Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
File:                     qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft (raw, json)
Hash identifier:          TX0aeD3rQ+mu33/9bMrZvJtACqIbncbfZkJlu//vzus=
Subject key identifier:   D6:3F:17:B2:21:E8:74:3E:5D:9D:08:71:19:40:BB:D0:FB:08:97:64
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Certificate issuer:       /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial:       019FA0E1257E0E36E2C529AEC5F64059318D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
Manifest number:          19DA
Signing time:             Mon 27 Jul 2026 00:02:17 +0000
Manifest this update:     Mon 27 Jul 2026 00:02:17 +0000
Manifest next update:     Tue 28 Jul 2026 00:02:17 +0000
Files and hashes:         1: AiWXq7LSht7A_MnSyp89YenB8cw.roa (hash: 45UyOYI/2cnOSoCsRxhe2ejFq6iuR/grbSDOO+lRuP8=)
                          2: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl (hash: jd2sfS126LAIDv9ouK06IRdLTueodwwwyOkVXDQrpwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e1:25:7e:0e:36:e2:c5:29:ae:c5:f6:40:59:31:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
        Validity
            Not Before: Jul 27 00:02:17 2026 GMT
            Not After : Jul 28 00:02:17 2026 GMT
        Subject: CN=d63f17b221e8743e5d9d08711940bbd0fb089764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1f:38:2e:9c:8a:28:7d:8a:e3:19:66:22:42:
                    79:1b:45:57:8b:6d:3b:5b:6f:c1:59:58:e5:e3:f0:
                    a2:a7:af:82:10:9f:40:f5:6f:13:36:af:9b:59:df:
                    e6:cd:4e:62:51:2f:f7:0b:7e:6c:19:cc:3a:18:f9:
                    e7:f9:27:ff:92:ad:28:9f:7d:61:6a:01:56:6a:b4:
                    e7:4a:cd:d3:f4:bf:27:0c:f7:0a:ed:ca:3b:67:e9:
                    bb:9c:b3:14:78:ce:c7:b4:ef:54:47:3a:75:cb:f6:
                    14:a1:1e:55:df:88:3d:62:44:5a:ef:6d:90:01:04:
                    76:96:a9:58:f8:dd:36:d2:f5:cd:00:c6:59:18:86:
                    fc:ed:fe:8a:38:45:50:5d:c7:4a:25:d2:f4:46:18:
                    89:4a:59:76:3c:bc:ee:4a:bc:8d:cc:20:68:cd:e0:
                    94:fe:04:87:89:71:72:a9:96:88:ff:70:b1:6f:35:
                    6b:63:1d:36:3e:85:6c:88:1f:23:52:33:b9:5d:6f:
                    b5:48:c9:7a:f9:e3:84:40:40:c1:10:ea:e8:53:ae:
                    c5:b6:b3:ef:90:b1:4f:cf:09:8b:79:0d:46:75:60:
                    98:10:aa:a9:67:8d:0a:5d:44:aa:1f:ac:31:95:c0:
                    9d:b8:33:b2:bc:51:1d:94:bb:50:3e:d7:02:60:33:
                    95:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3F:17:B2:21:E8:74:3E:5D:9D:08:71:19:40:BB:D0:FB:08:97:64
            X509v3 Authority Key Identifier:
                keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b6:e2:5a:02:a6:40:4e:51:09:e8:a6:b2:07:df:df:a6:fc:
         e4:d4:58:1f:c4:7c:b0:d1:6f:45:35:47:40:10:60:85:5f:4d:
         fc:25:cc:2e:fa:a8:57:67:97:41:00:4e:5b:0f:61:ea:90:e5:
         3a:09:1e:16:4e:00:72:83:e7:a6:e2:46:f5:29:f5:fe:a3:6d:
         4f:27:b0:46:95:7f:82:fb:a5:ea:d5:48:45:9b:f2:2e:f1:ac:
         00:2d:a1:58:19:3a:ce:a3:01:ad:58:2f:bc:b1:71:16:0f:65:
         f8:1e:ff:76:5f:b4:06:81:65:b0:3a:2e:81:d9:05:e0:f0:ff:
         fc:78:70:f1:52:9c:33:e3:77:86:0f:1b:b8:49:05:ba:13:b8:
         4c:49:32:ea:5e:92:de:7b:c0:6f:8a:32:93:83:1a:3d:23:1b:
         43:90:83:59:21:f8:44:63:20:92:84:bc:7a:31:3e:0a:02:fd:
         6a:ff:e4:e6:1d:ef:f7:c0:f5:8d:cb:04:14:f3:fd:fd:cd:6a:
         84:c6:5b:41:e1:32:8e:56:7b:28:09:bf:45:3e:aa:99:94:a8:
         51:df:ff:dd:cc:40:9a:b3:20:ce:69:3e:44:e0:6f:c2:45:0c:
         07:87:5f:44:ea:c9:9d:3c:b9:0f:87:f2:98:8d:29:04:b4:05:
         f8:7d:31:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:30:44 2026 by rpki-client