Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
File:                     qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft (raw, json)
Hash identifier:          iulGsiCiA9xXuC3EKMMJ0Q9fjqSUF47Je+txLQ0dB4U=
Subject key identifier:   74:FF:E6:1E:2E:E9:6F:E9:6A:04:DE:5C:43:47:6F:D7:8F:CB:8C:FF
Authority key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
Certificate issuer:       /CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Certificate serial:       01A0D917597E32072152084F85A0DA072873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
Manifest number:          1A70
Signing time:             Fri 25 Sep 2026 15:03:01 +0000
Manifest this update:     Fri 25 Sep 2026 15:03:01 +0000
Manifest next update:     Sat 26 Sep 2026 15:03:01 +0000
Files and hashes:         1: agl7At-sGTLsDTh6fIsNcYqjRVI.roa (hash: kdWoOhR4/BvlVOKr5PU254MlzFegaJ4FGVoYgfo0kq0=)
                          2: qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl (hash: ibYqXjZglIzrkjN1TnGalH8dorU1Mr39N2Pvk2OMhSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:17:59:7e:32:07:21:52:08:4f:85:a0:da:07:28:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
        Validity
            Not Before: Sep 25 15:03:01 2026 GMT
            Not After : Sep 26 15:03:01 2026 GMT
        Subject: CN=74ffe61e2ee96fe96a04de5c43476fd78fcb8cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:97:e8:3d:72:20:8c:bb:14:79:c1:fe:46:
                    84:27:27:90:ba:74:94:a2:36:37:79:9c:fe:d3:8d:
                    94:ba:4a:0e:86:f0:0e:dc:b9:11:70:35:e0:95:f7:
                    f6:26:7d:52:ba:32:89:4d:18:dd:90:d7:c7:c6:9d:
                    76:e5:50:ec:34:ce:51:4f:33:23:f0:ed:b7:e0:83:
                    ec:49:38:d0:71:3d:be:c3:30:c2:b6:2c:54:49:41:
                    ff:8d:34:5d:42:2b:c1:92:fa:02:23:52:4c:31:4e:
                    d6:c7:6d:3d:e1:4b:84:02:6d:52:79:d4:3d:91:98:
                    ab:af:f4:0b:b6:bb:2b:26:bf:ac:d7:41:65:c1:10:
                    7f:f3:b2:5d:34:9d:2b:9d:07:dc:0c:f7:cb:6c:86:
                    52:36:e0:40:97:eb:35:e4:ea:f9:91:8c:b3:4f:13:
                    55:52:fa:64:5d:cb:7d:75:4c:49:1f:8c:50:83:2f:
                    78:32:bc:10:10:cc:72:8d:64:66:f2:68:54:bd:c6:
                    30:f0:49:38:2c:86:d3:50:2a:5c:e2:95:cd:f6:22:
                    34:03:ed:02:47:16:f7:45:54:a2:4f:af:0b:74:02:
                    77:f6:b2:4a:f4:76:06:17:80:86:86:01:9a:01:2a:
                    45:c1:ce:ad:f1:de:bb:7a:02:17:45:d7:4a:4a:aa:
                    ad:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FF:E6:1E:2E:E9:6F:E9:6A:04:DE:5C:43:47:6F:D7:8F:CB:8C:FF
            X509v3 Authority Key Identifier:
                keyid:AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f7:98:95:ff:66:a7:83:ee:1e:ed:b2:ef:4c:b8:d9:d7:59:
         86:d4:ad:aa:49:aa:c2:65:db:b5:dc:a4:69:8d:4f:86:af:73:
         58:79:4e:f1:54:c2:64:92:65:5e:d1:de:3c:3d:0c:0e:96:85:
         df:79:39:3f:2e:61:52:b6:00:62:78:b0:83:2b:30:a9:1c:c8:
         9a:25:88:7e:ab:a4:fd:90:f3:4c:5f:c3:9a:e7:76:74:f9:e4:
         e9:cd:15:be:8c:10:5f:19:b7:0f:7c:f0:49:f3:07:fd:0f:ef:
         6a:11:b8:40:94:bf:35:c8:96:50:5b:b5:61:7d:09:50:2f:f7:
         c6:0c:78:23:d8:33:13:95:36:89:7f:82:79:51:73:89:b3:32:
         cb:0d:13:66:e2:83:2c:b0:14:f1:b1:63:16:53:e1:c6:ed:1d:
         89:76:0f:a8:a7:c7:15:3e:35:ea:a3:26:9f:0e:e6:b9:ee:7d:
         2d:47:cb:49:77:28:12:d4:89:e6:38:9d:e2:08:89:0b:23:1d:
         08:20:6e:ca:fb:d9:b6:e5:95:36:ff:37:52:f1:23:1f:47:2d:
         69:5d:61:58:ce:5c:27:f1:b1:51:2c:89:f1:65:90:d4:01:39:
         c7:e9:06:eb:49:2b:4c:89:9e:6c:df:1d:0b:33:18:a6:46:f4:
         87:7b:a1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:58:57 2026 by rpki-client