Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File:                     q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier:          nFl7OHZTMGgdR7z6rXjVdryekJ/mYL4XvZLQK+B8Pv4=
Subject key identifier:   4E:10:B8:CB:FE:41:29:A0:61:1A:FA:42:36:07:91:11:C5:2B:D0:D1
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer:       /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial:       019FDF51587BFABBDF9F184A861231E2313A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number:          19EE
Signing time:             Sat 08 Aug 2026 03:01:17 +0000
Manifest this update:     Sat 08 Aug 2026 03:01:17 +0000
Manifest next update:     Sun 09 Aug 2026 03:01:17 +0000
Files and hashes:         1: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: n+6oSKAAnFRSUg3KJ5j38+QUiMYxmEkGvbi/fTp8Cj4=)
                          2: qpSRJ_3_1WtSbh1z8fA2N1vKkZQ.roa (hash: MLSjRFPRdEgcgE43dNf/0WIvyN16FCjyMVK68EqxfpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Aug 2026 22:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:df:51:58:7b:fa:bb:df:9f:18:4a:86:12:31:e2:31:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
        Validity
            Not Before: Aug  8 03:01:17 2026 GMT
            Not After : Aug  9 03:01:17 2026 GMT
        Subject: CN=4e10b8cbfe4129a0611afa4236079111c52bd0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:04:9f:b3:b7:69:34:49:22:ae:af:af:15:
                    dd:1a:d1:b2:da:34:3e:5d:c5:d9:49:ae:06:89:7f:
                    57:05:e0:7b:de:1b:63:94:88:e8:ee:e4:d0:92:4f:
                    a3:bd:3b:89:70:3f:ac:a2:fc:96:ab:23:71:49:98:
                    3e:cf:5c:a5:03:da:f3:55:65:52:28:b3:c7:e8:08:
                    94:8d:41:75:46:65:3b:0e:5c:b8:78:68:9c:b7:8f:
                    ea:b9:93:5a:69:62:27:80:7c:8c:bf:63:09:b8:3b:
                    1c:ca:51:08:cc:ad:1c:97:87:f4:c2:3c:60:36:13:
                    68:68:18:c2:5f:b2:74:88:4b:7c:a8:1c:e7:15:1c:
                    ed:dd:97:d0:0c:c9:35:92:e1:e2:b1:28:0a:78:36:
                    44:c4:17:58:df:24:54:6e:89:55:4d:36:06:35:a8:
                    11:4b:eb:2b:24:7d:93:18:82:87:b5:df:a0:4c:47:
                    5b:8b:67:82:9d:0d:f8:ac:9e:9f:b7:ad:3c:4c:f1:
                    0c:fd:a2:b6:95:3b:e0:31:20:94:6f:ac:63:dc:c3:
                    34:1f:5f:f3:db:84:e5:55:f0:4c:f9:77:de:22:61:
                    ee:6e:85:46:ad:02:3a:18:a0:90:d6:fd:53:1f:7e:
                    b4:88:2a:e3:42:d2:d2:0d:8d:72:76:70:80:8e:04:
                    d3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:10:B8:CB:FE:41:29:A0:61:1A:FA:42:36:07:91:11:C5:2B:D0:D1
            X509v3 Authority Key Identifier:
                keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:9e:fb:ed:89:15:e5:99:9b:b1:fd:26:3c:6f:74:0e:48:89:
         89:65:5d:1e:70:fd:f3:09:59:6e:a6:c7:ac:fb:e6:50:3c:88:
         ff:59:ca:61:f2:08:09:6e:b2:19:d7:b2:26:51:94:2a:dd:b2:
         74:67:44:35:a5:12:2c:96:49:06:24:54:5d:d4:b7:f5:98:b0:
         47:c2:20:e6:20:31:6b:6b:f1:db:ee:b9:c2:fe:ee:cf:97:f1:
         3b:fc:13:8d:99:16:60:b9:0f:cf:6b:55:ec:d1:8b:73:cc:d9:
         b7:f3:6a:77:40:06:69:a8:87:eb:de:8e:f4:26:4c:48:58:c4:
         a4:c5:17:92:14:23:bb:4b:f5:f4:eb:00:09:f0:75:a4:88:b8:
         fe:c8:6a:83:a7:5c:03:ce:37:4d:d5:64:ea:90:35:1e:fb:7e:
         93:69:3a:c2:68:22:65:de:a4:67:39:2d:b7:d6:1c:bc:f2:f8:
         f1:20:9d:c1:7f:d5:fa:8c:35:97:bd:cd:4a:00:b4:cf:bf:51:
         af:d5:d1:a3:36:23:93:83:b4:42:26:27:b1:dd:6b:79:e0:8f:
         5b:8d:cf:d6:d1:0b:c3:41:ed:80:7b:6a:b9:6a:52:8d:38:bb:
         8a:46:6b:e9:2b:50:a3:51:1f:fe:c2:b4:37:49:3b:ca:93:8d:
         ee:f8:5d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 06:00:40 2026 by rpki-client