Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File:                     Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier:          nWl+HkJCruhR1/eMGBPmzUwG+ILNxYztAMPCRvFzLe8=
Subject key identifier:   FC:B0:2D:A6:4D:D9:63:72:E3:9A:6B:68:15:DB:9C:25:81:E5:5D:F9
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer:       /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial:       019F9F284F052ECE691532082D416549420C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number:          046E
Signing time:             Sun 26 Jul 2026 16:00:46 +0000
Manifest this update:     Sun 26 Jul 2026 16:00:46 +0000
Manifest next update:     Mon 27 Jul 2026 16:00:46 +0000
Files and hashes:         1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: Nr0oAeM0za7dCK0O37yA/gysPpKK6NWkshgc3gMNm1I=)
                          2: m_rKth0WblNoPGrjkNfcn6MmMxc.roa (hash: S0D1n4kwGONLCb2yvnuQTTGiDLAbMsWlgwxGBJpbiPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:28:4f:05:2e:ce:69:15:32:08:2d:41:65:49:42:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
        Validity
            Not Before: Jul 26 16:00:46 2026 GMT
            Not After : Jul 27 16:00:46 2026 GMT
        Subject: CN=fcb02da64dd96372e39a6b6815db9c2581e55df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:01:53:d6:b6:4a:57:dc:20:95:0a:26:dd:6e:
                    a0:b6:14:5d:cf:3c:53:66:ca:9a:d2:50:8e:15:27:
                    bd:9c:a9:d8:a1:52:6b:fc:3e:fc:6c:90:84:6b:5a:
                    7c:eb:8c:64:84:49:46:63:e4:a8:54:f3:96:bf:4e:
                    b4:d4:55:8d:98:1d:24:fb:30:78:b4:ef:c3:2a:6b:
                    d1:ce:d7:f3:04:e7:a3:48:59:53:42:f7:7b:a1:47:
                    84:91:8d:32:51:00:45:d1:e1:6c:91:c6:bb:9b:de:
                    07:5b:6b:b1:27:2d:3c:59:a5:2d:e7:4d:b5:e8:79:
                    7f:94:cc:10:c8:9f:15:e2:99:1c:7f:25:b0:b1:2c:
                    7d:2a:26:1b:e9:9e:01:df:17:57:5c:e8:75:17:78:
                    35:16:57:44:dd:4a:ee:7f:e1:c2:7f:36:e7:30:eb:
                    8f:c5:f5:37:e1:43:b1:e6:4a:f6:38:d6:84:dc:fd:
                    b4:f6:d2:16:30:48:e7:96:f5:d5:b7:39:26:ff:35:
                    26:05:07:1c:20:13:81:de:c9:e3:60:c5:f3:6b:b6:
                    91:e0:59:71:b7:43:57:c8:2e:2f:7a:23:e7:36:1f:
                    14:6d:19:96:b2:ac:7f:22:7d:3b:c2:cf:b9:81:71:
                    f6:81:6b:6a:2a:dc:b3:37:bd:ed:36:3b:66:11:50:
                    6e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B0:2D:A6:4D:D9:63:72:E3:9A:6B:68:15:DB:9C:25:81:E5:5D:F9
            X509v3 Authority Key Identifier:
                keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ec:16:31:bc:db:cb:d5:92:94:7c:ad:a1:d5:4c:6b:0a:ef:
         87:c6:06:b2:36:5f:df:48:c3:a8:83:c7:9c:73:78:51:b7:c3:
         d8:de:93:91:ad:35:17:f6:0a:4f:1f:0c:c9:00:95:56:13:8c:
         40:9c:4d:9b:78:e2:8c:c0:ba:2f:27:43:a2:1a:1f:f7:b7:f4:
         72:ba:f2:26:41:3f:59:fe:aa:6c:47:77:f7:9d:c4:6a:a0:c1:
         de:7b:3a:c7:37:63:b0:5f:01:de:5f:91:2b:6c:c2:64:f2:fa:
         43:ca:db:e0:90:fe:d3:b7:27:b3:e5:ee:d5:4d:43:c2:55:d0:
         ad:61:2a:19:29:52:28:35:17:e9:ba:18:14:0a:81:be:bf:3e:
         22:f6:a3:6e:9a:f6:b4:a9:e0:fc:80:e3:ff:73:51:52:f1:a8:
         d4:5b:c3:1a:0c:f9:83:3a:fc:3f:f3:ae:d9:3d:59:ac:58:ca:
         46:18:d9:8c:ea:d1:77:c3:c3:6b:76:d5:06:50:a0:15:2d:00:
         04:15:f8:75:ba:9c:5c:86:07:27:b7:8c:05:37:93:d2:ea:f5:
         4f:ac:de:12:42:c3:82:91:cc:19:9e:76:fe:42:09:50:12:a7:
         eb:f5:7b:41:ef:bb:ca:40:c9:72:7e:c6:9d:e5:e7:62:33:c9:
         4e:e2:19:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:17:48 2026 by rpki-client