Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.mft
File:                     QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.mft (raw, json)
Hash identifier:          5uyCudqJm6TlWywJNiPnkWrYV4Pjz3ZqIgADrjzpXgo=
Subject key identifier:   0D:04:F0:DF:08:49:61:10:2F:54:B6:16:84:F3:6A:58:1C:45:E9:33
Authority key identifier: 41:47:F2:EE:0E:D0:E1:7A:73:B1:9F:98:29:D0:09:CB:57:5A:AB:74
Certificate issuer:       /CN=4147f2ee0ed0e17a73b19f9829d009cb575aab74
Certificate serial:       019F36AA7D432256EF4E4C70D37898D21CE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.mft
Manifest number:          11
Signing time:             Mon 06 Jul 2026 09:02:50 +0000
Manifest this update:     Mon 06 Jul 2026 09:02:50 +0000
Manifest next update:     Tue 07 Jul 2026 09:02:50 +0000
Files and hashes:         1: 4f6TNmLDfwHmEzXslemxRywKRJQ.roa (hash: 3/6yha2Tky/PNq7zE0ksBiNawuvZxQxEI/c3nZdX/Jc=)
                          2: KXyGC29qrMAzOy7hPyA4y-RQuK4.roa (hash: raUVJLpa/Uin1LtZwfZMQtZTj9i0teHFGh8Qpqgiq7s=)
                          3: QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.crl (hash: o9xAkPps8AO4qganksv5UT1NzjxftP/CZb1JBQ/tBOo=)
                          4: T9U_9aCGiUQ96-pJqxgiDH8exms.roa (hash: wRu2cenF8ghXwJGX9GjCVKhP6rqYX/Q0mGOrSgXjY/0=)
                          5: yrMgEtFjCVSsCMn7YjkSj19StGc.roa (hash: hGOie0hBu6eRXEMbsuifURbA1uzoiAH8L5Iguxnz680=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 09:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:36:aa:7d:43:22:56:ef:4e:4c:70:d3:78:98:d2:1c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4147f2ee0ed0e17a73b19f9829d009cb575aab74
        Validity
            Not Before: Jul  6 09:02:50 2026 GMT
            Not After : Jul  7 09:02:50 2026 GMT
        Subject: CN=0d04f0df084961102f54b61684f36a581c45e933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:51:4a:c7:a5:cc:15:03:62:d1:5b:61:ca:a8:
                    57:32:1b:e6:9c:cf:45:3c:92:39:05:09:5c:56:7e:
                    2c:4e:ab:2f:78:a6:d2:a9:b3:ef:b3:c1:c4:f5:98:
                    4e:3c:a0:0e:d0:b6:e1:cf:c1:6c:37:de:d7:04:42:
                    48:45:be:0c:18:76:f3:f3:0e:70:10:1c:f1:d9:c2:
                    c5:9c:68:71:5d:3d:c7:12:38:59:2e:43:ad:71:e9:
                    5b:6d:e3:ae:46:22:1a:7c:0a:92:dc:da:98:47:60:
                    1c:7f:fd:bd:cb:a1:f4:38:e9:b3:57:9a:21:80:7b:
                    63:fc:28:c0:ab:16:ac:f4:90:dc:e1:e5:80:03:1e:
                    7c:f4:fa:3e:e2:29:c2:b9:f6:2a:9f:d8:ae:40:1b:
                    8f:cb:49:e3:0b:ed:41:c5:98:2c:02:f8:32:df:72:
                    5d:90:82:2a:c4:7a:78:45:5b:64:6f:63:44:41:0d:
                    d7:04:4b:ec:d3:72:79:29:c0:a4:86:75:07:3b:29:
                    2b:6e:ac:ec:03:b5:88:22:d6:0b:97:ed:92:76:25:
                    d0:9a:03:17:db:ab:c8:aa:d7:1b:8b:e8:2d:ed:33:
                    12:2c:e9:2e:b0:6c:b5:3a:d7:2a:9e:fb:16:6a:24:
                    73:95:a8:ac:e2:88:6a:24:03:20:15:fb:f8:6c:ed:
                    df:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:04:F0:DF:08:49:61:10:2F:54:B6:16:84:F3:6A:58:1C:45:E9:33
            X509v3 Authority Key Identifier:
                keyid:41:47:F2:EE:0E:D0:E1:7A:73:B1:9F:98:29:D0:09:CB:57:5A:AB:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:73:4e:6c:74:59:f1:7c:18:82:f1:e9:1c:55:8d:bd:2b:3f:
         96:9f:e7:a9:e4:14:0b:2f:de:d1:99:f8:29:81:57:7f:a4:23:
         c3:33:af:89:52:a2:3d:50:4f:55:6e:ac:0a:50:d4:45:ad:39:
         c9:07:4e:3c:44:2d:f8:c6:b5:57:d8:6e:52:c2:dd:d2:21:21:
         69:ee:fd:06:fa:f8:5f:b3:4d:07:06:ac:80:dc:9d:15:2f:cb:
         06:e1:48:c3:1b:9d:9c:ac:2b:aa:81:6f:24:c4:8a:fe:15:93:
         f2:a7:ae:86:a8:b1:8b:6d:19:0e:91:8f:9d:72:10:0e:b4:8b:
         1f:c2:1a:84:94:59:23:22:13:c7:ce:77:45:de:c6:94:cd:43:
         ef:33:2a:3e:85:66:a4:3a:f8:8e:e8:97:9b:66:fa:8c:6b:41:
         ef:cc:a3:0d:90:5d:0c:2c:b1:d5:14:d4:3b:eb:73:13:a8:09:
         65:c5:0c:ef:38:86:b4:34:14:73:72:27:c5:c3:02:8d:20:c8:
         c4:09:cd:aa:e2:bf:43:16:51:7d:3e:c0:1b:31:1b:9b:b4:c0:
         93:32:89:9e:b7:42:43:6c:bd:cb:c3:ad:8a:06:e9:87:7a:32:
         13:16:7b:87:9b:2b:02:0a:fb:37:b1:a4:0d:49:6d:05:57:3c:
         06:25:d7:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ82qn1DIlbvTkxw03iY0hzmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNDdmMmVlMGVkMGUxN2E3M2IxOWY5ODI5ZDAwOWNiNTc1
YWFiNzQwHhcNMjYwNzA2MDkwMjUwWhcNMjYwNzA3MDkwMjUwWjAzMTEwLwYDVQQD
EygwZDA0ZjBkZjA4NDk2MTEwMmY1NGI2MTY4NGYzNmE1ODFjNDVlOTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VFKx6XMFQNi0VthyqhXMhvmnM9F
PJI5BQlcVn4sTqsveKbSqbPvs8HE9ZhOPKAO0Lbhz8FsN97XBEJIRb4MGHbz8w5w
EBzx2cLFnGhxXT3HEjhZLkOtcelbbeOuRiIafAqS3NqYR2Acf/29y6H0OOmzV5oh
gHtj/CjAqxas9JDc4eWAAx589Po+4inCufYqn9iuQBuPy0njC+1BxZgsAvgy33Jd
kIIqxHp4RVtkb2NEQQ3XBEvs03J5KcCkhnUHOykrbqzsA7WIItYLl+2SdiXQmgMX
26vIqtcbi+gt7TMSLOkusGy1OtcqnvsWaiRzlais4ohqJAMgFfv4bO3f8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0E8N8ISWEQL1S2FoTzalgcRekzMB8GA1UdIwQY
MBaAFEFH8u4O0OF6c7GfmCnQCctXWqt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVVmeTdnN1E0WHB6c1otWUtkQUp5MWRhcTNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hNGZmMzMtYjI5MC00MzA3LWFmYzgt
ZjUyMGE3ZDcxZWY1LzEvUVVmeTdnN1E0WHB6c1otWUtkQUp5MWRhcTNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9hNGZmMzMtYjI5MC00MzA3LWFmYzgtZjUyMGE3ZDcxZWY1
LzEvUVVmeTdnN1E0WHB6c1otWUtkQUp5MWRhcTNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXNObHRZ
8XwYgvHpHFWNvSs/lp/nqeQUCy/e0Zn4KYFXf6QjwzOviVKiPVBPVW6sClDURa05
yQdOPEQt+Ma1V9huUsLd0iEhae79Bvr4X7NNBwasgNydFS/LBuFIwxudnKwrqoFv
JMSK/hWT8qeuhqixi20ZDpGPnXIQDrSLH8IahJRZIyITx853Rd7GlM1D7zMqPoVm
pDr4juiXm2b6jGtB78yjDZBdDCyx1RTUO+tzE6gJZcUM7ziGtDQUc3InxcMCjSDI
xAnNquK/QxZRfT7AGzEbm7TAkzKJnrdCQ2y9y8Otigbph3oyExZ7h5srAgr7N7Gk
DUltBVc8BiXXrA==
-----END CERTIFICATE-----
Generated at Mon Jul 6 12:23:38 2026 by rpki-client