Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
File:                     qxyACqG3ihekPhn9mTg1XQQR6Uo.mft (raw, json)
Hash identifier:          dbSDaXCUG+P490RXkxixYWtcKBXYwQDykCdjvGhBKZ4=
Subject key identifier:   F8:13:EE:21:9C:4D:C5:22:F1:3D:20:36:22:ED:7B:45:D5:D4:8F:9A
Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
Certificate issuer:       /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Certificate serial:       01A0F18B5D12CE96ABA7B2E3522CFFCD3C3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
Manifest number:          1138
Signing time:             Wed 30 Sep 2026 09:00:37 +0000
Manifest this update:     Wed 30 Sep 2026 09:00:37 +0000
Manifest next update:     Thu 01 Oct 2026 09:00:37 +0000
Files and hashes:         1: Nl-NwJXgg_mKvSjTnftPWLYBToY.roa (hash: UM5uAdr1m30XVEMiULWnarxQCPhDPuMKS+lBMXBG4Ls=)
                          2: Rohs0EQIAoIUkwGS6XtjnDouO8g.roa (hash: EcZk5ZFiNKSus0TYnUyIuUuGvRBAlAnVxdbmm6ttv7A=)
                          3: ihu7RSF9d_o474O74_XHNiBLq8Y.roa (hash: zWFbywvFotfCwUcEIQ2DvsebZNFghPy/L/dQzBScQnk=)
                          4: qxyACqG3ihekPhn9mTg1XQQR6Uo.crl (hash: BO51GxzHIGKCh6l53p97sKsfyRhvmdzaTV1t1Rte770=)
                          5: yRGQyOdHAyUvnCTeM-zwgIKX4Qw.roa (hash: bp0xhjE5IUPvG68ZkNNK1uC8wEizknIYbPwTcDbU+cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:8b:5d:12:ce:96:ab:a7:b2:e3:52:2c:ff:cd:3c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
        Validity
            Not Before: Sep 30 09:00:37 2026 GMT
            Not After : Oct  1 09:00:37 2026 GMT
        Subject: CN=f813ee219c4dc522f13d203622ed7b45d5d48f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f6:19:92:a0:6b:4a:c3:57:be:71:70:2a:bd:
                    72:ae:1f:84:94:15:ec:82:6d:a1:78:01:88:41:19:
                    59:86:63:2f:86:95:a1:eb:f0:33:bd:b6:b3:50:16:
                    56:89:18:a3:83:ac:8e:41:c9:0f:86:31:de:8f:d9:
                    9d:5a:ae:cd:76:33:26:93:9e:9f:74:15:38:c7:4a:
                    d1:f3:f6:fc:06:3c:a3:e4:fe:19:e6:d8:40:2a:fa:
                    86:76:4c:c2:92:22:29:4a:04:43:76:49:27:39:5c:
                    4b:04:42:10:1c:7b:fb:d5:95:dd:f6:81:ee:1d:1c:
                    54:74:9e:28:a4:e7:9a:f3:7e:98:fe:22:d4:80:2e:
                    04:71:ea:6e:d2:97:c2:9b:21:59:08:ad:41:c5:70:
                    00:0e:08:06:b5:43:24:0c:4a:f6:fa:18:6d:21:36:
                    a2:8b:63:ae:58:b2:3c:b7:76:88:f5:df:a6:05:18:
                    d6:fb:fd:29:57:ec:12:30:85:ee:2d:a5:76:12:54:
                    1e:fd:f8:14:39:65:e2:e2:2e:1f:60:3b:8c:c8:48:
                    01:26:d0:bb:b8:c4:0f:14:e0:fb:7e:83:d9:84:9e:
                    5d:a9:33:71:ea:16:da:3a:92:b4:09:31:c9:d5:53:
                    77:03:c9:7d:83:b6:67:47:8d:04:1d:2a:d3:9e:b3:
                    e3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:13:EE:21:9C:4D:C5:22:F1:3D:20:36:22:ED:7B:45:D5:D4:8F:9A
            X509v3 Authority Key Identifier:
                keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:3b:48:38:f5:ad:7c:71:49:61:ec:6e:62:0e:c7:ea:3a:4e:
         40:88:86:c6:c2:4f:dd:72:fa:51:77:7c:2e:5c:e3:a5:dc:ca:
         39:cd:ea:b5:a9:43:93:e6:20:f0:90:6b:b4:c5:43:8b:8a:f9:
         8e:ce:be:1f:4f:33:d4:de:42:81:b1:44:2a:62:d7:6d:20:86:
         ba:c7:41:4e:13:46:05:d7:ed:3c:5e:25:a8:f3:3c:3e:cc:90:
         89:69:b3:d5:14:40:f7:3f:71:99:c0:9d:0d:a0:f8:82:87:09:
         4a:20:f4:a0:c3:cd:0d:a2:37:f0:a0:93:f0:e6:0a:4e:4b:05:
         08:d5:84:1d:01:95:93:67:3b:a7:6b:9e:4c:da:4e:0d:9d:06:
         89:a5:74:72:eb:93:39:2d:6e:d9:dc:dc:24:af:e4:0d:90:85:
         50:d8:57:9b:8c:aa:67:a2:47:b5:e0:3a:26:59:66:b2:cf:ff:
         c3:fd:8b:13:d7:f6:0b:8f:96:ae:31:88:c6:57:1b:cf:d7:4c:
         79:6d:d7:75:2e:58:a3:eb:7b:8f:e4:40:5c:10:c0:21:6b:12:
         16:77:8f:67:6e:2a:99:22:3c:f2:ae:42:6f:d7:94:ff:3d:37:
         d8:54:25:5d:b7:eb:6e:68:79:79:66:9d:23:f9:28:11:73:6c:
         9f:fc:bf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:44:56 2026 by rpki-client