Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
File:                     QtzU0b098prdQHW2jymvkHBHRDw.mft (raw, json)
Hash identifier:          7esAbb7DW/8BDRZnZ6eav1QZaoIYz13iIdHsPw/LYLs=
Subject key identifier:   BB:50:73:86:10:DD:FA:BD:18:4F:EF:F5:4B:5F:E4:3A:1A:2C:76:95
Authority key identifier: 42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C
Certificate issuer:       /CN=42dcd4d1bd3df29add4075b68f29af907047443c
Certificate serial:       01A002F02D4DF96D3892028DBBFE2E67A241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
Manifest number:          072F
Signing time:             Sat 15 Aug 2026 01:01:29 +0000
Manifest this update:     Sat 15 Aug 2026 01:01:29 +0000
Manifest next update:     Sun 16 Aug 2026 01:01:29 +0000
Files and hashes:         1: QtzU0b098prdQHW2jymvkHBHRDw.crl (hash: TeH1et7fj2MaMn18KYnRhO8qnzXoiYaMgDblwtETu9Q=)
                          2: lqPB-_tpvjZaRMURMIYlaL-x7v4.roa (hash: PwPNHJ6WdN+tYHjQQVUmAufUKj9CcNQAjnCYOsVYIJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:f0:2d:4d:f9:6d:38:92:02:8d:bb:fe:2e:67:a2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42dcd4d1bd3df29add4075b68f29af907047443c
        Validity
            Not Before: Aug 15 01:01:29 2026 GMT
            Not After : Aug 16 01:01:29 2026 GMT
        Subject: CN=bb50738610ddfabd184feff54b5fe43a1a2c7695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:33:c6:90:01:d9:95:4b:f6:b6:db:79:b7:50:
                    04:f3:40:4e:54:3c:96:35:f1:4a:c1:44:9f:77:a2:
                    75:94:7b:72:ba:21:5d:e5:b9:44:5c:a3:c1:58:16:
                    f7:a6:02:72:78:94:1a:62:fc:71:53:d4:72:26:24:
                    0d:00:e3:a8:54:da:98:36:6f:53:1f:b8:42:a6:b9:
                    8d:e9:d1:07:59:d4:3e:70:42:f6:b3:25:c7:c3:5b:
                    14:48:9e:f3:4c:56:3c:97:a7:84:99:50:48:8b:73:
                    f4:3b:a5:d9:9d:ff:20:50:b6:8f:62:2e:30:b8:b0:
                    f8:02:7d:17:c7:7c:d5:9d:24:04:54:f1:41:07:15:
                    c7:c9:f9:8d:6d:e4:14:e8:3e:9c:4f:6d:f3:c7:73:
                    0c:bb:a4:c5:1a:15:68:7b:18:1f:5e:25:8f:64:0c:
                    ee:40:b0:2f:ea:5e:c8:60:0a:b5:f3:8b:4e:7a:d0:
                    bf:d1:24:50:01:39:e0:8c:96:57:cd:8d:c0:8e:01:
                    0b:17:9b:74:8d:f6:81:17:d3:f3:52:fc:89:82:a2:
                    2d:11:04:ed:8f:4e:d2:c0:be:5b:66:14:da:98:f2:
                    fb:87:5d:68:fa:63:b0:7b:49:6f:41:bf:06:47:c3:
                    82:5c:48:f4:a1:da:cb:20:ff:ca:49:ec:7a:8e:0e:
                    ec:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:50:73:86:10:DD:FA:BD:18:4F:EF:F5:4B:5F:E4:3A:1A:2C:76:95
            X509v3 Authority Key Identifier:
                keyid:42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:97:bc:32:a3:ac:22:1e:7e:c1:0d:a6:27:a9:e0:18:db:7a:
         58:92:86:e8:55:7e:cb:4b:ea:27:94:1d:a4:7d:e0:f5:b9:1e:
         40:82:02:22:4d:29:a4:c2:12:42:6b:5b:e3:3f:98:d1:ef:53:
         60:c4:e6:46:39:73:de:66:f4:0f:5d:c1:b1:46:66:7a:88:92:
         0e:d9:bd:0e:05:18:e8:85:c6:75:24:4b:1b:14:ed:98:d8:e2:
         97:63:59:01:71:f6:fa:99:88:6e:c3:c1:de:3d:0f:43:c5:aa:
         b0:03:74:6c:48:03:55:ef:e5:62:2c:15:b1:e9:d0:b9:a2:46:
         a0:42:3f:b0:0b:81:a0:1f:d2:35:28:08:2e:2d:3f:5b:74:c1:
         ea:a2:c4:2e:fe:85:ff:56:1e:47:5d:06:2d:6e:dd:78:98:6a:
         a4:32:70:0a:27:ec:c6:70:75:d6:82:af:c4:cc:73:12:e5:0a:
         b9:46:54:1e:3d:05:ee:3b:c9:e2:bc:b4:06:01:b9:c7:80:a8:
         0d:b1:33:58:fb:3c:c8:0c:9f:82:81:6e:86:67:06:94:a2:2c:
         32:5c:bb:08:1c:a0:29:44:c3:df:d0:4e:f6:40:f5:95:4a:e5:
         f1:35:9e:e2:47:a9:be:47:83:11:20:a5:c5:22:6d:bd:e4:0f:
         ee:0f:86:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:07 2026 by rpki-client