Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File:                     QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier:          n2zTC63r+dyJgByNq5O8brPMK5BWfGrTGFlBz2vIvDs=
Subject key identifier:   94:AF:A7:FB:54:59:A4:44:6C:9A:B4:CC:BA:F0:83:78:B8:82:1E:83
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer:       /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial:       019EC3A56FA08E4D4982305F282962E9D28A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number:          1699
Signing time:             Sun 14 Jun 2026 01:00:59 +0000
Manifest this update:     Sun 14 Jun 2026 01:00:59 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:59 +0000
Files and hashes:         1: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: dkWCCEokr47OjrfnYJBIDHLU1j3ROaOYuVbFzpct0tI=)
                          2: SsfnBHuvPDESg4pTMTaqtv9nT-Q.roa (hash: ZrITCydyp3ig8q1pUL+0pHbv4soXKIcGIYDQm4wHpvo=)
                          3: c-KZaw3UumwWkGCg1_3weGS8B-U.roa (hash: 2AcxA0Jqp/dgXDEXPcxhpKLcjp+xB4KSRrsphLc65kw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:6f:a0:8e:4d:49:82:30:5f:28:29:62:e9:d2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
        Validity
            Not Before: Jun 14 01:00:59 2026 GMT
            Not After : Jun 15 01:00:59 2026 GMT
        Subject: CN=94afa7fb5459a4446c9ab4ccbaf08378b8821e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:78:45:6f:04:77:77:14:e3:b9:48:5b:ec:
                    25:eb:74:04:fa:83:3d:b0:cd:02:4a:66:8b:35:49:
                    eb:1d:b2:a2:ed:cf:86:d7:63:1f:68:74:de:84:87:
                    19:00:9d:be:ca:12:3f:33:eb:d9:8e:33:00:6a:eb:
                    f4:6c:7b:3e:47:fb:3e:27:7b:f9:79:52:a2:0c:44:
                    02:f0:68:a3:78:4e:1d:8e:78:02:94:55:7c:c4:d8:
                    34:cc:f7:e9:c1:88:08:31:61:b5:39:ab:ba:64:95:
                    ca:13:03:8d:a6:ae:e7:d0:ec:18:d8:2c:63:70:09:
                    c4:89:8d:c8:ba:5c:c7:00:33:93:35:ac:87:94:cb:
                    5f:86:d1:34:01:72:7d:ef:78:f1:b5:5d:ba:40:10:
                    ad:0f:9b:75:b0:04:ac:30:b0:81:1c:70:da:2e:c9:
                    d0:38:b6:99:68:ed:01:be:cc:79:a6:92:fd:a0:55:
                    93:fd:f3:ad:7b:ce:f1:44:99:02:2c:70:8b:0b:93:
                    e4:64:e2:b3:15:f8:c1:1f:f9:c5:c6:f4:d0:ac:ed:
                    67:0b:19:91:2b:6d:eb:d4:5e:d1:99:54:b0:a4:8a:
                    08:62:bd:94:b0:d6:ab:4f:7f:61:27:71:8f:fb:ab:
                    92:ca:c9:12:72:be:1b:37:41:c1:ac:fd:39:90:3f:
                    06:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AF:A7:FB:54:59:A4:44:6C:9A:B4:CC:BA:F0:83:78:B8:82:1E:83
            X509v3 Authority Key Identifier:
                keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:04:96:49:4b:66:87:4c:08:e9:90:4d:f1:f1:ce:c9:27:39:
         95:0a:e9:7d:b9:cb:df:38:dd:e4:f5:16:52:be:4b:1f:02:36:
         a4:1d:71:71:de:6a:c4:9c:a4:be:60:d3:52:00:a1:40:83:cd:
         0e:9c:91:e9:56:0e:79:38:a3:4a:8d:03:1c:3e:5d:56:93:99:
         e9:22:db:a5:10:fe:5c:c0:84:cb:2f:35:68:31:ad:39:01:ef:
         34:4b:22:55:78:5e:b1:cf:ca:65:27:0d:0f:e2:6e:41:82:41:
         d9:87:6c:e2:c3:fb:6f:84:d7:ee:e8:9c:6b:32:ca:16:4c:c4:
         46:69:35:25:3a:b4:96:04:1a:86:2b:3b:87:fd:27:25:2c:23:
         5d:b8:a0:98:8a:91:a6:8f:2a:7e:55:c6:86:be:78:f2:cd:4f:
         b4:99:cd:cb:67:93:9f:1c:86:29:80:72:0b:52:76:51:83:fa:
         74:5a:2f:d6:a7:a5:14:49:0b:9d:3e:f3:20:06:4c:69:fb:e4:
         15:ea:65:c4:50:d3:e1:5a:2e:73:b0:3b:40:65:a7:dd:5b:a3:
         4b:c7:58:f0:09:1e:fd:c7:0d:d2:4d:82:bc:81:73:44:25:ef:
         b4:73:9f:4e:5d:10:78:e9:8b:2f:38:88:c9:7f:d1:31:a7:ff:
         3e:75:93:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:51:30 2026 by rpki-client