Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
File:                     sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json)
Hash identifier:          uFDny9+t2ta+q29F3e/TuS0fJGUXMso5q6V8DVQYMW4=
Subject key identifier:   C7:69:B0:43:2C:8E:9F:3D:02:5D:19:0D:D5:11:73:5C:D0:D6:A6:E1
Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
Certificate issuer:       /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Certificate serial:       019F92490BE9979984B30CA4D63881135A0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
Manifest number:          057A
Signing time:             Fri 24 Jul 2026 04:01:28 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:28 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:28 +0000
Files and hashes:         1: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: PqKSLH22+hQb06l6MY085iw6fAIKOTiEdxcGCr0UIGM=)
                          2: wS-jaaEMUTGS5DqxQuN95qXPBc8.roa (hash: 06h366lvWqKC+ftnxISHm/f+AJodcmHOYMbCi4Dh0pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:49:0b:e9:97:99:84:b3:0c:a4:d6:38:81:13:5a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
        Validity
            Not Before: Jul 24 04:01:28 2026 GMT
            Not After : Jul 25 04:01:28 2026 GMT
        Subject: CN=c769b0432c8e9f3d025d190dd511735cd0d6a6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:89:c6:6a:b8:cb:2d:72:04:97:41:3b:ec:
                    4c:d7:25:c2:ba:14:fb:dd:7e:ed:0f:52:b6:7f:0a:
                    ba:f9:df:cc:1f:9d:82:46:54:cf:a7:93:3f:dc:f3:
                    ab:5c:c9:0b:9f:15:4b:aa:bd:83:cc:e1:52:fd:f9:
                    e0:3f:34:44:86:f7:3b:cb:ad:c6:98:a0:da:ea:e1:
                    84:4d:a5:6b:9e:52:fa:a2:ba:4a:64:0f:cf:fa:c1:
                    d1:de:de:f6:6c:cc:db:9c:98:50:af:af:90:fc:ce:
                    de:60:1d:8c:6d:d4:42:02:1f:f2:3f:05:8b:5d:fe:
                    28:25:56:4d:51:2e:b8:e8:ee:9b:03:bc:37:70:fe:
                    38:f5:83:1f:57:c8:22:c7:7a:39:17:4c:2f:64:69:
                    a5:02:76:a9:ab:94:cd:64:db:e4:ef:07:9e:5e:f3:
                    a1:df:51:37:51:a4:8c:89:63:09:c6:c8:49:7a:f5:
                    11:02:b6:f6:a2:12:a9:0d:d2:80:b6:a0:a3:dd:e6:
                    b5:4b:45:65:e3:e2:a9:74:89:9a:76:88:62:7f:a6:
                    2d:93:0a:81:9b:98:88:15:6d:54:66:d7:cb:fe:e1:
                    6a:28:41:dd:59:0e:a5:1b:ee:a6:05:ac:35:86:e5:
                    ff:49:be:00:96:37:87:e0:49:c3:2c:b3:7c:d0:04:
                    76:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:69:B0:43:2C:8E:9F:3D:02:5D:19:0D:D5:11:73:5C:D0:D6:A6:E1
            X509v3 Authority Key Identifier:
                keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:ac:6b:5f:a7:25:f8:cc:77:05:c3:8b:c9:8d:1e:46:4e:77:
         b9:92:59:fc:55:35:e9:4c:48:36:4c:c5:b6:ad:a6:99:57:53:
         4a:cd:14:f9:23:25:87:a4:07:c5:d9:77:22:67:98:f2:81:9b:
         d8:5f:25:1d:ab:6c:38:a9:09:84:a7:64:87:45:a6:a3:4b:9e:
         55:25:08:80:b2:a7:35:15:a2:a4:1a:21:61:4f:57:6a:72:29:
         c4:8e:59:f9:c8:25:36:7a:d4:99:21:5c:dc:10:6f:c6:1c:f9:
         a4:4a:6c:a2:29:d1:89:22:3a:7d:41:27:82:62:b9:f5:de:19:
         68:a7:36:d9:c1:07:db:f8:bb:1f:64:dd:5f:71:87:38:94:a7:
         d9:90:5e:16:70:f9:e0:b1:b3:32:4c:74:b0:02:01:b2:a4:c0:
         4b:b1:b9:74:47:37:d7:42:9f:f4:d3:7d:29:48:69:17:3c:16:
         80:44:c5:85:77:a7:07:c1:7b:c1:1c:50:f5:71:0e:d3:75:f0:
         1e:a3:20:35:71:19:08:2e:06:e9:ae:7f:f8:f3:18:59:02:2f:
         7b:00:f0:29:fc:37:ff:5c:bb:a6:7f:5d:51:f8:1d:9f:e0:9f:
         d9:a8:f2:57:31:b0:bc:5c:43:5a:bd:b4:64:66:e2:a9:93:bb:
         5c:00:a4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:18 2026 by rpki-client