Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
File:                     q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft (raw, json)
Hash identifier:          eVav5H+PSD+QVwU4z2NE1pDxGUt9TBsavjpnszvwyO8=
Subject key identifier:   7E:0C:69:EF:44:04:4D:3A:94:E2:D2:36:CD:A2:20:94:54:AE:AD:94
Authority key identifier: AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
Certificate issuer:       /CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Certificate serial:       019ED386DC19AD912F2F95C88D11ABA60025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
Manifest number:          0CE8
Signing time:             Wed 17 Jun 2026 03:01:31 +0000
Manifest this update:     Wed 17 Jun 2026 03:01:31 +0000
Manifest next update:     Thu 18 Jun 2026 03:01:31 +0000
Files and hashes:         1: gefx2fr_MDXtvtuWxylmxEbY_9I.roa (hash: DoV6a6Zcce+W+t7QXHihpVY0/SyCf2V+1wNo94geZZ0=)
                          2: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl (hash: 7CL8V6U5kVE+vu/o7HDLSY2qQ95SCPylMLnppJixqiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:86:dc:19:ad:91:2f:2f:95:c8:8d:11:ab:a6:00:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf587571c0c698458c385b15d60c7f08c70b6fe
        Validity
            Not Before: Jun 17 03:01:31 2026 GMT
            Not After : Jun 18 03:01:31 2026 GMT
        Subject: CN=7e0c69ef44044d3a94e2d236cda2209454aead94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:82:51:fb:6b:f9:91:41:98:b3:23:97:ec:f4:
                    b7:30:e1:ff:8a:21:d7:b2:70:62:6e:10:b6:36:e2:
                    5d:2b:d8:7d:ca:6d:b9:43:67:32:be:f6:83:93:10:
                    eb:43:2a:4a:3c:54:6a:36:05:87:cd:bd:0f:74:83:
                    89:40:5e:dc:00:48:2b:a8:4c:43:ef:db:8e:22:44:
                    a3:e8:f2:53:f1:2b:33:7a:89:b7:cb:e2:fc:80:a5:
                    22:40:ba:a5:2b:c3:8c:81:2b:71:a3:cc:3a:77:22:
                    df:aa:13:51:65:63:10:6f:d5:0e:4b:1f:07:8b:06:
                    34:9b:33:43:3f:b8:95:2c:34:d9:47:64:02:da:50:
                    73:21:8a:01:37:cf:36:f5:e8:53:86:00:0c:d7:ec:
                    a8:e2:d4:f5:c6:13:50:99:6a:af:87:d6:e8:aa:93:
                    f3:63:06:fe:20:b8:95:f3:2d:3b:1e:87:04:f4:45:
                    9a:be:8c:ca:e4:a4:7c:77:14:59:3e:0a:11:df:22:
                    48:81:f3:98:4f:53:41:90:65:bc:f6:e1:ea:60:9a:
                    00:e0:0b:4a:f7:c8:b5:54:f8:25:3c:cc:d8:96:a5:
                    4d:d5:d0:c2:f3:73:25:c1:cc:a1:33:33:ba:93:61:
                    39:61:6e:10:c5:a0:4e:83:1e:90:1a:92:de:0c:d9:
                    40:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0C:69:EF:44:04:4D:3A:94:E2:D2:36:CD:A2:20:94:54:AE:AD:94
            X509v3 Authority Key Identifier:
                keyid:AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d6:fb:f6:72:eb:e8:e2:a9:f1:b1:4c:dc:b8:1f:51:90:a1:
         2b:99:5b:9c:d4:7b:19:ba:cc:91:8c:31:d7:7f:d1:13:f2:a4:
         96:09:11:bb:fd:8c:af:14:0a:2a:18:88:61:b6:6d:5e:e9:ba:
         e5:13:75:2a:81:eb:db:2a:98:92:22:4f:33:c3:32:2e:01:42:
         01:c4:1c:42:38:2e:65:4e:57:59:16:8b:1e:9f:62:bb:71:f4:
         3b:04:f2:88:83:94:ea:11:78:f3:5b:2b:d3:7a:a9:eb:1d:ef:
         fd:69:c8:1b:c6:cd:06:84:8a:8e:c8:91:9f:a7:a7:9a:21:40:
         9c:d8:fc:bc:ef:3a:44:dd:68:d3:d6:b5:2b:04:f4:7f:86:c5:
         91:b1:cf:08:ff:f3:f1:ab:3d:29:fa:94:fc:aa:d5:67:36:09:
         da:2e:da:2a:77:f8:05:8c:6e:a1:3e:5d:6f:25:c6:87:04:82:
         6b:97:6a:de:a3:85:4b:5f:35:ff:99:55:2a:47:3f:e3:44:73:
         f9:94:45:58:f4:fd:93:14:be:8e:b2:e8:bc:e8:3f:0d:6e:aa:
         a6:38:aa:7c:9b:84:73:6b:3f:ad:6f:25:c8:00:28:f9:c0:84:
         e0:8f:f9:ad:26:c2:cc:86:10:be:93:a1:2b:5d:87:0d:73:98:
         6d:51:b8:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ThtwZrZEvL5XIjRGrpgAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZjU4NzU3MWMwYzY5ODQ1OGMzODViMTVkNjBjN2YwOGM3
MGI2ZmUwHhcNMjYwNjE3MDMwMTMxWhcNMjYwNjE4MDMwMTMxWjAzMTEwLwYDVQQD
Eyg3ZTBjNjllZjQ0MDQ0ZDNhOTRlMmQyMzZjZGEyMjA5NDU0YWVhZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYJR+2v5kUGYsyOX7PS3MOH/iiHX
snBibhC2NuJdK9h9ym25Q2cyvvaDkxDrQypKPFRqNgWHzb0PdIOJQF7cAEgrqExD
79uOIkSj6PJT8Sszeom3y+L8gKUiQLqlK8OMgStxo8w6dyLfqhNRZWMQb9UOSx8H
iwY0mzNDP7iVLDTZR2QC2lBzIYoBN8829ehThgAM1+yo4tT1xhNQmWqvh9boqpPz
Ywb+ILiV8y07HocE9EWavozK5KR8dxRZPgoR3yJIgfOYT1NBkGW89uHqYJoA4AtK
98i1VPglPMzYlqVN1dDC83MlwcyhMzO6k2E5YW4QxaBOgx6QGpLeDNlACQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4Mae9EBE06lOLSNs2iIJRUrq2UMB8GA1UdIwQY
MBaAFKv1h1ccDGmEWMOFsV1gx/CMcLb+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcV9XSFZ4d01hWVJZdzRXeFhXREg4SXh3dHY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85ZDhiODItNDdhZS00ZTEyLTlhNGQt
NzgyZmU3MDkyMDEwLzEvcV9XSFZ4d01hWVJZdzRXeFhXREg4SXh3dHY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi85ZDhiODItNDdhZS00ZTEyLTlhNGQtNzgyZmU3MDkyMDEw
LzEvcV9XSFZ4d01hWVJZdzRXeFhXREg4SXh3dHY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnNb79nLr
6OKp8bFM3LgfUZChK5lbnNR7GbrMkYwx13/RE/KklgkRu/2MrxQKKhiIYbZtXum6
5RN1KoHr2yqYkiJPM8MyLgFCAcQcQjguZU5XWRaLHp9iu3H0OwTyiIOU6hF481sr
03qp6x3v/WnIG8bNBoSKjsiRn6enmiFAnNj8vO86RN1o09a1KwT0f4bFkbHPCP/z
8as9KfqU/KrVZzYJ2i7aKnf4BYxuoT5dbyXGhwSCa5dq3qOFS181/5lVKkc/40Rz
+ZRFWPT9kxS+jrLovOg/DW6qpjiqfJuEc2s/rW8lyAAo+cCE4I/5rSbCzIYQvpOh
K12HDXOYbVG4gQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:06:00 2026 by rpki-client