Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
File:                     QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json)
Hash identifier:          v+KijRoMbKVGfKNewfumXl/pzQlbGAEiInuC+4AoTBA=
Subject key identifier:   67:17:5E:F7:99:FC:2F:67:B1:44:95:46:6E:2A:60:08:0C:50:5B:05
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Certificate issuer:       /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial:       019FAC768E69075F67F6EEFE71DE752D013E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
Manifest number:          19D5
Signing time:             Wed 29 Jul 2026 06:01:18 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:18 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:18 +0000
Files and hashes:         1: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: 7Wf7n/YR5fc8ts8A//MT1J8cvR/jF0bGM96WFMol6hg=)
                          2: muJold8C5TUMixIVaL6rH1BS38A.roa (hash: FbxuoRz2634QOjJkP7NzNJtkodYJ1wTVSJlQ4uQWs58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:8e:69:07:5f:67:f6:ee:fe:71:de:75:2d:01:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
        Validity
            Not Before: Jul 29 06:01:18 2026 GMT
            Not After : Jul 30 06:01:18 2026 GMT
        Subject: CN=67175ef799fc2f67b14495466e2a60080c505b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5f:38:42:98:14:c3:70:99:55:66:53:3f:b7:
                    b1:a9:cc:fb:de:78:3a:4c:4f:4e:3b:b7:e0:ca:01:
                    52:75:73:48:80:7b:35:ae:9f:ae:99:1d:bf:a1:00:
                    ad:00:30:96:0b:b0:33:f4:d9:ba:ae:c8:af:f2:99:
                    95:20:3e:f9:7c:3e:09:7a:fb:45:f0:f3:eb:89:b2:
                    68:e6:b9:7a:3a:34:33:1f:3b:e2:df:78:1b:55:31:
                    2a:53:a0:c8:e3:dc:d9:c0:91:77:29:74:45:aa:d6:
                    83:af:b6:13:0b:67:f0:b7:e3:85:4e:d7:c7:85:f5:
                    ac:24:b2:94:59:c8:30:d7:bd:4e:ec:7a:3d:b0:6e:
                    40:22:a8:5a:12:6a:85:c8:b4:9b:00:30:d5:cf:22:
                    78:2b:96:40:5b:61:c2:f4:0c:df:b4:48:a9:e9:d3:
                    d0:69:65:4b:97:e4:d7:84:73:2c:89:42:d0:a9:29:
                    3f:9b:db:0b:ff:2f:d8:4a:e3:b6:d3:39:ab:55:5f:
                    cc:9b:ef:6f:c3:11:7a:e4:e7:a8:9d:b9:89:37:c2:
                    11:26:42:16:07:18:00:7a:5f:73:26:8d:a9:2b:54:
                    15:a6:5a:b2:06:ab:24:ae:8d:fb:67:87:2d:c9:6d:
                    22:c8:db:aa:b7:53:bc:a2:32:b2:39:a2:d9:c2:e0:
                    0c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:17:5E:F7:99:FC:2F:67:B1:44:95:46:6E:2A:60:08:0C:50:5B:05
            X509v3 Authority Key Identifier:
                keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:fc:bf:eb:e7:7e:88:c1:35:56:50:9c:0c:f1:e5:b1:13:58:
         08:a8:71:87:37:4c:55:c8:cb:3d:28:bd:ed:55:c7:3b:23:03:
         78:5a:a1:74:b3:11:ee:f0:83:df:43:b1:70:bf:f9:57:ba:d1:
         7b:f3:e8:e9:cd:ab:5d:59:f1:1e:2b:99:8a:c7:2b:25:d3:7c:
         a5:78:b3:c8:d9:58:6e:f9:e5:8d:2e:62:5d:dd:05:d2:b2:ae:
         34:60:31:a8:71:90:fb:fc:67:90:4b:83:8b:2a:5d:5b:fc:81:
         76:40:99:3e:31:27:1b:93:54:de:01:28:98:83:a6:78:3f:55:
         68:73:15:56:d1:91:bf:4b:e3:8c:6f:ee:e1:8a:d7:55:83:63:
         3a:ef:47:b6:cd:ce:07:59:fc:5b:85:29:90:d7:a1:e1:eb:50:
         f4:f5:0f:00:7c:84:04:3d:86:fc:91:d2:69:1e:68:f4:98:a3:
         28:a1:7d:d2:dc:46:8f:b7:c3:06:46:2a:29:07:f1:4b:bf:f0:
         8b:34:e7:75:5c:f6:4d:8a:57:22:5d:cc:34:82:e9:f3:ce:a6:
         82:cd:6a:20:85:29:26:3a:ae:2a:29:95:2e:9d:84:a5:31:08:
         54:8c:77:7d:99:b2:f7:d0:d0:6b:a8:8c:67:7e:88:4c:8a:97:
         4a:ad:c2:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdo5pB19n9u7+cd51LQE+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZTQyZDgzMGVjYTk4YTUzM2Y0MzcyZGExNjljOWM3OTJj
MzkzYjIwHhcNMjYwNzI5MDYwMTE4WhcNMjYwNzMwMDYwMTE4WjAzMTEwLwYDVQQD
Eyg2NzE3NWVmNzk5ZmMyZjY3YjE0NDk1NDY2ZTJhNjAwODBjNTA1YjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp184QpgUw3CZVWZTP7exqcz73ng6
TE9OO7fgygFSdXNIgHs1rp+umR2/oQCtADCWC7Az9Nm6rsiv8pmVID75fD4JevtF
8PPribJo5rl6OjQzHzvi33gbVTEqU6DI49zZwJF3KXRFqtaDr7YTC2fwt+OFTtfH
hfWsJLKUWcgw171O7Ho9sG5AIqhaEmqFyLSbADDVzyJ4K5ZAW2HC9AzftEip6dPQ
aWVLl+TXhHMsiULQqSk/m9sL/y/YSuO20zmrVV/Mm+9vwxF65OeonbmJN8IRJkIW
BxgAel9zJo2pK1QVplqyBqskro37Z4ctyW0iyNuqt1O8ojKyOaLZwuAMmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcXXveZ/C9nsUSVRm4qYAgMUFsFMB8GA1UdIwQY
MBaAFEHkLYMOypilM/Q3LaFpyceSw5OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMt
MWFkNjFlZGUwYTRhLzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMtMWFkNjFlZGUwYTRh
LzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvy/6+d+
iME1VlCcDPHlsRNYCKhxhzdMVcjLPSi97VXHOyMDeFqhdLMR7vCD30OxcL/5V7rR
e/Po6c2rXVnxHiuZiscrJdN8pXizyNlYbvnljS5iXd0F0rKuNGAxqHGQ+/xnkEuD
iypdW/yBdkCZPjEnG5NU3gEomIOmeD9VaHMVVtGRv0vjjG/u4YrXVYNjOu9Hts3O
B1n8W4UpkNeh4etQ9PUPAHyEBD2G/JHSaR5o9JijKKF90txGj7fDBkYqKQfxS7/w
izTndVz2TYpXIl3MNILp886mgs1qIIUpJjquKimVLp2EpTEIVIx3fZmy99DQa6iM
Z36ITIqXSq3C2g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:26:59 2026 by rpki-client