Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File:                     QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier:          m3d5+Wl7kSlm0aAhMSdF2KCo71T67lAbOHLjkYcw5H4=
Subject key identifier:   58:37:49:D8:79:0E:DC:A4:B0:23:F4:16:A7:EA:EB:ED:49:BD:4A:49
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer:       /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial:       019FA14D640DA6A6DDBD22A4991B4FF796AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number:          1642
Signing time:             Mon 27 Jul 2026 02:00:31 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:31 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:31 +0000
Files and hashes:         1: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: n7J4C0ZhDleCTVOUNGxRLx0Eez7sT1ctMwyZJt8txaI=)
                          2: SWRq_pl9YE3Vmep3Sz-bHbzjenU.roa (hash: PpkmpYFRPnBUp9wde4ONrE1EcXa6IfUcynokhBV559M=)
                          3: gRMoRivinGkBgKRmH-SV8yoYcgU.roa (hash: cVbIfSm3Q8ulteh3vXummnzFjESsnysosWKYY8XHU6k=)
                          4: msnnLQdoKjqNvOHMJs9IN5ceZuY.roa (hash: 5lKEYe5Gxrq+ObFCrI6WSzVszy2h6z3OHnDq+L5Kw/0=)
                          5: po89kTt_M1HMD_TZwbQeOVVxFXw.roa (hash: RYba7TeIJMquk0bjj/NwxPbu20V03433IfrmNgzfovA=)
                          6: vG4zf4gBfvqtcILrPLbA-wHSJso.roa (hash: GuoYyttXZtfdHI3sLS6+ceDcyDmzz98nHEsNcf7mD9A=)
                          7: vdlRGBUxKdk1J59T9yk33Tc6VXs.roa (hash: psrrFdXSYr4Fiv+zDVJQMMF62M2YJ/7GZn06Znz7wu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:64:0d:a6:a6:dd:bd:22:a4:99:1b:4f:f7:96:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
        Validity
            Not Before: Jul 27 02:00:31 2026 GMT
            Not After : Jul 28 02:00:31 2026 GMT
        Subject: CN=583749d8790edca4b023f416a7eaebed49bd4a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6b:f2:e6:6f:61:97:48:14:d8:0a:78:d6:3e:
                    00:38:f5:85:bc:a7:e0:96:0e:0b:32:4f:16:de:85:
                    56:61:f9:84:1c:8f:b7:2e:0a:a3:4a:73:4b:77:86:
                    c8:a3:f0:68:65:db:3b:3c:b9:cc:0f:d3:5e:fe:52:
                    d2:81:26:31:33:1f:02:36:28:f6:f9:22:ab:6b:b4:
                    f3:07:dc:e1:f8:ce:4e:6f:13:fe:95:8e:ee:e3:a5:
                    36:6f:13:ae:ca:4e:0b:46:6f:72:0c:27:14:06:ae:
                    42:2a:13:49:cc:8a:60:23:b9:35:47:2e:f8:f8:6b:
                    4b:c1:bd:a5:cd:4d:66:8a:ac:ed:a4:e8:5a:09:aa:
                    24:63:00:45:d7:2b:a9:42:eb:bf:9d:a3:63:83:b9:
                    d1:fe:39:1a:bc:92:db:01:e0:08:6c:d1:1e:c6:ab:
                    14:60:ff:84:fb:34:41:11:2d:0c:ee:3b:6c:23:66:
                    68:31:d5:86:d8:ca:f6:2e:e1:85:fa:a1:65:c3:66:
                    cf:58:dc:47:c3:61:5c:0b:d0:40:1d:db:77:30:ae:
                    8f:1a:48:d9:af:e4:3c:e0:cb:1e:8f:4c:5d:ca:69:
                    a1:96:e3:dc:5a:b7:b1:7d:2f:22:3b:35:a9:68:dc:
                    4a:82:85:cd:44:74:a3:5a:03:82:ac:8e:bf:24:52:
                    11:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:37:49:D8:79:0E:DC:A4:B0:23:F4:16:A7:EA:EB:ED:49:BD:4A:49
            X509v3 Authority Key Identifier:
                keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:56:b6:6d:f7:91:72:a3:82:36:7b:d6:89:c2:59:e7:fe:be:
         74:2e:cb:5c:cb:1a:b1:81:cc:d1:8c:af:c8:2e:bb:0a:56:bc:
         a6:f9:dd:59:b8:18:4d:8f:30:77:43:fc:aa:80:ca:0a:c7:7a:
         d9:d8:a7:c0:e7:53:fd:52:1b:b5:18:4c:88:b4:a8:41:b7:b3:
         f1:21:5a:f9:23:4d:e6:16:72:2a:af:c3:8d:c9:3e:56:79:df:
         d2:ce:dc:6c:df:90:37:20:6d:12:f0:6d:f2:dd:9e:17:d6:f3:
         ce:ce:2c:23:2a:b9:a6:94:86:23:92:2f:85:d6:c4:ef:b3:e2:
         97:5e:f5:4b:bb:fb:ad:3b:a6:31:ef:07:cc:19:cb:88:56:7c:
         ab:d6:b5:20:8d:2f:00:37:6b:db:55:fd:77:34:ad:47:32:7d:
         eb:36:ac:81:a9:0e:fd:40:d8:a0:25:f6:85:b8:91:83:54:f5:
         be:c6:67:58:39:47:11:8a:cc:2f:f2:f7:e8:a4:4a:6b:07:18:
         e6:64:a4:3c:a4:d7:64:25:89:24:3e:29:42:be:3a:27:36:2f:
         ef:40:3d:c4:f9:f6:85:3e:72:8f:80:4a:fa:7f:aa:e2:79:76:
         9a:b8:a9:17:d0:27:f5:36:db:23:59:e3:b7:ae:38:23:d8:47:
         16:eb:e4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:05:24 2026 by rpki-client