8:06:1c:b5:35:a4:b3:b0:ad:9b:
         09:9a:4e:c1:1c:f5:4e:6c:3e:a5:ab:d4:7e:cb:61:0c:fc:13:
         07:56:e5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:13:30 2026 by rpki-client