Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File:                     qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier:          qB3UcsHE+25TsEeeXhu4sZa3ncpktMvoonGqKW7Ux5c=
Subject key identifier:   96:82:F8:9F:EE:94:D5:CD:9E:B0:2A:6B:A1:1A:8C:4E:75:55:BD:42
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer:       /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial:       019F86B201AF7D708CE7EDB70F4E7558AC85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number:          12C5
Signing time:             Tue 21 Jul 2026 22:00:40 +0000
Manifest this update:     Tue 21 Jul 2026 22:00:40 +0000
Manifest next update:     Wed 22 Jul 2026 22:00:40 +0000
Files and hashes:         1: Io1aFz3FdR5Bh1mYcrCe9mIequ8.roa (hash: MsqgD4dNC1FiLIJAOYEnGOt34n4HFw6UdIBX7nTzrgg=)
                          2: TKU8Yc2L0FbHGl3NXxfpL1eDNnE.roa (hash: c75+0er1lGRbZ38ME3BfFzi74fQVT9//khB7uqu1zrM=)
                          3: k71EKLBF_cl_NNSjkCcESijpJkY.roa (hash: NcQun5U6vnHcxP8j+XhrdDKMSW0mSEQmABKKB6veuXY=)
                          4: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: 30CyYvIpirvcdIekKvqRnQYUGCHiFrtIF1J/Yf11vgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 22:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:b2:01:af:7d:70:8c:e7:ed:b7:0f:4e:75:58:ac:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
        Validity
            Not Before: Jul 21 22:00:40 2026 GMT
            Not After : Jul 22 22:00:40 2026 GMT
        Subject: CN=9682f89fee94d5cd9eb02a6ba11a8c4e7555bd42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:03:11:98:41:b5:31:c6:ac:08:86:00:15:54:
                    9b:8d:0c:63:fc:a4:ad:f0:78:84:c8:af:91:a5:87:
                    85:c2:00:35:a8:26:8e:c9:e0:7b:d3:74:58:ae:d3:
                    d5:e1:e5:1b:5a:8a:c7:45:aa:a8:dd:5d:f0:5d:8d:
                    7f:1b:c0:71:2a:cf:48:53:63:b0:7d:ce:b7:85:79:
                    44:e3:fa:d7:1b:bc:38:26:ab:17:32:bf:e0:2a:eb:
                    aa:c3:4b:34:3e:f6:a5:49:89:cc:1a:34:95:60:cc:
                    33:75:cf:84:e5:8c:2a:93:57:13:4a:bc:e2:da:5f:
                    ce:ea:ba:c8:52:d1:c7:bf:cc:87:67:01:d7:d9:7b:
                    28:f1:8d:8f:80:40:b4:ce:6a:16:83:dc:9f:98:ba:
                    18:2c:69:df:2e:52:90:37:c0:3d:20:11:d7:0b:fb:
                    1d:21:bd:04:f0:4a:e0:eb:06:21:80:58:9a:bd:d4:
                    9f:d0:09:a6:aa:91:25:1b:17:d4:ab:ba:29:19:9d:
                    8c:7c:19:c2:78:1c:6f:fc:a6:5b:e5:b1:96:e7:0c:
                    ea:3b:03:2d:71:5d:24:23:fc:fd:39:ac:47:81:04:
                    43:f0:9e:02:83:93:70:d3:c3:ed:a3:ac:79:c6:af:
                    d3:0c:63:92:02:5a:c7:63:56:f9:ff:28:5a:61:1c:
                    c3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:82:F8:9F:EE:94:D5:CD:9E:B0:2A:6B:A1:1A:8C:4E:75:55:BD:42
            X509v3 Authority Key Identifier:
                keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:37:54:cf:05:76:bd:13:53:22:8c:18:4e:1a:4f:53:1f:04:
         70:9f:22:d0:d4:5d:f9:8c:88:56:57:15:4b:af:3b:21:04:e0:
         fd:15:a7:b7:2e:1c:b6:0c:78:9d:34:20:fb:1b:5a:77:8c:4c:
         2a:93:14:bc:8f:57:c6:1b:2f:7a:3c:8a:58:c9:45:e1:f1:ab:
         c1:2c:f5:9e:ef:b3:59:94:11:e7:0d:25:21:b4:14:08:ee:2a:
         97:98:4d:ee:10:7e:1a:f2:08:f7:58:b3:71:55:66:e5:13:96:
         15:52:84:c1:d2:96:66:ae:90:85:43:6f:de:1f:27:33:82:97:
         78:71:0b:b8:ee:47:b4:78:c0:6f:8d:01:db:b4:a4:15:f4:01:
         66:fd:29:4d:6c:36:fb:ff:41:32:c7:9f:e7:b9:13:f8:dc:1d:
         b8:ee:d4:8f:6e:61:92:0e:b4:6f:a0:f6:fa:5e:f4:5d:04:63:
         8b:47:21:ba:a9:2a:b2:ac:91:43:cd:b4:7c:8d:48:40:9e:63:
         14:83:9d:cd:61:ec:f1:15:73:b1:3c:52:ff:7c:5b:b2:ec:99:
         c2:0f:db:37:15:56:df:0b:95:91:38:68:6c:ea:6c:45:23:75:
         33:99:25:ec:66:27:33:06:d8:29:0f:d6:df:4b:e8:35:a6:e6:
         a7:8f:36:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:03:58 2026 by rpki-client