Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File:                     qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier:          keeOvRwMpb2ZtWBVagCVbmSbygZiVT+YnbHqxRu7YmQ=
Subject key identifier:   48:8D:56:FC:58:52:E3:0F:AB:4B:81:86:D3:FC:7A:89:05:78:6C:F4
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer:       /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial:       019EBF23B15AFA51950A4970FDC50763E477
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number:          117B
Signing time:             Sat 13 Jun 2026 04:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:47 +0000
Files and hashes:         1: bDniOy7bJDqEB7j18XhIORHd9P4.roa (hash: 7UeZ8ffZs41TrgD9TFvep3setoYXza5q1+hwG2ZnLPc=)
                          2: ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa (hash: bZXcOl6PpFz9za7K+EZymB9rux3LD9nnlgPnINrzVx8=)
                          3: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: 8gt7V331J4RgGJIvPU7Z3EwvtATYHbKHA0VQrhkeY3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:b1:5a:fa:51:95:0a:49:70:fd:c5:07:63:e4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
        Validity
            Not Before: Jun 13 04:00:47 2026 GMT
            Not After : Jun 14 04:00:47 2026 GMT
        Subject: CN=488d56fc5852e30fab4b8186d3fc7a8905786cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:12:57:0e:d5:96:6c:2a:c1:4e:a2:05:14:5f:
                    9a:24:50:d8:ba:43:c1:2e:82:c0:1e:cd:ff:77:9e:
                    a8:d9:9d:cb:0f:35:b0:1f:dd:15:a8:18:21:19:87:
                    97:66:95:ad:f6:c1:c0:6a:a9:7b:0b:a5:27:15:21:
                    81:e2:c1:8d:e3:5a:7a:eb:30:66:0f:f9:44:dd:37:
                    b3:73:eb:3b:72:eb:0e:55:44:7e:e3:34:26:68:b4:
                    14:f5:e8:38:ff:a4:f7:26:28:54:cf:28:f3:dc:63:
                    8b:6e:fd:d1:56:6b:f1:c2:85:bb:fc:ed:09:66:0b:
                    4b:b5:7f:d4:51:e0:4b:3f:fd:36:ec:b8:c9:e1:89:
                    34:b7:29:93:d4:50:7d:a0:5e:9a:2f:45:ff:32:66:
                    6b:3f:1f:4c:c1:2c:20:ad:ff:95:d8:c9:40:6b:b4:
                    14:5a:81:ce:c5:e8:24:19:38:2f:cc:4e:72:25:96:
                    9a:cf:74:ec:3e:08:3b:50:a6:cb:4f:78:ad:88:04:
                    58:7a:9b:c2:af:14:59:11:94:5f:ae:a1:e0:55:3a:
                    97:3c:af:ab:65:d1:a8:1d:3f:f2:22:89:10:df:40:
                    d2:47:0e:ff:28:63:61:d8:f5:35:17:ed:b9:df:bc:
                    48:c6:71:8e:e8:63:fd:ab:8b:00:c8:21:c4:f2:52:
                    6d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8D:56:FC:58:52:E3:0F:AB:4B:81:86:D3:FC:7A:89:05:78:6C:F4
            X509v3 Authority Key Identifier:
                keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:35:bf:fb:a9:b4:19:8c:e4:9d:f5:90:9d:f8:3e:82:de:bc:
         fd:ed:55:54:be:8f:56:11:9b:15:60:15:c8:f3:15:26:55:7b:
         72:19:b7:35:12:33:a7:74:74:d2:39:4b:61:ce:4a:a0:e8:34:
         0a:8f:38:38:2d:3f:46:ca:79:95:19:61:83:b8:54:ea:5a:15:
         9a:a8:ef:cd:47:e8:13:12:ce:26:d0:be:7f:0d:53:e7:7e:7b:
         57:24:d7:1e:f2:1c:f1:94:71:c9:98:12:41:dd:4f:eb:94:62:
         b5:11:95:37:2f:a9:cc:1c:ad:ba:1a:32:6b:14:56:58:44:87:
         98:68:17:f5:e4:59:3f:e1:3e:0f:e2:07:f6:60:2b:34:cb:22:
         37:67:ad:e4:44:db:aa:cf:22:0a:98:4b:2f:7a:39:68:00:b5:
         6e:d3:f9:ed:cc:d3:2d:2c:85:62:b7:5f:cc:cf:2c:23:9e:e2:
         ae:e0:ee:de:4a:fe:e8:f6:69:b6:58:93:5f:76:83:9d:e5:89:
         7f:aa:a8:bf:f3:6d:72:56:c9:71:c3:8b:ec:9a:c0:72:ed:e6:
         1d:97:f7:e5:9f:12:3a:fd:72:72:8e:4e:97:07:fd:68:06:65:
         37:d0:f6:46:d5:5a:9a:3e:c3:7b:26:7b:5b:3e:70:a7:0d:d4:
         b6:15:15:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/I7Fa+lGVCklw/cUHY+R3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTdjNzQ1M2YzNzdlOWNiNmZhZTVjODkzYzA2N2EzZTFk
MzUxNDUwHhcNMjYwNjEzMDQwMDQ3WhcNMjYwNjE0MDQwMDQ3WjAzMTEwLwYDVQQD
Eyg0ODhkNTZmYzU4NTJlMzBmYWI0YjgxODZkM2ZjN2E4OTA1Nzg2Y2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBJXDtWWbCrBTqIFFF+aJFDYukPB
LoLAHs3/d56o2Z3LDzWwH90VqBghGYeXZpWt9sHAaql7C6UnFSGB4sGN41p66zBm
D/lE3Tezc+s7cusOVUR+4zQmaLQU9eg4/6T3JihUzyjz3GOLbv3RVmvxwoW7/O0J
ZgtLtX/UUeBLP/027LjJ4Yk0tymT1FB9oF6aL0X/MmZrPx9MwSwgrf+V2MlAa7QU
WoHOxegkGTgvzE5yJZaaz3TsPgg7UKbLT3itiARYepvCrxRZEZRfrqHgVTqXPK+r
ZdGoHT/yIokQ30DSRw7/KGNh2PU1F+2537xIxnGO6GP9q4sAyCHE8lJtmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiNVvxYUuMPq0uBhtP8eokFeGz0MB8GA1UdIwQY
MBaAFKgXx0U/N36ctvrlyJPAZ6Ph01FFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS85NWFhMjQtZTg0Zi00MjQ1LTkyMjct
ZGVjNjgwODNmOGY2LzEvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS85NWFhMjQtZTg0Zi00MjQ1LTkyMjctZGVjNjgwODNmOGY2
LzEvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzDW/+6m0
GYzknfWQnfg+gt68/e1VVL6PVhGbFWAVyPMVJlV7chm3NRIzp3R00jlLYc5KoOg0
Co84OC0/Rsp5lRlhg7hU6loVmqjvzUfoExLOJtC+fw1T5357VyTXHvIc8ZRxyZgS
Qd1P65RitRGVNy+pzBytuhoyaxRWWESHmGgX9eRZP+E+D+IH9mArNMsiN2et5ETb
qs8iCphLL3o5aAC1btP57czTLSyFYrdfzM8sI57iruDu3kr+6PZptliTX3aDneWJ
f6qov/NtclbJccOL7JrAcu3mHZf35Z8SOv1yco5Olwf9aAZlN9D2RtVamj7DeyZ7
Wz5wpw3UthUVZw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:47:42 2026 by rpki-client