Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File:                     qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier:          pDurY+EZqgCXGZ8DIYkeuao/UDC9ljcEVIyZIQmz5gY=
Subject key identifier:   88:1D:EF:87:0D:CC:2C:B3:9E:86:6F:2B:79:3E:70:97:27:60:9F:FE
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer:       /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial:       019F118A488E4C060CFA9435B4E8E50B783F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number:          1462
Signing time:             Mon 29 Jun 2026 04:01:42 +0000
Manifest this update:     Mon 29 Jun 2026 04:01:42 +0000
Manifest next update:     Tue 30 Jun 2026 04:01:42 +0000
Files and hashes:         1: HYvKCcw-bAqCpd1NvqN2fLCuK_c.roa (hash: XoIkC6gkzv3SV50tLrqpWkzeeEIwqrXecB9Y4IUt8gc=)
                          2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: KWrf/3Gs+VDwj8Ac3jfGsRDwMzY/D7C4yp7RhCaYqGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:8a:48:8e:4c:06:0c:fa:94:35:b4:e8:e5:0b:78:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
        Validity
            Not Before: Jun 29 04:01:42 2026 GMT
            Not After : Jun 30 04:01:42 2026 GMT
        Subject: CN=881def870dcc2cb39e866f2b793e709727609ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:a4:26:36:ee:bd:64:84:d9:b7:bb:30:e7:
                    b8:21:6f:d4:64:20:41:b0:5d:4b:2a:f3:0f:8b:15:
                    f4:1e:85:5a:01:a5:6b:05:4a:60:79:01:b2:3e:06:
                    96:97:a8:a7:60:9a:7d:8c:36:cd:18:1b:34:18:c7:
                    12:e8:a2:f1:a0:ba:cc:7a:ce:af:2b:11:68:01:e1:
                    90:f4:e3:da:9b:1d:38:4c:e3:b8:2a:97:55:dd:c6:
                    83:47:00:91:b8:a0:39:23:3e:d5:d8:50:96:8f:c8:
                    ed:a0:6d:24:de:f6:be:92:5f:aa:43:47:0e:47:f0:
                    5b:83:90:f8:92:af:e2:1c:ae:81:5c:1b:37:41:a4:
                    7f:47:fc:e1:78:28:1e:bb:5e:12:0c:57:be:3d:68:
                    02:90:74:ee:46:a8:5b:2c:3b:2d:da:02:f0:b6:57:
                    1a:6c:91:b3:a2:e8:1d:48:1f:8b:eb:de:2d:e0:3f:
                    1d:27:fc:43:27:49:6c:93:76:6f:96:38:b4:84:73:
                    eb:04:34:10:55:24:5f:cc:68:b4:07:06:81:9e:94:
                    32:69:8f:86:e5:1f:ac:25:8e:df:7f:16:84:d1:f9:
                    cf:95:0a:d0:e1:1d:7a:7e:aa:ef:f9:68:19:ef:12:
                    07:85:d8:bd:26:f5:e0:42:4d:08:e1:07:63:d1:8e:
                    2a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1D:EF:87:0D:CC:2C:B3:9E:86:6F:2B:79:3E:70:97:27:60:9F:FE
            X509v3 Authority Key Identifier:
                keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d3:2e:24:bb:8f:da:4e:6c:ac:9b:c8:a5:2e:9d:4d:25:f1:
         80:5d:da:4e:77:5c:db:b7:37:e7:66:d7:6e:e1:5f:21:b7:db:
         f5:0d:3f:18:5b:09:58:f1:8c:22:96:c0:12:6a:14:60:4c:85:
         61:d3:12:fb:25:54:da:a6:7d:43:4d:2c:80:ea:fb:07:2d:d7:
         d6:b6:5b:91:b7:d7:bc:45:5b:f4:51:06:da:20:49:2e:e5:a2:
         97:92:26:14:cf:bc:6e:8e:37:9d:a7:f7:66:43:d2:9c:d4:f2:
         1e:ea:11:14:34:2f:ea:ea:4e:24:68:5c:90:e3:ab:d3:f3:2a:
         73:75:bf:db:9a:ca:fc:4b:f4:6e:ee:ff:15:cf:16:7c:5c:57:
         d3:68:13:e7:8e:cd:60:60:c8:57:bb:29:c8:1b:85:7b:b1:1d:
         76:f7:69:99:30:bc:eb:7b:21:34:f8:60:0d:6c:a4:7d:33:14:
         ec:92:b6:63:d8:75:60:f5:b2:b2:d2:57:d5:00:20:d3:4f:f8:
         f2:7c:07:2b:7b:7c:2d:cc:5d:6a:5a:92:39:f5:74:f1:18:e1:
         54:9d:db:48:d4:8b:27:cc:55:96:f3:93:b1:06:04:a7:e2:b1:
         f7:9a:05:b7:bc:e8:2f:dc:80:bd:88:98:7c:cc:7d:d4:02:b2:
         33:f2:4e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:59 2026 by rpki-client