Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
File:                     Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json)
Hash identifier:          3GK/++3XRKxhKnOp7qFE9j8HQWDsI9nKR7ovNveDx9M=
Subject key identifier:   B4:26:68:E0:3A:C6:AF:6D:8B:FD:B7:DF:6D:B4:3A:29:0B:52:E4:90
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Certificate issuer:       /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial:       019EC03639E03863DF7DB963E30F797C0A1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 09:00:39 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:39 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:39 +0000
Files and hashes:         1: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: dQsQDI6s0uscrtJY+aJMNriXqrrgYxqdGOOezL3G7Co=)
                          2: Seo64cK5BBL5Z5Lga5yI1lf8M6w.roa (hash: LMUW9+NLiMGnI7ZWrV590GSKNkkWYi8Hg05UOVRU3Cc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:39:e0:38:63:df:7d:b9:63:e3:0f:79:7c:0a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
        Validity
            Not Before: Jun 13 09:00:39 2026 GMT
            Not After : Jun 14 09:00:39 2026 GMT
        Subject: CN=b42668e03ac6af6d8bfdb7df6db43a290b52e490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:87:a5:87:d9:d0:67:ac:20:04:2f:d7:50:
                    46:4f:25:7f:25:e1:49:da:e1:8d:4a:40:a5:3f:07:
                    3f:af:78:3b:57:bc:d2:50:12:1e:e6:b6:43:c2:61:
                    5e:6e:b9:85:c9:42:ab:c6:0d:48:9d:12:79:da:21:
                    97:f8:4b:3b:32:75:8e:fe:96:f9:fa:e0:86:57:0d:
                    b5:98:0e:cd:fd:40:1b:17:02:74:21:b3:bb:2d:aa:
                    cb:7c:c6:d6:02:12:cc:8d:90:21:6a:cd:32:8e:78:
                    c8:81:56:5b:09:bf:b4:c1:8a:f6:95:83:d7:b9:12:
                    7a:b1:ca:0f:af:7c:a5:0b:72:78:01:6d:d4:d4:ce:
                    fc:c2:52:a4:5f:3a:44:21:10:df:83:4b:00:91:7f:
                    ee:cb:6e:ea:a6:7b:18:78:ce:dd:c4:70:7f:30:76:
                    32:fe:9d:6f:a5:99:54:67:41:6c:0f:c6:57:64:26:
                    8f:07:fe:f5:c3:4a:ff:03:c4:23:23:20:71:bb:fe:
                    e8:c0:cc:5f:c6:6e:33:4b:e4:2c:36:c1:10:52:ca:
                    0f:a7:5b:6a:2f:40:fc:3f:51:49:1a:75:31:29:95:
                    5b:86:d2:33:96:2b:f3:1d:45:b7:fd:cf:30:e4:cd:
                    3e:b3:01:2b:64:9d:2d:17:64:07:4e:35:2c:be:39:
                    c6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:26:68:E0:3A:C6:AF:6D:8B:FD:B7:DF:6D:B4:3A:29:0B:52:E4:90
            X509v3 Authority Key Identifier:
                keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d7:45:ab:dc:de:fd:3f:71:33:9a:ea:34:13:3b:79:9a:48:
         3c:74:7d:c9:05:57:04:7d:f1:40:8d:0b:44:4f:bb:ba:d5:60:
         14:9d:e1:b7:a3:1f:a1:fa:0f:00:da:d1:80:91:6e:cc:0b:d7:
         45:01:f4:54:bc:18:ca:10:7b:b8:19:16:5d:01:54:b9:fb:5e:
         9a:15:14:d3:aa:b2:30:91:58:34:ec:08:27:25:12:08:09:e5:
         44:88:27:e4:98:7f:69:31:68:2a:98:9c:73:df:d0:64:92:7e:
         30:1b:09:d0:c7:21:34:70:1d:d9:00:bf:8a:81:34:fc:fd:a1:
         95:0f:65:8c:5b:03:05:cc:72:f1:a3:23:16:a8:d9:61:aa:4b:
         e7:f3:83:00:14:18:89:8e:0b:9f:b1:c0:4f:ce:b3:5d:33:95:
         df:71:17:76:b5:69:87:cc:61:48:33:66:80:9e:1e:ce:bc:c2:
         b7:58:7a:fc:43:ff:d3:40:55:58:e0:ce:03:cb:de:3c:cf:33:
         b1:e3:aa:c3:15:51:82:0f:c7:36:47:e1:d6:44:1b:e6:a6:b8:
         8b:b1:75:7c:3f:24:0f:f7:9a:73:77:de:07:cc:55:38:d2:29:
         0a:7f:81:91:96:cb:ed:59:65:62:9c:6d:99:b2:35:71:34:be:
         73:63:89:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:49:28 2026 by rpki-client