Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File:                     q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier:          xaxVCwBlRy6mq5TPh+K8USzlfo5x75LMFNqrhCYzozY=
Subject key identifier:   A6:B8:51:84:72:84:9B:4F:A3:20:06:09:CE:95:1F:C8:DD:C7:3F:C6
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer:       /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial:       019DDDD5803B5A7C2C8927AA734AF13A8BB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number:          191F
Signing time:             Thu 30 Apr 2026 10:00:49 +0000
Manifest this update:     Thu 30 Apr 2026 10:00:49 +0000
Manifest next update:     Fri 01 May 2026 10:00:49 +0000
Files and hashes:         1: 9AQTjaHWKJCXsC30oHllY8BTYu0.roa (hash: 7fmthrhoa3IJWK083wDCI4y5oXM7TE8HLdralxn1zCQ=)
                          2: D8zt2B-zZXXGmbmFyYrVgX5VlhE.roa (hash: 7mktpizMJp0UVGb90YuRIUsj5vrCk7DRcIeq+0Shwlw=)
                          3: FR0TMzudRUII0Fa6Jf04w_3WI20.roa (hash: AJPhPEVbqaILZMRzPtnEJF9G4HZjyUJiNfN1jrcINf4=)
                          4: buqYzFTyi7wPpzd9BAt1N0qAHXU.roa (hash: 7fssqNhBi5yImjk1Vr2WL9ol/xv6RFd9KhgAwqTB6Mg=)
                          5: cdcnkJ97Pt4zm08H5wo6k7Kj1og.roa (hash: iFLFl7A8YTDlZs6b2ZtDXNK2nv2uM/FdHMVOEy9wgkc=)
                          6: ffozWOJhdYTlZsYd3LUTrpAH84g.roa (hash: LqRzq5DyTPzo0AG3Z9lInY0bhS/P0365y/30CPyVkNM=)
                          7: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: 6IC1nUctfaiAu4cckXe6fQ1z5FudbRetgMaPZ+h6SE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dd:d5:80:3b:5a:7c:2c:89:27:aa:73:4a:f1:3a:8b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
        Validity
            Not Before: Apr 30 10:00:49 2026 GMT
            Not After : May  1 10:00:49 2026 GMT
        Subject: CN=a6b8518472849b4fa3200609ce951fc8ddc73fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:59:f7:5d:e4:6a:58:93:e8:f1:f9:69:d2:a3:
                    c1:f6:ee:6e:41:8a:85:f0:5c:62:80:05:ea:92:ee:
                    d4:30:16:2d:87:22:74:ab:03:2f:4c:44:72:4b:06:
                    69:8f:2e:00:da:18:fa:62:aa:b6:11:7d:71:b9:0a:
                    4d:1c:26:3e:cb:48:19:d8:cd:cc:d8:ea:f0:4f:f4:
                    7e:96:d2:3c:e8:5d:fb:f3:f2:4e:52:4a:40:36:48:
                    9c:55:46:3f:f4:9c:d0:b9:d7:f9:a1:f2:e9:e3:7b:
                    88:db:d8:f9:e0:b7:2d:d2:a4:31:e6:fe:0a:1b:2b:
                    d3:4f:0f:87:dc:55:b4:89:e8:fb:1f:e8:aa:15:50:
                    d3:9a:24:3f:b1:d5:b8:4b:18:67:43:ff:33:80:e8:
                    5f:98:c8:25:2b:e6:00:9b:a7:7d:9a:36:63:f5:b3:
                    5a:8d:d8:da:c3:7d:d4:d8:0b:20:72:a5:43:c3:c7:
                    4a:2c:a4:ec:8b:b4:6b:11:dd:5f:b7:1c:b0:5b:07:
                    bf:db:d7:ec:2f:64:b3:c6:82:04:30:21:a0:b2:07:
                    e8:15:48:21:d9:0a:55:59:25:4b:bc:43:ef:fd:9f:
                    ef:19:d8:4c:65:b3:be:4d:a5:f7:ac:3e:61:db:2d:
                    c2:34:80:fe:5b:49:b0:6c:5c:93:3c:47:bb:3c:1d:
                    bb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B8:51:84:72:84:9B:4F:A3:20:06:09:CE:95:1F:C8:DD:C7:3F:C6
            X509v3 Authority Key Identifier:
                keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d9:8e:90:97:3e:5b:e8:de:af:2a:2e:02:82:73:3f:ff:f2:
         43:fa:a2:ca:35:2e:3a:8e:5f:ad:34:d8:d2:42:77:11:aa:15:
         3f:cb:82:5e:67:91:42:52:05:54:39:a5:e3:7d:ce:39:be:b7:
         f2:f3:02:8b:2e:bf:16:be:38:1e:ee:07:c7:fb:1a:08:bb:dc:
         04:09:1a:a9:9d:13:a3:c0:1b:84:82:d3:63:ec:d8:21:6e:1b:
         d2:07:9b:fe:9b:81:19:bc:c1:d0:de:42:6a:3f:d3:f6:c7:7a:
         cd:85:a4:fc:8a:f3:aa:f8:9e:dc:d1:69:b6:9f:67:a8:53:43:
         bf:d5:52:d8:76:cf:f4:c1:3a:7e:16:90:98:81:ba:1e:ea:8a:
         68:17:98:02:0f:1a:7e:04:ca:ef:41:0d:5e:58:12:fc:15:b0:
         5f:31:c7:3b:37:da:af:64:db:ff:23:59:6c:74:5d:f2:0f:01:
         0a:71:0c:d5:34:f3:2a:17:51:31:53:fa:02:5f:3b:b7:81:99:
         a7:6c:11:60:14:03:c1:18:10:39:69:62:fc:b2:8c:0b:f9:d4:
         ad:37:8c:0c:d9:dd:ee:b8:b9:5f:d1:93:3d:f2:c3:66:5b:c5:
         cf:3e:b3:c0:30:6e:3d:e7:89:23:11:3f:24:b4:89:cf:b3:44:
         a1:31:59:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:47:44 2026 by rpki-client