Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
File:                     Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft (raw, json)
Hash identifier:          l/SsWBZ6Vv2BCtBXJJFHjttFtUq9OlAD6cebR/ItTEU=
Subject key identifier:   A3:A9:7C:D8:CD:8C:D5:61:9D:30:8F:C9:3D:5E:94:3E:7C:6E:B2:E6
Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
Certificate issuer:       /CN=43e0a364131841056d48b2d788ea00ca4b91db56
Certificate serial:       019FF30F4D92408D09D081699F51DF584648
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
Manifest number:          1A01
Signing time:             Tue 11 Aug 2026 23:01:34 +0000
Manifest this update:     Tue 11 Aug 2026 23:01:34 +0000
Manifest next update:     Wed 12 Aug 2026 23:01:34 +0000
Files and hashes:         1: Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl (hash: 0oEPKQ4ebAeluumQOdmph5WE/SrUdP3va+zShw3S+ZM=)
                          2: ksaatSaKxA-y0WXvpifwAI5WkmY.roa (hash: FBqVdV7XXAfAEJJwTss1e7NjG8kEmROWtZrVwbWVdUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Aug 2026 21:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f3:0f:4d:92:40:8d:09:d0:81:69:9f:51:df:58:46:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56
        Validity
            Not Before: Aug 11 23:01:34 2026 GMT
            Not After : Aug 12 23:01:34 2026 GMT
        Subject: CN=a3a97cd8cd8cd5619d308fc93d5e943e7c6eb2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4e:a4:06:9d:35:30:6c:8a:f3:ca:39:6a:2e:
                    b3:6b:0c:88:51:a3:00:0e:07:a6:28:e3:85:e4:f2:
                    bc:78:15:1a:b3:4e:65:1a:07:4f:24:db:4a:82:c5:
                    e5:c6:d5:64:56:10:a2:df:6a:43:55:05:ac:3f:db:
                    0d:10:cf:7e:ae:57:5a:e4:c8:77:21:89:c4:56:20:
                    b4:3e:47:5c:bf:c6:67:ce:1b:4a:d7:8f:d8:36:c3:
                    1d:dd:b8:fc:b4:20:f5:33:64:b0:7f:0f:9c:01:62:
                    14:f1:c2:13:f5:de:61:9e:03:b7:a7:a8:6b:ea:34:
                    80:87:76:83:b2:6e:91:05:cf:d3:7f:fa:9f:74:64:
                    c0:9a:ac:73:13:d8:ff:32:32:d9:40:67:96:9b:5a:
                    56:7c:b8:fe:f8:97:5e:d1:82:ea:e9:c1:0b:70:94:
                    70:c2:01:28:38:18:36:d8:71:0b:a2:97:73:2c:23:
                    2e:47:cf:fe:cd:15:bc:8d:67:ed:02:17:0b:48:f3:
                    6a:e9:05:50:32:0b:51:6f:f4:7b:2f:d4:fa:ab:61:
                    eb:d5:1f:15:ef:d9:0e:6f:92:43:b4:27:03:e6:e3:
                    10:e1:3c:8c:e6:e2:23:d0:2d:73:e3:c4:cb:90:2c:
                    a5:f0:02:10:4b:f2:3b:3b:7b:45:cb:9f:b4:2f:ff:
                    9e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A9:7C:D8:CD:8C:D5:61:9D:30:8F:C9:3D:5E:94:3E:7C:6E:B2:E6
            X509v3 Authority Key Identifier:
                keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:5c:ed:0a:a9:53:df:17:d9:40:c6:3d:59:46:e2:29:d0:d3:
         49:cf:9c:7c:f7:f8:ba:55:8c:c1:5c:00:29:64:7c:ac:7d:3f:
         cc:b9:74:e1:a1:e6:da:cd:16:c6:36:29:65:d1:cf:a3:5f:cc:
         ad:e0:19:d5:ee:c9:92:37:96:5d:ae:12:4e:e4:f3:8b:75:11:
         57:76:f7:30:c7:f2:08:f9:ed:9d:48:9d:90:a6:f8:a3:b3:5c:
         bd:03:77:fb:f0:3c:e7:67:d8:0f:46:f8:91:26:22:b8:09:6e:
         31:b5:e2:04:4f:3e:b2:59:57:d7:30:15:cb:6c:b4:60:b3:74:
         34:68:4b:25:d6:2b:2d:7c:a3:cc:f8:a7:08:99:30:cb:8c:b1:
         16:0b:16:f5:93:cc:fd:d0:47:76:cd:f6:9c:2e:c9:95:56:11:
         ba:6b:22:da:89:c6:2a:13:ee:59:0c:a8:fd:33:d0:26:05:bd:
         3e:d1:c4:52:82:a2:81:2c:59:58:4a:db:7f:17:5d:e5:eb:0f:
         3f:60:e1:11:c7:69:8b:7f:65:b4:dc:a1:61:97:2b:5f:45:69:
         45:34:82:de:14:de:8e:59:db:61:0c:02:a6:31:47:43:2e:c7:
         8a:92:be:34:b8:31:a8:a6:92:30:fa:f8:1e:46:fa:18:92:66:
         9d:5b:91:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/zD02SQI0J0IFpn1HfWEZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZTBhMzY0MTMxODQxMDU2ZDQ4YjJkNzg4ZWEwMGNhNGI5
MWRiNTYwHhcNMjYwODExMjMwMTM0WhcNMjYwODEyMjMwMTM0WjAzMTEwLwYDVQQD
EyhhM2E5N2NkOGNkOGNkNTYxOWQzMDhmYzkzZDVlOTQzZTdjNmViMmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk6kBp01MGyK88o5ai6zawyIUaMA
DgemKOOF5PK8eBUas05lGgdPJNtKgsXlxtVkVhCi32pDVQWsP9sNEM9+rlda5Mh3
IYnEViC0Pkdcv8ZnzhtK14/YNsMd3bj8tCD1M2Swfw+cAWIU8cIT9d5hngO3p6hr
6jSAh3aDsm6RBc/Tf/qfdGTAmqxzE9j/MjLZQGeWm1pWfLj++Jde0YLq6cELcJRw
wgEoOBg22HELopdzLCMuR8/+zRW8jWftAhcLSPNq6QVQMgtRb/R7L9T6q2Hr1R8V
79kOb5JDtCcD5uMQ4TyM5uIj0C1z48TLkCyl8AIQS/I7O3tFy5+0L/+elQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOpfNjNjNVhnTCPyT1elD58brLmMB8GA1UdIwQY
MBaAFEPgo2QTGEEFbUiy14jqAMpLkdtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85Y2JiMDYtYjRkYS00Yzk0LWI0MTgt
NGIwODFjYzJiMzlhLzEvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi85Y2JiMDYtYjRkYS00Yzk0LWI0MTgtNGIwODFjYzJiMzlh
LzEvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFztCqlT
3xfZQMY9WUbiKdDTSc+cfPf4ulWMwVwAKWR8rH0/zLl04aHm2s0WxjYpZdHPo1/M
reAZ1e7JkjeWXa4STuTzi3URV3b3MMfyCPntnUidkKb4o7NcvQN3+/A852fYD0b4
kSYiuAluMbXiBE8+sllX1zAVy2y0YLN0NGhLJdYrLXyjzPinCJkwy4yxFgsW9ZPM
/dBHds32nC7JlVYRumsi2onGKhPuWQyo/TPQJgW9PtHEUoKigSxZWErbfxdd5esP
P2DhEcdpi39ltNyhYZcrX0VpRTSC3hTejlnbYQwCpjFHQy7HipK+NLgxqKaSMPr4
Hkb6GJJmnVuRUw==
-----END CERTIFICATE-----
Generated at Wed Aug 12 05:26:32 2026 by rpki-client