Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
File:                     bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json)
Hash identifier:          rHSgJomvENxOK7BmIVX6pHyPmFZFeZ7F8MU1jgWIA9I=
Subject key identifier:   61:86:47:AD:F7:23:FC:9B:83:98:58:DE:48:AD:DF:E4:F8:03:DA:C9
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Certificate issuer:       /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial:       019FACACE80F92C97AA4A9092DC8DBC1A3D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
Manifest number:          16FC
Signing time:             Wed 29 Jul 2026 07:00:40 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:40 +0000
Manifest next update:     Thu 30 Jul 2026 07:00:40 +0000
Files and hashes:         1: 1UiUTiwKgTMIt2VTMxLe14f3nS4.roa (hash: pqQp2WmJbg2RhT73uD+Ys0RPrhInn/LiUGnsvcFLzWI=)
                          2: 2IRM0RAkwS2oAZ2BDb8uf2ChjCQ.roa (hash: JPioNw406pRxJydsBBDsLTocLaIvgiBjIbhi/i3xRcw=)
                          3: 99NN1WXl1e-tpKT6ABRzj8ek8js.roa (hash: 8o+XYKw0+50Z916SkqFv35kFc2HKB1Yb/OlTSFjUqWw=)
                          4: Gt42LNyKpJtcqVRywZEAUF7VLT4.roa (hash: 9z9Onu3kjDDPqyse/NwIrtPdYmJbza2UnnbQIfvOZ2I=)
                          5: LlDSn4AAdQvcio-w6ueKASNJzJc.roa (hash: Tt+ws0A+jguw/rGXSOQBHfD+EimDFMYYNfrKEOU8mto=)
                          6: S87lpzwpwcvhDVlbS4kDtqKKrpA.roa (hash: EL+FrGUGQI1F7I3SdqUWEFxAZnp0C1EKciCac/NeJoU=)
                          7: UlvxYSaKh8Oc3zweZMlSdRb-gtk.roa (hash: oQKB3We88m7rm0/lXA7VFioKwk6yZDH7U1EGDEWoMxw=)
                          8: b9R1mHou81pbTN845jWo8AY0dG8.roa (hash: 0MAAHxvRxGYVPd74Q6mtc12UmkhV79TPgssvbAGMnic=)
                          9: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: gXsJyUF4fOE9KUsKBFZlRn+OkryQKfZ8bbRH1yIh0Bc=)
                          10: zKPJ1aUk7U9x8WVHRd4-RzORH30.roa (hash: oMQrL9GvdJqmjmfNbo6U4V/JwihFWzU7V32F6VSp6yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ac:e8:0f:92:c9:7a:a4:a9:09:2d:c8:db:c1:a3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
        Validity
            Not Before: Jul 29 07:00:40 2026 GMT
            Not After : Jul 30 07:00:40 2026 GMT
        Subject: CN=618647adf723fc9b839858de48addfe4f803dac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6f:4e:50:5c:bb:0e:e9:41:e5:d4:99:22:7a:
                    16:1d:58:a5:92:cf:f3:f2:8e:c8:fa:8f:97:d7:c1:
                    fc:81:b7:81:55:29:88:49:51:b3:b0:78:1f:36:ef:
                    8f:e4:10:c1:ae:a4:31:ed:9d:76:0b:c9:f9:cc:d3:
                    d3:33:8b:09:b6:e3:97:6a:4e:07:2f:73:52:51:35:
                    26:4c:df:b7:e6:58:18:da:1f:9a:2e:d9:72:54:27:
                    b0:85:3b:b3:86:af:cd:89:6b:19:ce:8e:e0:3c:e4:
                    39:d8:9c:42:83:e2:74:ab:fc:5c:1b:a0:11:38:4c:
                    b1:d4:db:73:f9:25:fa:42:64:86:55:e5:91:d1:9d:
                    62:98:d7:dd:12:85:fe:9f:e5:78:07:41:f8:aa:13:
                    e4:52:66:d1:94:ec:a8:22:19:d7:18:f6:be:89:c0:
                    91:8b:3b:85:e6:d1:10:c3:f8:67:40:5e:49:f0:8e:
                    55:fa:1e:01:c5:2d:a7:10:bf:a2:c2:14:4a:f6:df:
                    c1:5e:7f:ff:33:e2:69:88:0b:32:75:d9:41:9a:3d:
                    1a:30:8d:e3:72:82:1d:9f:f9:52:8d:0d:59:5e:40:
                    10:a9:3f:37:2c:9c:7a:cc:ed:7e:fc:e1:dc:65:8c:
                    6a:2f:c9:b9:ff:22:5b:92:ed:bc:29:cf:a3:29:bc:
                    31:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:86:47:AD:F7:23:FC:9B:83:98:58:DE:48:AD:DF:E4:F8:03:DA:C9
            X509v3 Authority Key Identifier:
                keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d9:21:fe:a2:07:db:62:19:b8:0d:53:8f:03:05:04:81:f8:
         d7:47:54:ea:4e:1c:14:9c:4a:a6:91:7d:ab:ae:ab:c2:fc:61:
         3b:35:77:c4:75:a6:f3:42:15:5f:ff:fa:98:d9:15:f4:76:7d:
         41:37:dd:5e:50:8e:64:91:e2:29:54:89:f5:53:2b:6b:69:67:
         04:11:bd:63:51:ae:6a:0e:9f:4d:8d:9d:03:c7:b7:12:a1:3d:
         5c:bb:3d:9c:bc:71:2f:20:b0:e3:46:7e:2a:e8:25:2e:a3:bc:
         96:38:e6:6c:84:01:41:c4:8e:06:a4:2b:c3:ec:79:f8:3e:ba:
         8e:bc:cc:33:d9:0e:5c:de:a6:a4:cf:56:59:82:7a:6e:c8:be:
         77:40:8d:62:06:27:b8:92:a5:32:11:ed:81:3b:42:b8:df:73:
         2a:6e:f7:a6:dd:14:e2:5d:de:95:88:3d:90:a1:61:e2:70:64:
         57:d0:1a:a5:ee:58:45:f2:7b:23:d7:e7:1f:c3:8e:a6:cc:58:
         2f:0d:22:ed:f5:8d:88:b4:40:84:96:43:5d:0f:3b:ef:8d:63:
         54:84:fd:28:87:bc:7b:e9:94:01:6b:fb:42:28:ef:b1:d4:6c:
         18:b2:e7:bd:56:25:25:75:91:5a:b6:7b:7a:09:35:b2:f8:c5:
         96:6d:4a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:59:37 2026 by rpki-client