Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
File:                     QSUTQuBdWLO3_JOhXLoetx5UI4U.mft (raw, json)
Hash identifier:          sikMyXmBLcWxLo5wx9+8Ygh8Ys7J1tk2WSmiHLY2CQQ=
Subject key identifier:   27:6A:CA:64:C3:3B:B4:E2:B6:5B:E4:8C:0A:F4:81:11:4D:5D:F8:21
Authority key identifier: 41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85
Certificate issuer:       /CN=41251342e05d58b3b7fc93a15cba1eb71e542385
Certificate serial:       019ED461EA1EBA5B53DF2D0884E89D45565A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
Manifest number:          0EC2
Signing time:             Wed 17 Jun 2026 07:00:47 +0000
Manifest this update:     Wed 17 Jun 2026 07:00:47 +0000
Manifest next update:     Thu 18 Jun 2026 07:00:47 +0000
Files and hashes:         1: 2yFgKgHBNfXP9Fpv_nDaH9AIU2w.roa (hash: KUjVLxypLNAnKDptEU6H83pz7JxHiqMQheBYv9uMBXw=)
                          2: QSUTQuBdWLO3_JOhXLoetx5UI4U.crl (hash: 18Y+fB0qcffSvm4LMUOqfmW0jl9eHZIdydgI9AYGzCk=)
                          3: SRqia6YfXXJ2UoukZVUrTxtqyEQ.roa (hash: nPbXswUrrFqKL4mXICqBgwismUWqPb6a8TY0i6MyF08=)
                          4: d5PdMaYecTYrcLACxbZLnFI-Ttw.roa (hash: bkizhGU11VVsZnHMsz3a7eUmEGtVhKdjK9sYEg1z89Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 07:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:61:ea:1e:ba:5b:53:df:2d:08:84:e8:9d:45:56:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41251342e05d58b3b7fc93a15cba1eb71e542385
        Validity
            Not Before: Jun 17 07:00:47 2026 GMT
            Not After : Jun 18 07:00:47 2026 GMT
        Subject: CN=276aca64c33bb4e2b65be48c0af481114d5df821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c6:a8:3b:1a:73:58:1a:00:d8:49:d4:92:8d:
                    0f:bd:e8:8a:3e:d3:12:c5:b3:8a:f5:4d:e7:98:24:
                    43:1f:94:7f:35:7d:22:0c:ee:fd:07:69:b2:02:69:
                    40:41:12:00:1b:9d:ee:0e:56:56:02:9a:00:fc:1e:
                    fc:a6:e1:bc:07:bd:ba:49:be:c3:8e:ea:97:b5:5a:
                    6e:ab:63:65:d4:b1:7a:2d:24:5b:49:f5:95:07:ca:
                    49:ff:0f:ff:b9:96:b6:41:90:d3:83:3d:a7:25:5e:
                    02:73:6b:9c:4f:5f:00:41:0e:44:90:cb:f8:90:d4:
                    ba:bc:9e:e8:ba:ce:4a:97:15:c0:67:12:ab:9d:54:
                    66:32:9f:7f:09:83:5c:01:02:d0:c2:68:d3:b1:4c:
                    2f:93:ad:b2:35:e6:14:06:f4:5f:50:c3:bb:13:6d:
                    2f:46:0f:c3:ce:40:53:1d:f5:f2:d2:6a:0e:e5:5a:
                    9e:d8:6a:33:0f:d4:5b:da:c5:40:6a:9e:55:6e:67:
                    b8:ef:4c:8c:fe:46:05:ea:e6:28:9b:ea:0c:65:05:
                    c5:82:ca:9a:4d:ed:7f:e2:df:64:ba:ce:21:de:1c:
                    42:db:96:5d:be:fb:47:1a:56:44:e8:93:d4:53:7a:
                    0a:dd:8e:7a:5f:98:5d:9b:47:e0:e4:22:24:be:a7:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6A:CA:64:C3:3B:B4:E2:B6:5B:E4:8C:0A:F4:81:11:4D:5D:F8:21
            X509v3 Authority Key Identifier:
                keyid:41:25:13:42:E0:5D:58:B3:B7:FC:93:A1:5C:BA:1E:B7:1E:54:23:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSUTQuBdWLO3_JOhXLoetx5UI4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ad603f-8fea-4849-9edb-c3668b503a1c/1/QSUTQuBdWLO3_JOhXLoetx5UI4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:18:9c:ca:d2:40:b5:35:a3:1d:0f:ca:dc:c6:c6:4f:f4:28:
         42:35:86:d5:57:e7:e3:c9:c3:04:4a:d8:73:b9:1b:61:32:2a:
         37:84:0f:aa:42:17:0d:00:7b:90:53:60:9a:99:c2:9d:81:98:
         68:7d:17:03:37:cc:99:47:3d:c8:62:07:6d:ef:cc:e0:e1:1e:
         9b:da:86:92:73:c9:1d:c9:82:b2:c7:d4:d2:4d:7a:0c:4b:f9:
         89:e1:48:54:44:6e:9a:26:92:2a:55:a8:e9:2a:07:d4:99:72:
         17:ae:0b:14:47:d0:16:52:d6:46:7b:67:e3:46:96:97:2d:78:
         cb:db:78:69:7e:19:d1:e7:a8:15:00:59:bb:10:ef:11:83:f5:
         56:6c:87:76:bd:4f:1e:07:35:27:b3:f5:cb:1c:e2:61:34:ea:
         8e:80:52:cd:b5:02:8e:ab:d1:df:a0:c6:f2:66:a3:9f:f7:0d:
         09:10:fa:23:98:f6:98:9f:cd:75:0d:8e:b3:7b:9f:fd:e7:c0:
         c1:76:37:3c:ab:3a:6f:3e:1a:3e:b7:88:30:bf:be:61:5b:77:
         90:e7:93:f7:0a:be:f3:6a:88:e1:49:dd:d7:c2:09:f6:f7:ca:
         e4:6d:ab:ee:77:ed:d4:b4:a9:ac:4e:92:fb:b9:f4:aa:99:c0:
         c0:ec:fc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:35:33 2026 by rpki-client