Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
File:                     qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json)
Hash identifier:          MaeeV8VViumKIAveSlfVoitveh/D1nOcrAqsad9AX/A=
Subject key identifier:   A1:B2:14:CC:AD:07:C6:13:CB:3A:2E:96:B2:2B:1F:8E:3F:B7:77:6B
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Certificate issuer:       /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial:       019F129C16E841E14E1ACE6B61C81F28EBD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
Manifest number:          0B58
Signing time:             Mon 29 Jun 2026 09:00:47 +0000
Manifest this update:     Mon 29 Jun 2026 09:00:47 +0000
Manifest next update:     Tue 30 Jun 2026 09:00:47 +0000
Files and hashes:         1: KkyFxTRdXEokTgrrlmxAqjiu7ZQ.roa (hash: xjVxn6VE0DsxVNBeCrJPg5ZSsJvDyeaJISylTts3lDo=)
                          2: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: yb26ZpVPzX+lvDMygbsiMxV+nKVz5qMtH4QZ7ap+jp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 09:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:9c:16:e8:41:e1:4e:1a:ce:6b:61:c8:1f:28:eb:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
        Validity
            Not Before: Jun 29 09:00:47 2026 GMT
            Not After : Jun 30 09:00:47 2026 GMT
        Subject: CN=a1b214ccad07c613cb3a2e96b22b1f8e3fb7776b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0e:90:4a:b4:aa:a1:85:be:c9:78:c6:29:5e:
                    22:02:6c:dd:5b:71:bd:45:ec:2f:15:6e:56:91:a5:
                    13:5e:f3:f5:2f:cb:2e:95:0c:a1:08:fc:a7:7f:f9:
                    a0:08:ad:89:85:a2:dd:ea:eb:c6:d0:d8:c2:f4:29:
                    15:df:6e:46:d7:d2:eb:7e:3b:1e:02:17:3c:6d:94:
                    eb:e2:d1:a7:07:97:fa:76:27:02:86:8a:b6:15:33:
                    74:62:89:d1:c0:fc:16:9b:9e:73:12:a2:86:80:1c:
                    87:5d:23:62:58:18:3d:ff:98:c0:f9:4b:a2:7d:11:
                    10:27:7f:44:ec:0b:91:23:67:7d:ba:98:c5:9e:2f:
                    76:4b:48:9a:cd:d2:c0:f2:79:95:87:51:31:4f:b4:
                    42:60:ad:82:62:5f:97:b9:f3:a8:35:6d:d5:e1:66:
                    71:2f:93:5c:2a:b0:bd:17:ba:b8:75:61:ca:18:12:
                    49:e9:bc:13:cd:fc:77:8b:50:26:fa:30:33:1e:11:
                    d3:9c:be:37:84:f0:e2:8e:92:e9:a1:65:66:c0:81:
                    1f:17:dd:ac:13:4a:15:b0:8f:02:43:95:fd:43:76:
                    6c:22:41:c4:69:50:bc:ea:df:df:85:83:26:50:dd:
                    b3:5e:d7:d6:03:31:ef:ec:c0:e4:75:5e:e4:d8:5c:
                    2c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B2:14:CC:AD:07:C6:13:CB:3A:2E:96:B2:2B:1F:8E:3F:B7:77:6B
            X509v3 Authority Key Identifier:
                keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:53:aa:6a:6d:5b:e8:1e:23:2f:ab:8e:4c:68:59:bb:e3:b6:
         fc:a5:81:ed:b6:22:f6:a1:8e:65:ca:3e:b5:50:bf:7b:51:57:
         36:37:73:92:b7:89:fd:3c:e4:4d:4a:e3:b8:50:ea:11:b7:df:
         ac:7f:6f:ee:52:1b:b9:51:c4:b3:48:40:8d:ea:37:b5:5c:0a:
         d8:1a:42:1f:63:30:ed:8d:8f:bf:82:06:73:7b:c9:6d:a6:8d:
         8c:4d:aa:ce:26:47:90:75:29:15:46:ac:da:4a:ec:0e:5b:ea:
         91:2b:75:ed:4f:39:62:f5:2b:25:57:9c:af:13:9e:d6:48:9b:
         70:a7:e2:7b:38:00:b3:3e:af:d7:0d:11:6d:45:c6:2a:43:08:
         64:f2:d8:a3:02:88:a2:da:5c:be:6b:e1:7b:95:0f:7d:55:a4:
         6a:c2:c1:ae:1a:59:57:d9:85:ce:3f:96:61:e3:09:c6:86:98:
         29:a4:f6:f9:a3:bb:f2:69:0e:be:9e:ce:62:c0:1a:d3:cf:95:
         e8:03:a7:7e:aa:8a:d1:b1:80:11:c3:bf:34:5c:46:2a:6d:fb:
         c5:f9:07:94:a9:ad:34:8e:a5:cf:4a:78:58:c8:11:3d:40:4b:
         70:bf:08:fd:a9:2e:c5:34:5f:89:6e:72:df:0c:f9:6a:99:8a:
         3f:dd:23:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SnBboQeFOGs5rYcgfKOvZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NmUyMzQxZDc4M2U1OTM0Zjg3ZDA1YzQ3M2ZjNmQyYjMw
ZDlkNDUwHhcNMjYwNjI5MDkwMDQ3WhcNMjYwNjMwMDkwMDQ3WjAzMTEwLwYDVQQD
EyhhMWIyMTRjY2FkMDdjNjEzY2IzYTJlOTZiMjJiMWY4ZTNmYjc3NzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA6QSrSqoYW+yXjGKV4iAmzdW3G9
RewvFW5WkaUTXvP1L8sulQyhCPynf/mgCK2JhaLd6uvG0NjC9CkV325G19Lrfjse
Ahc8bZTr4tGnB5f6dicChoq2FTN0YonRwPwWm55zEqKGgByHXSNiWBg9/5jA+Uui
fREQJ39E7AuRI2d9upjFni92S0iazdLA8nmVh1ExT7RCYK2CYl+XufOoNW3V4WZx
L5NcKrC9F7q4dWHKGBJJ6bwTzfx3i1Am+jAzHhHTnL43hPDijpLpoWVmwIEfF92s
E0oVsI8CQ5X9Q3ZsIkHEaVC86t/fhYMmUN2zXtfWAzHv7MDkdV7k2FwsOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGyFMytB8YTyzoulrIrH44/t3drMB8GA1UdIwQY
MBaAFKluI0HXg+WTT4fQXEc/xtKzDZ1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYt
NmQ0MjI1N2M4ZjZiLzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYtNmQ0MjI1N2M4ZjZi
LzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvVOqam1b
6B4jL6uOTGhZu+O2/KWB7bYi9qGOZco+tVC/e1FXNjdzkreJ/TzkTUrjuFDqEbff
rH9v7lIbuVHEs0hAjeo3tVwK2BpCH2Mw7Y2Pv4IGc3vJbaaNjE2qziZHkHUpFUas
2krsDlvqkSt17U85YvUrJVecrxOe1kibcKfiezgAsz6v1w0RbUXGKkMIZPLYowKI
otpcvmvhe5UPfVWkasLBrhpZV9mFzj+WYeMJxoaYKaT2+aO78mkOvp7OYsAa08+V
6AOnfqqK0bGAEcO/NFxGKm37xfkHlKmtNI6lz0p4WMgRPUBLcL8I/akuxTRfiW5y
3wz5apmKP90jcw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 15:44:47 2026 by rpki-client