Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File:                     QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier:          EiRXG9IE+vgaiU+NaJDPbGMTx81Y47L79oVXgS/0TvM=
Subject key identifier:   35:5C:F9:2A:1F:BF:55:AB:18:84:D1:95:6B:2B:7B:F5:A7:3A:DF:94
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer:       /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial:       019EB921C6FC9EB9A5DD04E45AF38768A499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number:          196F
Signing time:             Fri 12 Jun 2026 00:00:58 +0000
Manifest this update:     Fri 12 Jun 2026 00:00:58 +0000
Manifest next update:     Sat 13 Jun 2026 00:00:58 +0000
Files and hashes:         1: 4lIp8ea3WQFBN3Pqrh3ubx-xLGE.roa (hash: MzcrykLHz17bn51pu2cLDUXzNCETQeDxNQFftxunStY=)
                          2: EXM8zv4hDMV5vpuDDhitBb0YsJk.roa (hash: dWnBV6uZ6yoWCEmneHJfdW94pJqTaIBLN9AwRXQDpQY=)
                          3: IBNLwjGhOGElhFamPSCMLTlr5tI.roa (hash: oNzjprVPt2/BmbiYZeDtNNSvn4x6T1bNCGmR/DW5l7s=)
                          4: KjPW_UmYIXSdNHqdseZl-NM7DDA.roa (hash: m7WeXlGnoRBcKg0EX7B3sn9WI45zdfZvUjQohB/JWSo=)
                          5: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: uGhI1V8VwOq5hualr1biQm16yQzNwSeDtSIklJ5fz3E=)
                          6: RgoVuEZzrB6iPeoDkS2VZ5UJEjM.roa (hash: 7eIfiRclCfgNOCGCCRoqijzNwFTi6X6q7V5T2mrxMRU=)
                          7: bOwoeGXB2wja2W0aIO7cJEqFn0c.roa (hash: TjrVmHhe6qTnTA+IeFLgJO+nqktu8K34RwVXqHJjTPE=)
                          8: gNAyrBVoFaWeREXzr33gHPdjLuc.roa (hash: 9t3cAZDPUcX15JFGLDAbTwFu6aPFTfX5yposYhTNwLc=)
                          9: kuKa_RbKBF-8apG5eNAA7ZGrk64.roa (hash: 8GXXom7MNoYYjacR6QL5aPwdId669M5Mrd0b2uKdYxk=)
                          10: r4gojXpCfVfMsKXfq3IcqeiE878.roa (hash: T3XdnQciJ8C4NOqpLw2BOhgbQDlMQMjf7FhYEgWICW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:c6:fc:9e:b9:a5:dd:04:e4:5a:f3:87:68:a4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
        Validity
            Not Before: Jun 12 00:00:58 2026 GMT
            Not After : Jun 13 00:00:58 2026 GMT
        Subject: CN=355cf92a1fbf55ab1884d1956b2b7bf5a73adf94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:6c:17:13:07:57:18:5f:c0:a7:f9:cc:12:
                    47:57:e8:57:aa:d9:b0:4c:56:ad:f1:b1:39:5d:cf:
                    e0:e7:c1:2b:6b:cf:29:10:c5:0f:ff:6f:3e:0c:68:
                    1b:39:30:42:3d:cc:40:9c:1d:53:c1:14:e8:56:94:
                    4a:3a:99:d5:cc:91:92:78:99:02:b8:7f:36:04:ce:
                    cd:f7:aa:e6:d1:68:e3:68:4a:b1:da:33:38:5e:b1:
                    c0:5e:03:1c:34:39:c2:5f:c1:1d:ac:d0:8d:1f:95:
                    69:40:b3:15:86:10:34:cd:e9:f6:1e:8d:4d:d9:8f:
                    ac:38:b6:3b:bd:34:03:54:c2:c0:56:54:eb:08:6e:
                    06:28:20:a8:d1:40:31:b7:4d:9b:ec:b0:50:20:79:
                    8d:1b:4c:aa:43:cf:50:de:47:d3:42:f1:dc:68:b6:
                    b3:ae:ac:90:1a:77:a0:6e:1e:5a:71:4e:27:0a:cd:
                    c1:d7:ba:93:99:6c:6c:22:6e:94:33:a2:16:0e:21:
                    13:90:e0:1c:da:a5:60:0c:9a:00:e3:e9:d2:d0:a8:
                    af:d5:39:d5:85:1f:cd:ea:68:e1:42:55:7f:b2:20:
                    10:60:52:4c:98:b0:95:dc:8c:6a:19:65:64:51:44:
                    ac:d9:36:99:00:70:f5:81:72:59:e8:18:28:ad:53:
                    0c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5C:F9:2A:1F:BF:55:AB:18:84:D1:95:6B:2B:7B:F5:A7:3A:DF:94
            X509v3 Authority Key Identifier:
                keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:75:40:71:b3:a2:da:9a:1a:91:1c:69:5b:cc:74:59:f7:24:
         dc:b6:d6:25:17:37:ba:f7:19:bd:52:df:36:e8:b1:f3:71:3c:
         0d:f3:56:4b:bf:93:09:7b:72:09:c3:07:58:ec:51:5d:d0:dd:
         64:2d:07:3b:4e:ec:dd:c7:ef:66:6e:3f:ad:ea:19:b4:c4:b1:
         9a:1c:4e:a6:b4:cd:00:51:ff:7e:ca:3e:d8:8f:b6:f6:6d:1a:
         15:b8:7c:c5:51:6c:76:02:69:30:a1:9a:b7:7c:f7:17:15:a6:
         01:ef:7f:d7:1e:13:b6:5d:e6:ec:ca:99:38:49:c8:8f:0c:d6:
         ef:d5:22:cb:07:10:29:d0:36:60:b7:29:4f:67:f9:20:82:42:
         c6:de:54:eb:14:1f:2f:3c:0c:46:c1:79:0c:b8:cf:d8:f3:1b:
         7c:cc:be:c4:d3:a2:84:f4:e4:b1:ab:d5:33:3d:62:d6:3e:29:
         27:f6:8d:ba:10:fd:d6:0f:c2:aa:8c:20:b1:ed:d1:cc:a1:bd:
         4f:21:c2:94:89:15:29:a4:d0:0a:e4:4c:31:e5:ff:7d:8f:b9:
         ee:5e:fd:1a:ba:e1:d0:ea:62:e1:62:61:15:6f:c2:4c:d9:3f:
         ab:7d:77:33:9f:0e:ce:1a:c6:d5:39:30:93:f5:87:ed:1c:68:
         be:80:d1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:51:53 2026 by rpki-client