Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File:                     QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier:          1J8yHQoK7IbXZBxLywWqKDp/uEeWO0qj7lV7BpQw0p0=
Subject key identifier:   BB:04:8F:C5:B1:4F:2B:C5:A6:A3:2F:52:20:95:6E:EC:70:15:1D:77
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer:       /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial:       019EFD26E13B69B205A2C0AD180CE787F8C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number:          197E
Signing time:             Thu 25 Jun 2026 05:00:44 +0000
Manifest this update:     Thu 25 Jun 2026 05:00:44 +0000
Manifest next update:     Fri 26 Jun 2026 05:00:44 +0000
Files and hashes:         1: JhKTt4vHe2Da6Kx5S6KE0aGaD54.roa (hash: nw0ozHE1LZlyAK+hkXXsJOHymcfFOhmuSyMz6eBbqyE=)
                          2: O5zwSwZaq-PnYfyFgUGaYTtXVCc.roa (hash: EcphMyhwWu+HB1619MCd3HbMcseN3a1eZUs2rmX7LwY=)
                          3: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: yrc7Evnq4UctKg2QuCfN3NaPNnVbhZFySbFedW99bqw=)
                          4: mV0XT4eYWUzPfujoqVHWBgPdVhw.asa (hash: SxQBgXkzl2s7ZSzL5zFHD8gDFNbcwGk2HGZOyqJzEQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fd:26:e1:3b:69:b2:05:a2:c0:ad:18:0c:e7:87:f8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
        Validity
            Not Before: Jun 25 05:00:44 2026 GMT
            Not After : Jun 26 05:00:44 2026 GMT
        Subject: CN=bb048fc5b14f2bc5a6a32f5220956eec70151d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a1:a2:32:49:25:f5:51:8d:6f:88:3f:b1:31:
                    b8:7d:6f:f2:de:50:0d:ef:45:37:a5:da:a8:a1:22:
                    be:8a:ec:3d:0b:69:0b:99:ff:0d:c9:d6:47:33:22:
                    94:3a:ba:b4:5f:19:d2:94:47:95:30:2d:f8:06:98:
                    cd:d8:08:05:ea:86:2f:9f:15:db:a6:6b:b9:eb:09:
                    8c:b5:e5:b9:69:be:c5:18:7d:ee:14:1a:cb:0d:c5:
                    5e:7d:8c:b2:2b:18:16:31:a1:79:28:64:33:f9:62:
                    c3:5d:43:fc:ca:5c:c3:c6:75:f1:4b:40:f2:00:dc:
                    a4:8b:cb:8b:bf:00:3c:06:30:67:45:dd:4d:8a:38:
                    e7:00:16:bc:71:6a:e9:d1:db:ba:67:6e:b5:3b:0f:
                    c2:63:63:e8:a9:f1:14:81:19:02:dc:7e:d3:29:23:
                    9b:0c:ed:fa:9d:db:67:1e:e4:29:fa:1f:9b:c3:bf:
                    74:b2:13:90:09:8c:91:00:0c:4e:5f:5c:45:53:10:
                    64:03:98:d6:57:d2:c0:d4:00:49:6a:dd:a7:b0:2e:
                    41:0a:34:2e:6c:70:87:e7:00:ea:ca:57:ca:74:21:
                    ba:8f:21:8c:81:88:2e:d8:58:bb:dd:5d:da:5b:ab:
                    cc:b8:e3:0f:5d:51:91:b4:7d:54:d6:76:d4:86:44:
                    b1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:04:8F:C5:B1:4F:2B:C5:A6:A3:2F:52:20:95:6E:EC:70:15:1D:77
            X509v3 Authority Key Identifier:
                keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c3:be:d1:f1:10:9b:19:df:17:32:7c:6a:1d:d1:08:08:b6:
         8a:6c:fd:3c:47:84:50:db:ec:76:98:7d:dd:eb:a1:ed:67:f9:
         f5:b7:ad:c9:e8:09:c9:a7:de:70:0f:3e:76:88:37:e9:98:ce:
         97:30:d4:72:2a:a3:81:c0:b2:ef:d7:68:19:31:95:14:f8:18:
         28:ca:23:ec:1b:95:f5:6f:d0:f5:59:73:c1:37:78:63:f6:b3:
         ce:18:bb:09:58:d7:38:07:19:ce:54:6d:01:42:0f:7e:53:23:
         6f:29:88:f6:18:92:b1:8e:78:35:10:42:fa:b6:24:3f:a6:6a:
         7f:91:c2:c3:b5:62:47:41:42:bb:96:cc:cb:83:2f:03:da:df:
         c8:e7:4c:bf:c2:40:cd:b0:4e:e7:e4:f3:70:34:bd:32:57:67:
         e8:95:3b:88:34:a0:37:6b:c9:8b:13:05:c8:e5:55:a1:ca:e1:
         7d:07:5a:c3:2b:d5:aa:f5:c0:e4:8b:71:31:57:3b:55:41:01:
         49:7c:7b:39:66:97:65:b1:87:55:81:b2:7a:57:f0:42:18:31:
         0b:5d:a3:63:4f:aa:88:db:f0:04:0f:14:89:e2:36:b7:78:15:
         be:c3:1d:1d:9a:08:bf:e0:66:a4:cc:bd:e9:89:b6:db:29:29:
         a3:03:87:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:38:17 2026 by rpki-client