Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
File:                     qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft (raw, json)
Hash identifier:          iqmklIJ9zFYLynbe9K7ViN3LgtkwNaulHQcnscQPmqA=
Subject key identifier:   F8:99:00:9F:6F:9B:87:E2:D0:C1:93:AF:42:6A:28:76:2A:55:92:1C
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Certificate issuer:       /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial:       01A0201E4F33F557F29EC08D1DD4D8A806E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
Manifest number:          19B2
Signing time:             Thu 20 Aug 2026 17:00:52 +0000
Manifest this update:     Thu 20 Aug 2026 17:00:52 +0000
Manifest next update:     Fri 21 Aug 2026 17:00:52 +0000
Files and hashes:         1: HEgUCqwNNPF2Q09uNy1z0SF2eHk.roa (hash: nQkhhNw6S8PZEQHevPsGMLpoMsMwEk7juRVeNkbr0JM=)
                          2: jn0JJn7gaoXIjIZG9D82qZbLreU.roa (hash: LSPvb66GbUguyzdJ2arG3PXVq5iyU2uqoZTdf33Egv0=)
                          3: qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl (hash: Gw4axbnEA13LpivDrki8WQ5f6wI0IT2XnRBjWl/vheg=)
                          4: wA3yzq_z75jJrcxF21_yaXTLA1E.roa (hash: iBqEBSf11enOfh3VlmmIO8pdDcGFw1PdUgNRwZ2N9r8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 17:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:1e:4f:33:f5:57:f2:9e:c0:8d:1d:d4:d8:a8:06:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
        Validity
            Not Before: Aug 20 17:00:52 2026 GMT
            Not After : Aug 21 17:00:52 2026 GMT
        Subject: CN=f899009f6f9b87e2d0c193af426a28762a55921c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1c:a1:cf:5d:52:37:d7:73:73:08:63:7d:56:
                    13:71:de:1d:03:f8:7d:cc:66:b6:00:b2:7d:cd:95:
                    50:79:4a:df:24:04:49:c0:da:10:60:87:33:eb:37:
                    d1:c1:89:c1:cf:34:e6:c6:31:0b:d9:fa:e1:65:29:
                    26:87:33:89:53:52:8f:1e:0f:6d:b7:76:ac:09:c4:
                    5a:de:2e:ac:54:27:e6:db:79:59:91:12:66:81:dd:
                    15:42:23:ae:42:56:e4:ff:5a:3a:59:1e:65:98:b0:
                    f2:49:e4:9d:93:51:23:be:cd:a4:04:f3:b1:6b:42:
                    b2:77:31:bd:a5:14:cf:7d:d8:8c:e7:15:e5:5d:4f:
                    c0:1e:6f:f8:fe:22:ba:77:8e:46:32:51:ec:a8:ae:
                    62:d4:19:31:51:63:81:84:5c:85:53:9b:bb:82:1b:
                    2e:b6:4d:b9:5a:ca:fc:f7:78:65:7e:7c:75:bf:61:
                    1e:a4:bd:cd:be:bd:09:93:c0:e5:2a:fe:76:aa:4d:
                    c9:c2:7a:4b:3b:18:c9:95:74:7d:e9:64:7f:26:b1:
                    c3:db:f1:ff:6b:f4:72:77:f8:63:48:e2:21:18:44:
                    72:96:44:d6:75:21:03:1d:c1:c3:b4:12:ac:74:1f:
                    89:55:fe:03:22:c3:bf:6b:09:b8:f0:7e:b5:30:79:
                    ad:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:99:00:9F:6F:9B:87:E2:D0:C1:93:AF:42:6A:28:76:2A:55:92:1C
            X509v3 Authority Key Identifier:
                keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:fa:c6:2e:53:11:1f:0d:7d:79:5d:d3:44:b8:5f:6d:b0:04:
         8e:a2:69:56:38:32:74:0c:40:b1:36:f7:18:fa:0c:a1:57:6b:
         7f:90:55:09:9d:70:58:61:73:f5:ec:30:4a:6a:12:d5:63:c0:
         46:1b:9c:e3:ce:fb:19:bf:a4:cb:45:95:0c:ed:d5:55:85:63:
         36:e3:fb:b4:e1:09:c5:15:aa:8d:7a:58:24:41:71:be:80:4a:
         c0:68:9c:21:08:81:2f:c7:25:1e:b9:32:bd:95:2d:cb:3f:e1:
         a7:e4:e5:06:b4:f7:74:90:b4:50:7a:a0:fa:63:51:3f:71:7d:
         85:21:c2:4d:d2:e3:53:14:ec:f2:cd:91:f0:a2:03:35:e9:38:
         c4:f3:c3:a5:2e:d0:0e:10:2c:30:90:10:e2:0f:2b:3b:83:98:
         b4:68:ab:4e:f0:d9:cd:b0:49:2c:1f:50:9e:ad:20:b9:33:a5:
         1e:bb:3b:5f:34:97:9b:72:ec:44:9b:07:f5:9f:3a:43:28:41:
         8f:24:46:d1:31:35:86:2f:5a:f7:a5:ab:ac:a4:53:86:fc:b0:
         0a:49:34:9e:9d:39:cb:fb:83:c5:40:dc:98:61:96:36:f5:54:
         f0:66:40:50:72:ab:20:f2:3c:43:fa:7a:0d:11:78:b6:dd:e5:
         7e:24:fa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:11:30 2026 by rpki-client