Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
File:                     5qr3mKBsFXlcb-xweYOYvrD01m4.mft (raw, json)
Hash identifier:          E03Ke2NDennJklDNJNSiTqpyg1YdU43R84hmkroJ5bE=
Subject key identifier:   61:73:24:EF:78:12:FD:6D:34:7C:48:04:BA:4B:39:B7:90:7B:AB:B5
Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
Certificate issuer:       /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Certificate serial:       01A0D501BD6FFE8921C589DFB75A71F91777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
Manifest number:          0857
Signing time:             Thu 24 Sep 2026 20:00:56 +0000
Manifest this update:     Thu 24 Sep 2026 20:00:56 +0000
Manifest next update:     Fri 25 Sep 2026 20:00:56 +0000
Files and hashes:         1: 5qr3mKBsFXlcb-xweYOYvrD01m4.crl (hash: Tb3wIBOqtvQU+P4+eEHwVE1SdrYCmJvoH5S6/EJEOd4=)
                          2: UKBweaqhrh1zuvqXS-71Vo4JffI.asa (hash: 7tMXOEFGnqTeI5De8GDOWfignh7b2YflpskEzceDR2Q=)
                          3: febei7ElndSA55KLJAxPmYsaSA8.roa (hash: 3rk22KTNdwadb2vDfYhZFH+AJY/gYjCaDrWeCZ+y2x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:01:bd:6f:fe:89:21:c5:89:df:b7:5a:71:f9:17:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
        Validity
            Not Before: Sep 24 20:00:56 2026 GMT
            Not After : Sep 25 20:00:56 2026 GMT
        Subject: CN=617324ef7812fd6d347c4804ba4b39b7907babb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:92:91:54:15:3e:b3:5d:66:1f:74:b9:e2:
                    df:cc:08:52:78:7f:1b:77:74:b0:ac:75:95:22:3d:
                    83:84:fc:fa:df:8d:c4:68:7f:7b:51:18:a1:ea:00:
                    7d:fc:fb:fc:b7:b2:02:a3:0f:4d:76:7c:fd:68:12:
                    3b:75:03:e2:42:fe:dc:26:01:1b:b8:44:a3:5f:ea:
                    09:a1:1e:fc:f6:bc:f4:68:2a:8a:fd:60:62:4f:29:
                    de:78:7a:1f:a7:5c:54:ad:02:9b:2f:71:89:2c:1d:
                    04:bc:a6:34:c0:ee:4b:02:b8:47:70:39:61:a2:16:
                    52:54:dd:12:2a:20:f3:e1:c9:88:ec:2d:cd:ce:57:
                    82:60:03:ce:a4:97:3d:d3:8c:98:0c:a1:93:dd:ff:
                    e5:2b:54:b8:30:10:a4:a8:c5:3a:90:5a:6d:30:33:
                    7d:36:c1:be:58:0d:e1:07:cb:5b:37:43:47:6e:f9:
                    ca:00:5d:58:cf:c4:cc:73:3f:68:aa:bc:f6:af:c1:
                    ac:a7:38:65:c0:a7:06:41:73:6d:b1:ea:78:71:45:
                    bb:69:c5:5a:7d:5a:c0:91:8d:d3:2f:e2:d4:ee:0d:
                    cd:fc:ea:66:c3:b3:68:8f:06:c0:93:1a:10:da:11:
                    73:a6:3a:a6:15:8d:d1:67:91:ac:e0:bb:96:d6:0e:
                    f7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:73:24:EF:78:12:FD:6D:34:7C:48:04:BA:4B:39:B7:90:7B:AB:B5
            X509v3 Authority Key Identifier:
                keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b5:31:67:ee:8b:36:d4:e0:57:34:80:71:90:bc:e2:9e:31:
         59:93:f7:a4:24:d1:02:a5:fb:90:bd:ac:14:0e:92:95:14:c3:
         6b:50:dd:bd:2c:cb:35:e3:f5:69:7f:26:0e:2a:2a:ca:1d:68:
         cd:59:4a:fa:c6:ce:84:87:72:64:75:5b:29:c5:9b:b5:f6:e6:
         36:f1:c9:f2:eb:29:db:40:33:ea:8d:0e:73:98:c7:de:04:7a:
         15:7c:d6:db:9a:7b:99:72:40:0d:a9:8d:65:bb:36:c2:bf:00:
         b1:17:12:64:0c:9f:35:8d:6d:8d:f2:98:7a:b9:62:ec:52:b6:
         b9:cf:bb:16:26:e2:89:28:2b:fc:00:71:25:a4:87:88:c5:61:
         be:55:f4:fc:0e:77:5d:59:27:53:0e:d2:3a:82:ee:4c:33:7c:
         9b:69:63:05:69:2d:4a:25:58:aa:f9:81:98:01:6b:6b:cd:a3:
         8d:cb:74:a8:96:bf:fb:46:12:3c:97:73:f0:da:e3:83:ca:eb:
         90:6b:02:fb:0e:bb:2e:11:d9:8c:38:fa:7b:ed:6c:dc:e3:c2:
         8e:d9:e1:58:3e:f7:2b:88:76:30:6f:ab:14:cd:d2:de:38:d8:
         dc:ac:4a:21:52:9e:2c:b8:d8:19:ea:ef:37:51:15:41:23:2f:
         e4:c5:0b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:32:06 2026 by rpki-client