Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
File:                     QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft (raw, json)
Hash identifier:          qNyn1/EFyi+szUqRJlXDbK0jYrdWlTwymG/DZYgYqgE=
Subject key identifier:   B6:E5:9D:33:6E:7C:4C:2D:B6:85:75:42:C7:AC:5C:0D:09:A4:A8:5F
Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
Certificate issuer:       /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Certificate serial:       019EB7A0A54CF8E678BF2C4F8EC50B460771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
Manifest number:          046D
Signing time:             Thu 11 Jun 2026 17:00:18 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:18 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:18 +0000
Files and hashes:         1: QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl (hash: ly0GHhZeOcS9IracSuKHtNW/rUly7mSaZqvSjFC+qhE=)
                          2: fg1dJ5KT1fZ2mElPDebHpNVgR8U.roa (hash: Q8kFLKZwqJa3BTNxu/acXdMWWvmB0nDo3x9ALn3COiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a0:a5:4c:f8:e6:78:bf:2c:4f:8e:c5:0b:46:07:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
        Validity
            Not Before: Jun 11 17:00:18 2026 GMT
            Not After : Jun 12 17:00:18 2026 GMT
        Subject: CN=b6e59d336e7c4c2db6857542c7ac5c0d09a4a85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:eb:3e:1a:de:7c:39:01:7f:d6:7d:64:0f:
                    c3:e0:03:0a:a9:89:3c:7f:94:c1:2f:d7:b1:a9:59:
                    9f:a8:fd:ef:98:5e:4f:01:a5:c0:00:ed:e0:b7:17:
                    53:e3:3e:24:b5:d8:e8:83:23:f2:6f:25:4a:c4:36:
                    49:78:ce:e1:3f:ca:41:ff:2b:af:c3:5e:ba:d4:7b:
                    01:22:13:ea:ef:b2:7d:fd:e2:f2:c8:ce:b0:55:9e:
                    f6:51:83:c7:88:cc:44:97:5e:02:97:66:35:58:40:
                    76:64:89:8a:57:a1:5d:5b:a0:67:62:c1:4f:ac:93:
                    ae:24:de:8d:e2:12:3f:b4:18:73:b0:83:94:9a:63:
                    fd:a0:01:7d:1b:d2:08:cb:81:fa:67:9c:cd:68:ab:
                    5c:f6:6f:e1:b3:da:b6:52:e5:44:84:e2:9f:b1:30:
                    c8:ce:06:50:25:3b:8a:1b:ff:be:16:9b:e2:a6:c9:
                    db:e9:04:97:ae:01:2b:69:54:bf:2e:25:30:66:7f:
                    84:7a:58:df:fe:81:32:e8:dd:f0:3f:fc:8d:ae:66:
                    9e:a2:37:01:bc:c7:e9:69:b9:e0:8b:65:da:0b:0b:
                    29:99:fb:87:14:b2:e8:0b:e5:8c:4c:6e:83:aa:41:
                    03:ca:3b:3c:ae:4e:05:fe:71:64:79:d8:01:dd:1e:
                    39:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E5:9D:33:6E:7C:4C:2D:B6:85:75:42:C7:AC:5C:0D:09:A4:A8:5F
            X509v3 Authority Key Identifier:
                keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c6:a4:30:75:b1:03:35:5f:fd:ce:ec:23:c1:55:e4:48:17:
         62:be:46:26:01:28:a9:be:93:ce:7f:40:62:9f:4d:47:b8:be:
         58:37:bd:2a:2f:f8:28:89:07:e2:a9:72:ca:38:2d:1d:66:39:
         05:08:dc:06:92:06:e1:f8:7b:ad:db:9c:88:67:1d:2b:b2:bc:
         74:69:fe:59:f8:98:6a:86:5f:f3:2f:6e:ad:b1:02:86:30:f7:
         6f:cc:80:d4:76:a2:cf:63:6d:b1:27:b3:a8:17:dc:95:bf:70:
         1c:9e:3e:f2:1c:b4:ec:cb:2d:06:fa:c8:56:10:ad:aa:c7:d6:
         6c:e3:4c:d8:b9:8c:62:9d:8a:59:76:2a:e5:cd:85:89:a9:b4:
         83:1a:46:17:75:07:7d:e9:5f:76:10:1d:74:25:f9:8d:b9:53:
         2d:1e:95:29:96:bf:4d:59:7a:4c:52:ea:3d:55:93:95:f2:b5:
         0a:42:b7:d4:43:f6:a1:c2:ad:1c:86:6f:ab:0c:80:75:fd:50:
         3c:c7:cc:48:af:84:46:8b:99:f2:98:aa:45:d1:b9:16:3d:c2:
         e7:9c:5f:3b:f6:8e:e0:23:d5:01:5a:97:76:21:83:ce:ff:de:
         d3:89:a8:44:fb:3d:3c:c8:71:51:47:61:9b:2a:44:d7:9c:92:
         ed:b0:af:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:22 2026 by rpki-client