Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
File:                     q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json)
Hash identifier:          6Ns3DGJigcusVKuFyQATje5qJOi/DMyXXuvKdJgOE7I=
Subject key identifier:   BB:D2:E5:BA:4E:4D:B1:D9:F1:9A:E1:8E:D4:C6:EE:77:92:6E:03:44
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Certificate issuer:       /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial:       019FFB3635CF6D3346F63853BD0120DF1557
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
Manifest number:          19FE
Signing time:             Thu 13 Aug 2026 13:01:01 +0000
Manifest this update:     Thu 13 Aug 2026 13:01:01 +0000
Manifest next update:     Fri 14 Aug 2026 13:01:01 +0000
Files and hashes:         1: e6rt8CL4Tt23u6mnF3HX9gILLdw.roa (hash: 0VKltNMP0fVwSJth+lSOjHYVHCR+JxiPMU1thfnFsLc=)
                          2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: OUdCIq+YXy1UND887g9+vfcla6ynEHN2KmPzJlI74GI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fb:36:35:cf:6d:33:46:f6:38:53:bd:01:20:df:15:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
        Validity
            Not Before: Aug 13 13:01:01 2026 GMT
            Not After : Aug 14 13:01:01 2026 GMT
        Subject: CN=bbd2e5ba4e4db1d9f19ae18ed4c6ee77926e0344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2b:91:23:7c:e1:a1:4c:28:e8:43:2d:f2:ce:
                    b8:ec:55:cd:06:34:a8:b4:12:0b:35:88:50:3d:11:
                    6f:69:39:d0:71:65:32:f1:2c:5e:b7:6e:5f:9a:ca:
                    53:b5:af:16:63:d8:20:66:17:f6:11:d0:99:14:8d:
                    ff:08:ae:06:a2:b7:b0:2b:2f:a3:bb:7e:c8:43:9b:
                    2e:dc:67:88:30:66:57:4b:1d:f8:72:1b:9c:20:d2:
                    7b:57:c9:62:f5:e7:03:84:4a:b0:16:b7:64:32:59:
                    61:9f:29:a8:4f:82:96:65:b5:e7:51:fc:76:8f:a6:
                    d2:17:67:97:14:4f:0a:dd:03:b0:4f:00:1c:92:29:
                    24:0a:39:22:c5:e4:ab:12:c1:ba:29:30:14:aa:64:
                    03:9f:92:6c:94:ec:24:d6:2e:7f:bd:8c:be:7f:e4:
                    ad:d1:64:a3:8b:f5:63:93:cc:12:ce:37:2c:c8:b4:
                    75:6d:58:5a:21:9d:52:f3:51:65:e4:68:ed:63:4b:
                    8e:42:94:57:44:d0:19:a4:fc:b6:af:77:8d:8c:f3:
                    78:06:05:03:44:76:81:70:49:0c:2e:3b:e9:61:f5:
                    fb:cb:d4:d5:85:f1:b7:d1:c6:f6:ef:10:f8:d7:1d:
                    24:5e:4a:9b:dc:66:59:72:51:44:f9:3f:4a:3e:4e:
                    2a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D2:E5:BA:4E:4D:B1:D9:F1:9A:E1:8E:D4:C6:EE:77:92:6E:03:44
            X509v3 Authority Key Identifier:
                keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:ee:55:36:de:3a:da:6d:ca:23:44:68:fb:fd:c0:c0:3a:21:
         e0:02:f0:b1:ff:84:e0:7b:d5:d5:18:f9:34:0f:0f:2a:ab:fa:
         07:68:28:bb:b8:33:5a:97:c1:9f:6a:94:56:dd:a3:f8:4c:34:
         7c:02:15:e1:7d:21:f3:1b:cc:20:24:2e:c8:f4:ab:e7:46:65:
         d4:0d:29:1b:85:4f:12:1e:f3:96:e6:d4:4d:ae:58:3c:8c:04:
         79:e6:03:a4:4d:0b:da:49:2d:27:cd:2f:27:68:f1:7e:0b:68:
         31:4b:25:d8:cc:ea:4a:53:bb:c4:fa:21:d9:73:59:67:fb:55:
         59:31:f1:47:20:29:f1:7c:ad:db:0d:64:ac:d3:ea:b9:fd:fa:
         d2:1e:b5:aa:55:bd:2a:ce:c0:a1:d5:4a:3f:12:bd:ed:16:7e:
         00:40:68:c3:b2:ac:7d:5e:7f:38:80:44:29:a4:22:1e:e3:d2:
         11:41:bb:c0:88:98:b9:cf:fd:4e:2d:58:ac:c2:d1:e4:d7:bb:
         8c:75:5e:93:c4:cb:00:e7:ad:ed:c9:6d:2d:9a:41:64:53:7f:
         e2:bd:46:17:6c:c5:c5:e0:48:51:56:48:08:92:63:53:b2:28:
         6a:3a:3b:70:e0:0b:f2:b0:d9:6e:a9:cd:aa:61:1f:00:7f:50:
         ab:49:f9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 17:14:33 2026 by rpki-client