Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
File:                     sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json)
Hash identifier:          Y8gtu9ktv1VYw3LB1dCyhap9VLZoOYE74obGdWXnDqs=
Subject key identifier:   CD:43:06:07:7D:51:9F:D5:87:3F:50:0E:22:77:13:9C:32:AD:DE:F2
Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
Certificate issuer:       /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Certificate serial:       01A0D4CB901351034483D394A2169B95CD10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
Manifest number:          0621
Signing time:             Thu 24 Sep 2026 19:01:45 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:45 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:45 +0000
Files and hashes:         1: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: gLmL/dY2t9EP/8YwGR+DnLKYf7xN3u+PkAeILvpSfDA=)
                          2: wS-jaaEMUTGS5DqxQuN95qXPBc8.roa (hash: 06h366lvWqKC+ftnxISHm/f+AJodcmHOYMbCi4Dh0pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:90:13:51:03:44:83:d3:94:a2:16:9b:95:cd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
        Validity
            Not Before: Sep 24 19:01:45 2026 GMT
            Not After : Sep 25 19:01:45 2026 GMT
        Subject: CN=cd4306077d519fd5873f500e2277139c32addef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:37:2a:14:89:06:39:bd:0f:10:7c:fd:ad:f7:
                    d9:ed:07:b2:43:96:3c:1c:42:f9:8e:c2:2e:f7:e0:
                    77:4b:07:4e:52:5c:9b:b0:5b:8f:8a:82:75:5f:51:
                    7b:e5:9a:b2:0d:4f:fd:63:f5:ca:46:ac:1b:28:5b:
                    e8:46:d2:37:85:3b:7e:b3:4e:e5:54:d8:f1:4f:9e:
                    0c:c8:56:40:5d:0d:25:e8:ff:b7:a3:df:5a:fa:d1:
                    07:74:32:be:30:6e:1d:c6:51:c1:a6:4b:7f:05:e2:
                    f0:ce:20:dd:ca:ac:f4:0d:d7:2b:0c:b1:11:96:fe:
                    1c:b1:ad:08:0c:a9:88:cf:be:72:f5:10:1e:d6:2c:
                    29:9f:c7:3a:3d:34:93:7b:b3:67:a6:ad:22:80:9c:
                    03:47:ee:71:56:83:77:9c:e1:f9:24:5d:3f:93:f7:
                    fd:07:18:0b:5a:34:5d:cb:2f:fb:7f:b4:31:28:56:
                    e7:1f:cf:7a:d9:dd:f8:70:c6:8d:08:0b:c0:88:14:
                    f2:20:41:6d:80:14:48:46:0d:e3:f6:78:bc:5e:e6:
                    53:12:cf:6f:b1:b2:ad:67:05:28:80:f1:2f:05:8c:
                    eb:c3:75:ec:b1:31:ef:54:b2:f0:7b:c6:d4:2e:ff:
                    a7:8d:70:39:a1:fe:a0:ae:78:77:33:26:40:bf:52:
                    de:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:43:06:07:7D:51:9F:D5:87:3F:50:0E:22:77:13:9C:32:AD:DE:F2
            X509v3 Authority Key Identifier:
                keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1c:ff:dd:0f:43:74:c5:63:6b:fc:1a:0c:f5:59:19:95:68:
         66:b0:18:26:e9:4e:88:3e:28:c3:81:ec:5c:d1:65:1d:99:f8:
         74:78:27:e5:6d:a2:b8:eb:d6:f0:28:89:af:49:81:ed:89:fa:
         89:80:54:c6:9f:5c:cf:1e:00:a6:d7:ec:64:6c:07:90:39:a7:
         c0:cc:0c:6e:4b:da:c5:d3:4f:d0:0d:75:b2:b4:0e:27:9b:72:
         bd:f9:a8:6b:0d:aa:3a:36:25:b6:9f:32:03:a7:76:8f:38:7a:
         76:95:bb:34:96:25:00:18:7a:bb:4e:d9:31:80:9a:85:59:93:
         aa:bd:2a:dd:42:54:fd:ca:50:08:11:56:94:79:48:5c:24:39:
         ac:a4:2f:fc:13:1e:99:58:83:09:75:04:0a:f5:ea:e5:7c:98:
         81:88:ff:7c:22:e6:4c:f0:ae:9e:61:76:dd:a5:1f:d1:99:47:
         85:e1:f6:37:18:71:55:a9:ff:b1:af:37:a4:df:c6:5b:1a:64:
         7f:cf:5e:d2:6f:94:f9:6e:08:c2:3e:25:0a:23:73:90:3d:58:
         e4:44:45:7c:86:cb:74:0e:73:16:82:98:ba:ed:1e:99:d9:76:
         f0:81:ee:8a:18:f7:8a:fa:ee:38:ba:bb:28:9e:61:0a:b8:36:
         77:15:17:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUy5ATUQNEg9OUohablc0QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYTRmZTNjMzcxOTU1YjkyMTJjYWRlNjQ5Y2JmMTdjNWZj
NThlZTIwHhcNMjYwOTI0MTkwMTQ1WhcNMjYwOTI1MTkwMTQ1WjAzMTEwLwYDVQQD
EyhjZDQzMDYwNzdkNTE5ZmQ1ODczZjUwMGUyMjc3MTM5YzMyYWRkZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TcqFIkGOb0PEHz9rffZ7QeyQ5Y8
HEL5jsIu9+B3SwdOUlybsFuPioJ1X1F75ZqyDU/9Y/XKRqwbKFvoRtI3hTt+s07l
VNjxT54MyFZAXQ0l6P+3o99a+tEHdDK+MG4dxlHBpkt/BeLwziDdyqz0DdcrDLER
lv4csa0IDKmIz75y9RAe1iwpn8c6PTSTe7Nnpq0igJwDR+5xVoN3nOH5JF0/k/f9
BxgLWjRdyy/7f7QxKFbnH8962d34cMaNCAvAiBTyIEFtgBRIRg3j9ni8XuZTEs9v
sbKtZwUogPEvBYzrw3XssTHvVLLwe8bULv+njXA5of6grnh3MyZAv1LeiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1DBgd9UZ/Vhz9QDiJ3E5wyrd7yMB8GA1UdIwQY
MBaAFLKk/jw3GVW5ISyt5knL8XxfxY7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2Yt
YzhjY2RkOWU2ODdhLzEvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2YtYzhjY2RkOWU2ODdh
LzEvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRz/3Q9D
dMVja/waDPVZGZVoZrAYJulOiD4ow4HsXNFlHZn4dHgn5W2iuOvW8CiJr0mB7Yn6
iYBUxp9czx4AptfsZGwHkDmnwMwMbkvaxdNP0A11srQOJ5tyvfmoaw2qOjYltp8y
A6d2jzh6dpW7NJYlABh6u07ZMYCahVmTqr0q3UJU/cpQCBFWlHlIXCQ5rKQv/BMe
mViDCXUECvXq5XyYgYj/fCLmTPCunmF23aUf0ZlHheH2NxhxVan/sa83pN/GWxpk
f89e0m+U+W4Iwj4lCiNzkD1Y5ERFfIbLdA5zFoKYuu0emdl28IHuihj3ivruOLq7
KJ5hCrg2dxUXhg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:45:30 2026 by rpki-client