Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
File:                     QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft (raw, json)
Hash identifier:          VJgKMs1Kj1Lt7kgWyTFXgeQPpVFH6owLNYv1tC31/pM=
Subject key identifier:   AF:79:FD:50:94:01:A1:C2:A1:21:A1:1F:82:1D:F9:FC:8B:25:3F:53
Authority key identifier: 40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44
Certificate issuer:       /CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
Certificate serial:       019EC2C9B652FA4A18E34BECB6CBEF38572E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
Manifest number:          11A2
Signing time:             Sat 13 Jun 2026 21:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:59 +0000
Files and hashes:         1: 2R98f3LcbdjJTK1zEivNVdv9lT4.roa (hash: wn+9EbMSH6lI4fh4eFap7qXQCiZwpo0SPOjzWLLKAfo=)
                          2: JNIABgZFmaWxjr_C6leE2KJ6tTA.roa (hash: U+MKLIrsfWPb0hJeiOLmKOB38yCKlAGbLyA4d1nN0Hs=)
                          3: QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl (hash: 3HC5F66sR4IAf3PYx3nrYryNj/37Ee0AP57lu1T8ALA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 21:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:b6:52:fa:4a:18:e3:4b:ec:b6:cb:ef:38:57:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40fac6a32fe4baa7d89b91ec5165a3d96688e144
        Validity
            Not Before: Jun 13 21:00:59 2026 GMT
            Not After : Jun 14 21:00:59 2026 GMT
        Subject: CN=af79fd509401a1c2a121a11f821df9fc8b253f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:29:f2:68:40:94:37:c3:80:6d:5a:a9:6a:9b:
                    96:d2:f4:60:fd:c6:4e:1d:eb:fd:e1:b4:a8:b2:55:
                    6f:5b:6b:d6:81:87:4d:b8:71:cc:65:7b:6d:fd:23:
                    f4:eb:b4:1e:0b:f5:59:23:89:20:74:39:0d:e9:46:
                    59:af:82:3a:24:34:38:21:37:5b:81:e6:04:c6:08:
                    be:74:30:bb:47:f3:a8:ba:c6:ae:67:97:00:ec:4b:
                    f6:20:2d:d9:02:66:e8:75:f7:37:b4:8c:5f:44:67:
                    90:86:0a:56:bb:64:55:67:e5:94:e0:14:c8:8a:d3:
                    7f:42:c0:c7:8a:d7:d5:a3:16:6e:a7:3b:e5:38:d2:
                    06:62:39:0a:fb:78:0d:49:ef:3c:18:75:cc:76:30:
                    5f:f5:98:8d:42:3b:94:e6:17:77:85:f2:ee:b5:a9:
                    9a:79:3e:3c:78:b6:08:b7:67:0a:0a:dc:34:77:d9:
                    0e:5c:60:8a:8a:c8:a4:31:6a:63:27:72:3c:5e:72:
                    5a:96:1c:40:ab:95:22:76:3c:86:6c:20:f8:81:91:
                    59:e5:fc:15:ab:eb:c9:d6:03:da:91:61:7f:02:c9:
                    cb:1d:91:eb:7c:99:a1:90:98:2b:8f:f7:a1:99:c2:
                    02:dd:fe:3e:63:51:2e:3c:df:20:2b:02:8d:97:49:
                    de:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:79:FD:50:94:01:A1:C2:A1:21:A1:1F:82:1D:F9:FC:8B:25:3F:53
            X509v3 Authority Key Identifier:
                keyid:40:FA:C6:A3:2F:E4:BA:A7:D8:9B:91:EC:51:65:A3:D9:66:88:E1:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/629cb2-2b4d-4748-bb11-c9fe0ba28647/1/QPrGoy_kuqfYm5HsUWWj2WaI4UQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f9:f8:9e:5a:88:ed:f0:f9:f0:54:b5:f2:b4:e2:ed:b7:a8:
         b6:97:f9:94:2a:c3:1c:0f:94:71:a9:e5:de:1e:0e:a0:f7:8b:
         2b:81:67:3c:3b:ca:e4:23:6f:bf:4b:c9:17:59:68:9f:f9:a9:
         52:cb:e7:b1:9e:f7:e2:08:7c:b5:ed:3d:51:84:3e:39:71:68:
         03:f5:7a:0a:92:fa:9b:17:f4:cd:18:1b:58:34:b7:a6:39:43:
         9a:54:b4:1a:3d:92:e2:4f:87:fc:33:44:b8:85:31:a4:97:5e:
         2f:a2:86:e7:2a:b1:a1:c9:b2:70:b0:d3:61:67:82:c1:88:5f:
         4b:a4:ed:58:b2:5f:4c:30:42:f2:ba:1d:ba:d8:75:e8:56:a3:
         b0:24:54:66:2c:73:87:38:9d:ed:ee:33:ba:c5:f3:33:39:99:
         49:a1:a2:0e:23:3d:de:e0:76:28:62:e5:e1:97:8c:16:e2:16:
         e4:ab:6b:b9:2b:28:d8:08:42:98:0a:46:7d:db:2c:be:89:da:
         4f:6f:99:bd:d2:c7:a9:de:e3:37:c3:b9:c5:e9:a7:c1:cd:7b:
         b8:92:94:61:bf:1b:e9:7f:c2:2a:83:8c:b5:3f:e1:46:36:72:
         ff:a1:29:d8:47:e2:49:2b:9d:4b:6c:4c:3d:2e:6d:57:f5:82:
         79:11:09:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:25 2026 by rpki-client