Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File:                     1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier:          gf35gycOOjjQy4J9FjmpwVDGdwZLtP8i+SH7uVboDj4=
Subject key identifier:   4C:31:50:2F:6D:89:0D:CB:89:04:E1:97:65:B8:86:14:90:DF:27:8D
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer:       /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial:       01A0D124A83796E329DA0707445B2DA5D557
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number:          09F7
Signing time:             Thu 24 Sep 2026 02:00:35 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:35 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:35 +0000
Files and hashes:         1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: yJbOlr9oZtI16uQ9iWa0WmNzKcXAtk3B1qUn7BbWLVg=)
                          2: 2uMy4M-82lScLvQO4h9JL6UgHrs.roa (hash: 1SK2Ox5GjfDCB9YjDm9AoIxnblV4VhFX1E6RFNXREuQ=)
                          3: 3qtJ5-IAYiPz0ALRM8n3NnbHNzw.roa (hash: +Vp1sp9zpnfs0QYd9altN13iaJXvmmbhdGnJwAEXrGY=)
                          4: 4QcJq7ej04BNda2HH9wArEkGIPs.roa (hash: UEQyy5CHXIQ8APmLlgy4w9Fknovd069hve+UPdT6u6U=)
                          5: 6SFaYFVTh_QMG8KeNR7K0vj-EJI.roa (hash: rrIArf/6b7SEIfjeCxcXUJ/HbNWPqXK+6T7Q8x8Keng=)
                          6: 9CUmT2lC-8kgnH1Pk1z5ggj9yYs.roa (hash: 2GFT3mSlK6Rmyp7D2HqdnfLGQtrA2O32IuamvEgn7Xs=)
                          7: BNFOMhR6hv1XuGHNrVMQM_JLnfA.roa (hash: 3OvYrZCCVuNvoUSnWJT9b9bxtgVNtSEoWfbO8tJ8ZDE=)
                          8: CgToz2b9vJXkfbV9wQD9McV1WUM.roa (hash: COqNxl0mp97hllEQKIgzooEhO3/ohE560HqYc+lA0+w=)
                          9: Dg6-7OIm8vlGjBApMECeqWUjQD0.roa (hash: XL6k5VLIb0mGqKu2jEbLqy1HfJEl/tavDJoVTxIQkW4=)
                          10: E_H7Paebs9UWjQyhOTE9PIN76tc.roa (hash: GaYoQTMi5zaMEXM0a3RCUI0zGFHSOAHoYBq1mnn0UNQ=)
                          11: IXAixtOPEsv7gt6BD6ensRZLEqw.roa (hash: 70EEAsdGTRKYckIJYi/F9RnlHwc1q+lU5rzi1Fys+zI=)
                          12: N9QQxg_R8io7DnlRj5HdQ23wfCk.roa (hash: T2NtuDZ7QgrXiMR/U8rf5cq5e47s3QzvGZo+eumc0Zc=)
                          13: NkBC_seP8uT6XXb_uD6ZXGc0YO8.roa (hash: U3ZBRW46vAETRPkcX5+9wqgxICZLtb+QqrCvfSsQek0=)
                          14: PgCWANz5uY2I9lsHzhkPjqX39Kk.roa (hash: Wo051Tf/z54mBPHwIYi56RQup23Z7a/uY7Wew2Lpno0=)
                          15: SZtukkjRXiwa2MP-xz2orv9e2EQ.roa (hash: SI1p9E5oAtOUP1K3tQ3v2d/3208FkwLNQ2JaBJZUxeU=)
                          16: XT24RL-I_Rj1tbACkgSxbluUjfk.roa (hash: J/9xfP0r32zX6yNiwoeZYz1WsyDhnkZEoFgf2QsjqUc=)
                          17: _N2nrplLVj988L3B9p-Xsk-Uc88.roa (hash: 7ocXDIY20rX1cn+l5zbELRN0K10bZK6Thqwp+te1Rkg=)
                          18: hchG7caJpD9W6F09IoEq2bxHBQQ.roa (hash: LWlZZ0rsDYxu7JbvD8MMa5SqnKcInLBcft31rsAtLnQ=)
                          19: lW9UCsG45tltS34IVuMEF5LF0WE.roa (hash: Fi19lc5a6ixrrZgw07Ifrk8a8hv4r0cIBwyEqxqG64I=)
                          20: mcFCwYwGHvV8_Dgby0Fqss-cGB4.roa (hash: GIeC9Y9trbiu+ClPgrrFlywdl17ZKoTgx1G0hLexXxc=)
                          21: r4xyNLWWmznvN8-2HQAUUtH8WD4.roa (hash: Yx0ueyL/bhm8eOCB3RdfcV15kiUt20hwbcXP4E9Y1js=)
                          22: vS7BVCvAnG0KF2NZJWhPCSw4Y9E.roa (hash: s2wURE5y1RzBDniFm1yyiSF2pZakk/teNC0g3kN9ZgA=)
                          23: vU8wGLsdl9hwG15OClvZT-lRw7k.roa (hash: IfJeWmbzTCTanQtLx6Swi85NrJu3wA9YDW9bngNXjE8=)
                          24: xAPk2wU0UXF9NZICJMvGDDyGQ6I.roa (hash: TA3H+2LadaNXfkohOx3ju1GF9mCySPxfGyrBLptIYSI=)
                          25: xgUIIZBXlyU4UoekW4OdzZHEuio.roa (hash: zTLHmgqXF5kL/C2aqtWKn3BqJ60YyLhv52sGpDT4SS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:a8:37:96:e3:29:da:07:07:44:5b:2d:a5:d5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
        Validity
            Not Before: Sep 24 02:00:35 2026 GMT
            Not After : Sep 25 02:00:35 2026 GMT
        Subject: CN=4c31502f6d890dcb8904e19765b8861490df278d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:20:57:3e:b8:24:8b:f9:68:8f:01:e8:bb:30:
                    3c:4d:98:5f:2c:ae:64:4a:3f:21:20:65:0f:a9:81:
                    d5:54:f6:40:03:c7:9d:01:0e:fc:c3:96:08:7f:83:
                    b3:ad:e1:d9:82:5b:5f:ae:d9:e8:4b:1c:f1:00:3f:
                    86:30:09:48:b9:09:73:b2:8b:88:63:6d:78:ae:69:
                    23:ab:db:4d:5b:e6:c5:65:e2:72:aa:f0:0f:25:26:
                    84:16:cc:17:a1:82:9d:ae:f7:e9:af:c4:88:c3:d6:
                    f3:a1:c0:88:ea:e9:3a:44:c3:8a:f9:d0:d2:1c:4a:
                    1e:c6:d8:bd:71:3f:f2:46:6c:e1:10:7f:b1:44:f7:
                    4d:a7:5f:9e:0d:8a:ee:8c:92:4d:b8:fd:20:5c:be:
                    cf:ac:73:77:28:16:d5:21:83:db:2c:e2:67:15:46:
                    1e:2a:3c:14:ee:2d:7a:51:7f:46:3a:9a:c0:e9:62:
                    22:f0:97:aa:c3:d7:b7:c2:75:6d:34:82:e2:67:18:
                    33:6c:b1:41:db:88:91:27:08:4f:81:f6:e8:6f:12:
                    8c:1a:71:f8:56:ff:77:ae:f6:86:4c:75:9f:03:bf:
                    d6:75:7a:b1:3d:ad:ed:d1:6d:0b:cf:6f:7f:23:49:
                    53:74:20:85:bf:ff:69:b5:9d:84:0b:05:a5:56:d9:
                    20:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:31:50:2F:6D:89:0D:CB:89:04:E1:97:65:B8:86:14:90:DF:27:8D
            X509v3 Authority Key Identifier:
                keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:cd:64:02:80:1c:9e:e3:9b:18:a9:e9:68:fb:18:84:a7:e6:
         6a:63:2f:4c:44:ee:a0:9b:bd:87:1f:7b:1a:37:da:86:0f:f5:
         3a:d1:6e:03:30:51:fb:d9:9f:27:65:27:5a:33:9c:48:57:60:
         73:d4:3d:7d:96:78:74:33:4c:3d:ae:8a:18:b1:b3:7e:81:f4:
         95:b1:96:2d:85:ba:c2:32:42:45:31:28:86:29:e4:6c:0f:0f:
         33:4f:bf:08:49:0d:1b:51:b9:64:88:11:3c:11:68:cb:68:c1:
         77:4e:1b:56:66:d7:c7:dd:ed:51:12:22:7b:c5:88:6b:bd:50:
         32:18:03:1b:b1:3f:da:34:70:f0:0e:4c:37:9a:28:d5:c9:ce:
         8f:73:87:2b:e8:35:4a:32:07:9c:b2:ae:ad:02:55:d9:4a:e0:
         b3:ef:f5:89:fe:4b:f1:44:61:a8:77:93:fd:70:c9:5b:8f:a1:
         27:db:9c:57:46:c5:57:79:4e:32:ea:1e:d0:3e:47:20:2c:de:
         0d:d7:21:10:6f:06:1a:b0:b5:db:e9:8e:c1:0a:0b:53:cd:ec:
         84:4d:43:ca:34:bd:c4:e5:9b:56:f1:57:45:d1:a3:60:31:8f:
         a6:1c:2d:84:ed:86:f2:3d:d0:cc:fe:f6:20:02:47:a3:43:89:
         c9:51:ec:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:45:37 2026 by rpki-client