Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File:                     qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier:          CIog80KIUej18Bfo5t/oJHOBIvZEIpz/zieJqMBWKKc=
Subject key identifier:   69:8F:7A:13:18:07:23:35:C3:C0:BE:45:BE:B6:69:C9:DB:B9:16:B1
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer:       /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial:       019F18D6589E2DCF9B1B659848D7D521D4B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number:          0D5C
Signing time:             Tue 30 Jun 2026 14:02:08 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:08 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:08 +0000
Files and hashes:         1: 1-3nsrh4Lo8MRYJrpDe2Kv8gI2bk.roa (hash: J6AC5UbCT/JPLrTSWfSumCMQQX3px8kLFv3gDTLnI80=)
                          2: HDDUkhzgUOHlF7zi4DlC9_ywpGI.roa (hash: ob4GjBCgXhSHBsKltA+N4Bhya5B54UhmYsdP2O0rGB0=)
                          3: PIU7Zxr6WOBUfjTOxP66dy63XjE.roa (hash: h4a3tGn4XY5dyoqR5ywDpWw2ctrTMxmn2LdoBTK4oGk=)
                          4: SZxwFn-rv4YHYIn11rPhhdZalEE.roa (hash: qGdnGUtcjilIGvYv6gZqj/DBGuFNWX/5F8NZ1f7ELoQ=)
                          5: dQp1_bF-2hRgZhoSUp2j8-OiYAI.roa (hash: Ktp1XPuBOcTSPdwju+u+aKIoeTI5yi+j2Ty+pydNaPA=)
                          6: fmZxjRZiqOQwHDt7j51f9SOA6RI.roa (hash: L9SLemKUDE99zwW/1qnnl1xaC8S5UDziumUBVKNLf1U=)
                          7: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: A0TnUWb24XSorzHNGouX42rje49Y/fsNY/AI8DYk6C8=)
                          8: rHk667_7e1f5CM1H6jMGDJQ1_rI.roa (hash: eJy0wY8fT6hZGfxYTUIN+SEKm4c/Wt9buTzlEZ5VOng=)
                          9: vzfccsFprMOY9JYnROqdf595jyk.roa (hash: 9XgNIgYKyBtoz7QowqkqXgsGwcOR4Db53f7gkwA+doE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:58:9e:2d:cf:9b:1b:65:98:48:d7:d5:21:d4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
        Validity
            Not Before: Jun 30 14:02:08 2026 GMT
            Not After : Jul  1 14:02:08 2026 GMT
        Subject: CN=698f7a1318072335c3c0be45beb669c9dbb916b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:55:86:62:d3:75:3c:ac:9c:68:5a:78:90:
                    a4:16:b6:cd:f4:25:a5:2b:75:88:0e:ad:17:1e:c8:
                    ec:eb:ff:13:48:f4:55:39:20:b7:79:ae:ef:cb:07:
                    70:d9:7d:15:4c:d0:73:35:64:76:22:b6:6c:b4:a7:
                    31:c4:ca:85:6a:97:32:63:41:b9:64:f6:07:3b:28:
                    95:ad:14:ef:00:20:58:a3:55:f1:f8:7d:91:1f:a1:
                    7d:4d:96:39:00:10:32:5d:55:cc:a4:87:13:44:9f:
                    93:4a:f1:6a:68:bb:14:e7:8f:6f:a4:65:63:2f:9e:
                    aa:14:7b:ea:ce:d1:5b:da:54:df:a0:e6:12:0d:e9:
                    f3:a5:2c:fd:c5:8d:05:a3:fe:ca:6b:80:be:37:ad:
                    d3:f5:8a:47:28:13:95:0f:b7:35:90:a7:ca:02:dd:
                    13:bc:39:53:9f:8d:1f:1b:d9:02:2e:5b:7e:c4:a9:
                    e6:b2:a0:d3:fa:1d:14:94:e6:f2:05:e3:cc:24:68:
                    7a:5f:3e:cd:09:71:43:d2:70:91:1a:68:90:ed:90:
                    78:f0:b6:87:e4:0f:55:b4:8c:a5:53:c0:5c:7b:57:
                    24:b2:8a:9e:63:d2:88:ae:24:39:d1:e6:fe:d1:4a:
                    11:20:1a:01:8a:e8:42:94:bf:4c:0c:1b:4c:27:b0:
                    d3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8F:7A:13:18:07:23:35:C3:C0:BE:45:BE:B6:69:C9:DB:B9:16:B1
            X509v3 Authority Key Identifier:
                keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:88:d1:a5:87:8c:37:42:35:ee:3d:b4:b2:c3:b4:e2:d6:f7:
         8d:0d:d3:ca:98:17:c3:e9:21:02:61:3c:ee:32:81:7f:b6:d4:
         c2:83:27:1b:fc:f5:5d:08:3d:fb:5d:00:87:6d:32:6f:a6:75:
         82:b8:77:3c:23:eb:b8:21:80:53:6b:a6:f6:89:7e:2c:3d:da:
         51:91:7a:ca:eb:d2:83:ea:cd:75:f7:cf:c6:fe:e6:46:dc:25:
         c4:de:3e:92:54:62:24:47:3e:23:1d:6b:9e:74:05:7a:61:15:
         ad:a8:89:06:4a:02:e9:2f:6c:3e:45:70:82:da:fc:1e:6e:93:
         ab:cd:3e:86:35:df:f3:15:25:b6:4c:3b:fa:ec:36:33:d3:2a:
         93:be:89:66:37:7d:3d:4c:00:fe:9b:fb:8c:77:71:35:43:7e:
         f8:00:7e:9e:fc:c7:00:c3:e1:1c:4b:e8:87:ef:72:12:9d:dc:
         14:3d:8a:65:c6:54:44:8c:ce:06:a0:2b:06:28:5b:29:f8:41:
         d8:73:64:e2:f6:38:ff:64:ce:23:28:57:23:33:a2:db:aa:5e:
         42:52:f5:24:7c:56:83:c8:11:06:dc:20:3f:26:2d:21:dc:ea:
         3a:1a:af:5d:ea:3b:6b:8c:29:9b:63:46:38:04:e2:6c:bc:db:
         8f:a0:eb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:16 2026 by rpki-client