Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
File:                     qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft (raw, json)
Hash identifier:          /6oPvlOABsmNIzo4gg4RQm03M+kwAnI5XXt/08RcJ+M=
Subject key identifier:   E3:3F:7E:41:16:C3:B7:07:03:8F:C6:96:60:82:84:5D:3D:D8:CF:07
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Certificate issuer:       /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial:       019FACAD6E1B0016DD539482B4E0C4AD5E45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
Manifest number:          1722
Signing time:             Wed 29 Jul 2026 07:01:14 +0000
Manifest this update:     Wed 29 Jul 2026 07:01:14 +0000
Manifest next update:     Thu 30 Jul 2026 07:01:14 +0000
Files and hashes:         1: SbmHVzvJLZyr_oPkt5P1usWrh6Q.roa (hash: +6pflE25NuOpLZJ9n8zoa9cmzK6oT49Q5ARbBS4vrXQ=)
                          2: qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl (hash: 1nYGOSOQvtEQ703yd2jj1DmPV8OMncHqn6oftL5BvU4=)
                          3: y1xvK7lHBhE4mJfORtJta3k7QLw.roa (hash: ifW/r0S+8T3HM1pq3eDXlZA/lxPnTJhYCS5bj7w7VBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ad:6e:1b:00:16:dd:53:94:82:b4:e0:c4:ad:5e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
        Validity
            Not Before: Jul 29 07:01:14 2026 GMT
            Not After : Jul 30 07:01:14 2026 GMT
        Subject: CN=e33f7e4116c3b707038fc6966082845d3dd8cf07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:61:1b:14:3f:3d:a1:79:64:a3:e6:d2:68:cf:
                    be:3e:65:7a:59:ba:89:10:3c:de:61:07:df:03:6c:
                    ce:44:ff:05:7f:4a:7f:6c:73:34:a8:00:ff:d3:bf:
                    d2:c9:54:0e:58:ab:f8:62:15:24:e4:9b:21:a9:2c:
                    ca:7e:d0:fb:fe:4c:e1:30:36:fd:8f:c1:61:06:8f:
                    b6:88:0b:02:e0:c5:15:29:9c:f5:b5:25:13:f2:06:
                    d7:be:2e:06:7f:a4:1a:9a:75:e6:f2:b8:56:96:cb:
                    ee:6d:e7:82:8c:af:20:c0:7f:89:de:9c:49:9d:6a:
                    a5:9f:91:b0:e2:40:6a:d4:24:9f:fd:2f:11:5c:28:
                    34:93:8f:cf:e3:7e:b9:0d:10:84:3e:26:70:a2:59:
                    60:ef:4c:db:8c:a3:ad:f3:a4:39:83:f6:9c:ae:80:
                    42:a9:de:0a:ab:16:a4:d9:96:a7:94:49:f9:05:7b:
                    5b:cf:22:df:b5:0e:fe:fb:c8:7d:d1:c5:6e:e2:09:
                    41:93:87:99:1c:f6:59:92:1a:9e:86:1f:3b:5c:34:
                    8b:79:a9:6a:52:c0:ed:85:48:d5:db:16:1f:c0:dc:
                    d4:5d:9f:51:93:b6:9a:9f:d7:64:7a:35:a9:31:5e:
                    fe:52:3a:ac:71:f1:b7:58:98:6d:11:4b:5a:24:23:
                    30:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3F:7E:41:16:C3:B7:07:03:8F:C6:96:60:82:84:5D:3D:D8:CF:07
            X509v3 Authority Key Identifier:
                keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:87:e7:cd:63:64:91:02:4d:cc:a2:d8:e5:a3:74:ee:22:eb:
         5b:60:31:88:48:ca:44:da:24:ee:4c:b1:1b:31:59:30:a6:4d:
         52:50:07:28:95:31:59:50:a1:66:73:72:76:4f:f2:ef:1f:d9:
         13:23:09:f5:55:eb:c3:a0:b3:5c:e7:16:9f:5a:72:84:26:7e:
         a6:c7:ea:fa:c6:9a:9d:cc:f2:1e:a4:5e:fe:10:e5:b1:4f:c4:
         b1:c7:f6:79:99:17:64:69:f7:ed:4c:c9:a9:fe:59:b8:23:7c:
         02:4d:f3:74:51:dc:b9:67:04:c8:41:7a:eb:b1:05:76:d8:20:
         15:31:ef:8c:8e:c3:4c:aa:42:ed:31:7e:0f:83:34:0f:d8:63:
         7c:65:e6:23:72:51:8b:61:57:da:3f:fb:87:9a:37:69:03:49:
         91:1a:fb:87:1e:55:53:47:2c:64:d7:48:d3:fb:b1:b3:5e:bd:
         13:c8:5c:b8:dc:b8:03:31:b3:98:6f:e4:6b:1a:81:e0:72:b8:
         fe:44:93:4b:21:e1:3d:b6:4e:95:94:26:8f:b2:6e:ab:cc:01:
         96:8b:05:8b:48:82:52:27:06:a3:62:b4:fa:b3:69:59:74:75:
         2b:d0:4f:46:98:2a:ee:bc:98:c4:99:0c:b3:eb:3d:3e:ab:d7:
         5c:81:7e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:27:10 2026 by rpki-client