Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File:                     pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier:          frypFYAWdJkjGS33UsZhuGeJzQrEinldxctEajIN3gs=
Subject key identifier:   62:B8:E5:13:FB:F3:0A:B9:24:4E:FE:CE:86:9B:D9:FB:CD:0C:1B:F5
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer:       /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial:       019F860D0E1678A487F97C9919A2FF56A436
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number:          057D
Signing time:             Tue 21 Jul 2026 19:00:30 +0000
Manifest this update:     Tue 21 Jul 2026 19:00:30 +0000
Manifest next update:     Wed 22 Jul 2026 19:00:30 +0000
Files and hashes:         1: JZhEp-Qj_xrmA-hVnz37UUNdMgQ.roa (hash: AXBExwmU9H7oRMKiGRczo0VIey6hczqitFMjI0jwK5E=)
                          2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: DBwFEMM+AcGygUvhjUq4siiNKbMYYp37pt8knN+Ts4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:0d:0e:16:78:a4:87:f9:7c:99:19:a2:ff:56:a4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
        Validity
            Not Before: Jul 21 19:00:30 2026 GMT
            Not After : Jul 22 19:00:30 2026 GMT
        Subject: CN=62b8e513fbf30ab9244efece869bd9fbcd0c1bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:56:ec:4a:2b:de:51:e9:04:c1:09:d2:9c:e5:
                    eb:36:a8:01:2d:15:00:f5:9d:b7:10:27:bb:87:28:
                    b0:5a:77:cf:8f:ae:da:fe:b1:ac:82:e7:ee:5f:12:
                    db:ad:b3:ab:82:a2:8d:87:5f:2f:4c:bb:e6:ca:f2:
                    6b:61:9f:fa:ea:2d:21:46:41:94:a6:02:0c:a7:50:
                    b8:10:79:92:a0:6a:e9:5b:a6:32:34:f5:29:55:c6:
                    d0:51:a2:42:7a:c4:d6:21:06:bd:59:80:08:23:72:
                    3e:15:31:71:ba:0c:2e:9b:ee:4c:84:83:b5:86:b5:
                    66:f9:e3:0d:f5:2b:9c:57:76:df:5c:27:38:4e:d9:
                    8f:58:65:07:3b:4a:2b:e3:e0:4f:49:fc:91:fe:b6:
                    49:90:ab:cf:fd:21:29:71:18:19:ee:d2:25:3a:e0:
                    e0:8e:df:cd:da:44:93:23:ac:9f:3a:61:74:28:8a:
                    44:ed:96:86:59:09:9d:05:8c:c8:a3:52:38:fd:29:
                    11:83:8c:3c:cf:19:38:08:59:5c:21:bd:60:52:2d:
                    a4:af:be:5f:74:f2:c3:41:0f:a0:29:a3:84:03:42:
                    cf:f4:9f:f1:28:b6:59:bb:3c:36:9e:35:b1:e9:5c:
                    9f:83:ad:d2:46:07:ba:e4:67:ba:48:ea:eb:af:4b:
                    11:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B8:E5:13:FB:F3:0A:B9:24:4E:FE:CE:86:9B:D9:FB:CD:0C:1B:F5
            X509v3 Authority Key Identifier:
                keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:05:34:b1:8b:78:d2:90:80:b1:1e:ff:9f:80:ae:64:9c:89:
         72:31:49:fd:95:d6:1a:71:f7:18:5e:56:d0:12:2a:68:37:23:
         7d:6c:a8:af:77:4a:ef:cd:30:72:af:0a:31:98:8e:85:1f:54:
         9a:46:14:8b:c8:21:72:36:0d:72:22:60:30:23:d5:0d:8a:4a:
         03:ce:4f:e5:e9:19:61:34:e5:9e:b4:0b:89:ff:bf:6c:bc:8f:
         a8:47:dd:77:db:bd:54:c9:a3:eb:57:39:b5:62:98:bb:04:03:
         76:68:59:7b:aa:9a:bb:08:a9:5e:4d:c9:89:d2:67:95:39:65:
         3d:16:70:f0:1a:95:33:23:8a:88:e8:82:3e:f8:21:7e:06:3b:
         78:a9:98:ca:9c:4d:b5:e4:d5:09:60:d8:49:7b:e4:67:f5:03:
         c8:20:5f:cc:d7:a1:2b:cb:5d:e5:62:12:5d:24:b1:a9:d8:a1:
         87:00:51:09:81:76:0e:54:07:ea:6f:61:f2:a1:cd:8a:ad:5b:
         95:83:ee:df:3b:d2:e6:aa:9b:71:db:24:1a:9b:0a:ee:c4:e1:
         3a:c5:1f:d4:9b:00:f2:16:0b:f1:7d:32:d6:31:0d:3d:99:85:
         cb:6a:a7:13:9e:bb:63:52:57:aa:be:59:73:c6:44:fa:47:f8:
         c9:1f:24:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GDQ4WeKSH+XyZGaL/VqQ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YThmMzQzNmZkODNlOGFmNjEwZjIxNjgwODk5NmU5MGFj
YWM3NWQwHhcNMjYwNzIxMTkwMDMwWhcNMjYwNzIyMTkwMDMwWjAzMTEwLwYDVQQD
Eyg2MmI4ZTUxM2ZiZjMwYWI5MjQ0ZWZlY2U4NjliZDlmYmNkMGMxYmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FbsSiveUekEwQnSnOXrNqgBLRUA
9Z23ECe7hyiwWnfPj67a/rGsgufuXxLbrbOrgqKNh18vTLvmyvJrYZ/66i0hRkGU
pgIMp1C4EHmSoGrpW6YyNPUpVcbQUaJCesTWIQa9WYAII3I+FTFxugwum+5MhIO1
hrVm+eMN9SucV3bfXCc4TtmPWGUHO0or4+BPSfyR/rZJkKvP/SEpcRgZ7tIlOuDg
jt/N2kSTI6yfOmF0KIpE7ZaGWQmdBYzIo1I4/SkRg4w8zxk4CFlcIb1gUi2kr75f
dPLDQQ+gKaOEA0LP9J/xKLZZuzw2njWx6Vyfg63SRge65Ge6SOrrr0sRZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGK45RP78wq5JE7+zoab2fvNDBv1MB8GA1UdIwQY
MBaAFKao80Nv2D6K9hDyFoCJlukKysddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi81YjE2NTctYWJmMC00ZDM2LWE4OTIt
YWJlNWM4ZTJiYWQ2LzEvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi81YjE2NTctYWJmMC00ZDM2LWE4OTItYWJlNWM4ZTJiYWQ2
LzEvcHFqelEyX1lQb3IyRVBJV2dJbVc2UXJLeDEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgU0sYt4
0pCAsR7/n4CuZJyJcjFJ/ZXWGnH3GF5W0BIqaDcjfWyor3dK780wcq8KMZiOhR9U
mkYUi8ghcjYNciJgMCPVDYpKA85P5ekZYTTlnrQLif+/bLyPqEfdd9u9VMmj61c5
tWKYuwQDdmhZe6qauwipXk3JidJnlTllPRZw8BqVMyOKiOiCPvghfgY7eKmYypxN
teTVCWDYSXvkZ/UDyCBfzNehK8td5WISXSSxqdihhwBRCYF2DlQH6m9h8qHNiq1b
lYPu3zvS5qqbcdskGpsK7sThOsUf1JsA8hYL8X0y1jENPZmFy2qnE567Y1JXqr5Z
c8ZE+kf4yR8kSw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:01 2026 by rpki-client