Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
File:                     QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json)
Hash identifier:          aqX4gpAiGK8IGvGNrTdpsEFRxkYXOz+D+J+qxeTgUYo=
Subject key identifier:   9D:8A:E8:D8:B4:26:D5:A5:29:23:26:CC:65:0F:B7:E7:6E:E4:C3:67
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Certificate issuer:       /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial:       019F111BDBA486F351A443FAF3BEF1CE4442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
Manifest number:          198F
Signing time:             Mon 29 Jun 2026 02:01:06 +0000
Manifest this update:     Mon 29 Jun 2026 02:01:06 +0000
Manifest next update:     Tue 30 Jun 2026 02:01:06 +0000
Files and hashes:         1: 5Bwd_XnCpBq4Cag2pu6bO5I9VIA.roa (hash: eytyjkZwAv73scTtka+wDpj6hepaCfnJjuIuqglSirA=)
                          2: 9wbcMUG4q75E7YjhGVXHnPYT7YM.roa (hash: nEsfQpZm0sg/MSPEMCxg0Fs6SfpSZuGJLTA7MHD7Ovo=)
                          3: GyN2brNi0SyVzTIfSD630KlULEk.roa (hash: WuqJqU2d7Re2MFRsMAJ/7CUNdgg3R6YAy0ZwMSitoI0=)
                          4: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: i77V2es4JTYnVfRP7TuyZZEDxe+ZgCrToev+26oUU98=)
                          5: iOH1McI9iTFIop-UJ1HA_U9if9E.roa (hash: jGsjtR/lt4692ZMHqph22xA5pSDg/jMmydFaGhjVUKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:1b:db:a4:86:f3:51:a4:43:fa:f3:be:f1:ce:44:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
        Validity
            Not Before: Jun 29 02:01:06 2026 GMT
            Not After : Jun 30 02:01:06 2026 GMT
        Subject: CN=9d8ae8d8b426d5a5292326cc650fb7e76ee4c367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:14:fa:85:20:62:9d:98:76:c0:c0:0c:b3:
                    7a:c2:34:1a:05:a8:6c:7c:04:1e:ac:a5:c6:c2:c6:
                    5f:20:8d:4a:40:50:58:d6:38:0f:0e:c8:3a:4a:9c:
                    8b:ad:9e:31:66:5a:34:5e:43:be:6f:ef:58:d4:72:
                    61:62:a6:b9:96:ce:ee:1a:39:7d:a9:23:c4:aa:a9:
                    c6:13:ed:cf:3b:9d:d8:58:9e:0f:59:82:ba:a7:51:
                    19:f7:22:c1:7c:21:d4:de:cd:4c:71:f9:8e:e6:33:
                    1a:ae:67:02:8d:b8:2e:eb:06:a6:04:c5:97:f4:4b:
                    7c:1f:74:03:ca:8e:28:25:66:a6:ce:75:77:c4:e4:
                    ed:84:3f:5a:15:07:f0:ae:95:f8:24:f1:f0:29:a4:
                    49:f9:cd:26:ce:d4:7c:05:e2:7a:59:59:a6:b0:21:
                    3a:98:0b:f2:13:70:b2:43:f9:9d:8e:19:b6:6c:4c:
                    9d:89:9b:77:86:16:45:21:f6:74:de:23:9c:cf:d2:
                    c8:7f:28:c7:23:32:9d:62:9e:05:c9:01:d6:c3:1b:
                    fb:c8:eb:0c:f6:e5:c6:eb:fd:9b:b8:fd:e8:70:c4:
                    b3:67:9a:d8:61:c2:97:42:9f:cd:5a:74:c2:a9:e4:
                    db:65:96:91:c0:34:32:d1:ec:3e:67:27:bf:2e:43:
                    5d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8A:E8:D8:B4:26:D5:A5:29:23:26:CC:65:0F:B7:E7:6E:E4:C3:67
            X509v3 Authority Key Identifier:
                keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8a:d7:59:32:74:14:52:cd:c4:06:cb:9b:5e:5c:3b:58:3d:
         9a:5e:e6:e8:2e:c6:27:67:ce:7e:26:f2:68:b0:26:91:47:25:
         59:ec:4f:22:9e:13:0d:93:59:ec:36:f2:00:b9:b9:c6:19:f8:
         6c:d0:3f:68:1f:00:c3:a9:2a:eb:0c:6d:06:19:74:74:ef:a3:
         60:3d:38:e8:37:d8:1b:d7:c7:fa:62:97:c7:9e:75:ab:c7:1d:
         55:00:5a:6f:06:2d:38:95:66:7c:60:5b:75:ad:5a:a6:36:ec:
         c4:99:d7:44:32:a9:f9:c9:27:33:07:a4:b8:03:40:34:49:02:
         f0:86:1a:1d:ea:27:ac:77:19:57:71:6f:4f:be:c8:4f:e2:fc:
         ee:74:85:88:fc:40:e2:2b:90:0d:bc:6d:e8:99:92:70:90:cd:
         4a:c7:bc:b4:ab:c9:23:bb:cf:6d:42:da:73:47:1d:a2:f9:dc:
         44:70:45:bb:2d:a6:6b:dd:b8:a1:0b:50:02:64:30:82:ac:56:
         be:09:56:eb:cb:58:38:94:6d:9f:d2:91:99:14:72:23:1b:8e:
         b9:12:e1:55:2a:69:01:d7:96:fd:fb:8f:89:6b:69:18:a7:9f:
         f6:e5:07:1a:56:de:7e:40:57:72:09:be:1d:9d:da:30:d1:7b:
         b9:db:cd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:10:51 2026 by rpki-client