Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File:                     QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier:          THm02cLthESj63syrlHGlcThxRyRWK1J23sMVRvmqJw=
Subject key identifier:   92:34:B4:4E:E5:B5:1B:90:DA:88:02:33:FD:0C:D3:AE:01:F8:44:AC
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer:       /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial:       019FAA1A073EC780C36FB2018D31704C088B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number:          0630
Signing time:             Tue 28 Jul 2026 19:01:00 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:00 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:00 +0000
Files and hashes:         1: 2XIrFY7sSUmf0ZXtm7NFV38W-DM.roa (hash: VPm4JxETY4pUG2qbLQfLY9WMJOpVuE0GwkXWlkKqHlA=)
                          2: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: aa0+4+5wzMkDJGIlCX/yihOwyvSovBZcBfpq3ymv8zk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:07:3e:c7:80:c3:6f:b2:01:8d:31:70:4c:08:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
        Validity
            Not Before: Jul 28 19:01:00 2026 GMT
            Not After : Jul 29 19:01:00 2026 GMT
        Subject: CN=9234b44ee5b51b90da880233fd0cd3ae01f844ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:04:96:f2:cc:17:90:70:da:16:9b:b5:70:
                    5e:2b:88:08:51:17:32:88:7d:5f:aa:85:e7:65:40:
                    7c:93:43:28:83:fb:d3:77:05:c6:50:ad:ba:24:07:
                    2e:52:35:62:0e:a9:39:8d:4b:8d:b3:fd:32:2c:ad:
                    8a:81:7e:cb:ad:d3:43:2b:27:f0:c0:52:b6:4c:55:
                    15:93:d0:86:fa:95:05:75:1f:b5:c3:bb:81:1d:b8:
                    28:63:f0:51:09:bb:41:ae:72:65:fd:54:19:6e:e1:
                    b7:d1:86:f0:c6:57:d2:4e:c9:d3:52:c6:3b:a2:57:
                    d4:7d:4c:5f:35:6c:f8:52:ed:ba:3c:fb:b9:76:f4:
                    99:29:8c:12:a0:c8:3b:57:c8:c4:f2:4e:fc:d0:35:
                    44:3e:e3:8e:83:22:3e:4c:f7:85:6f:a8:70:9f:1e:
                    a6:48:0e:b7:67:a3:53:df:6f:94:5e:cf:e9:87:40:
                    1a:5d:38:ee:0a:fa:49:2a:b4:8f:30:6a:0a:f9:99:
                    5c:d8:96:cb:2c:5e:0d:1b:c6:ca:ef:d6:b8:e1:53:
                    aa:fb:e6:52:b8:87:d3:40:7f:b4:6f:49:ab:e2:de:
                    03:70:e8:2a:c4:db:a2:d9:45:ac:db:04:a9:7d:e9:
                    7b:95:74:d3:19:e5:1e:2f:cf:21:37:ec:72:7f:fc:
                    3b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:34:B4:4E:E5:B5:1B:90:DA:88:02:33:FD:0C:D3:AE:01:F8:44:AC
            X509v3 Authority Key Identifier:
                keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:af:77:3f:b3:5c:fb:c3:81:70:95:70:c0:9d:5c:73:5e:9f:
         c1:e9:c2:44:7f:c7:64:73:a7:9e:c9:41:50:82:9e:ba:dd:60:
         25:c1:62:7a:42:72:5f:bc:1e:f3:8a:6a:bd:47:b3:0b:54:63:
         fb:8c:ec:60:a1:91:a0:3d:68:61:a7:25:4d:96:74:1a:f3:a0:
         dd:59:c6:a2:3b:98:9d:7b:3a:23:25:11:ad:e5:d0:f2:c9:2f:
         77:84:b4:66:2e:c7:2e:42:1e:6e:f3:d9:71:c7:c8:5a:7f:dd:
         1a:65:d0:b9:98:87:b3:13:9c:95:f3:83:bf:f1:11:3c:07:4f:
         b9:b3:ec:5f:fe:3d:77:32:a5:12:5a:50:93:0f:b5:54:b0:00:
         f4:82:d5:db:d5:a1:e7:cc:03:4f:28:e9:e4:ba:07:44:dc:ad:
         81:f4:ea:3c:d1:00:e6:35:78:9d:bb:73:27:b9:d5:b1:19:f8:
         ca:12:56:34:ee:5b:68:f6:4a:2a:4a:d3:d6:6c:f1:e3:a6:42:
         dc:3e:c9:ac:a2:a4:8a:4a:45:f4:ad:f6:e1:31:ad:62:f3:b0:
         f6:76:1d:d4:f1:e6:40:c7:40:e7:26:e7:97:40:e5:09:4a:73:
         a7:e2:65:68:72:23:cb:2d:6c:df:d6:8d:00:21:f2:1b:48:52:
         91:48:71:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGgc+x4DDb7IBjTFwTAiLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMGNjM2YzNGJmZDQzYWM1Y2RmNjEwMzdiM2QxNmM5Njdk
NzMyMzcwHhcNMjYwNzI4MTkwMTAwWhcNMjYwNzI5MTkwMTAwWjAzMTEwLwYDVQQD
Eyg5MjM0YjQ0ZWU1YjUxYjkwZGE4ODAyMzNmZDBjZDNhZTAxZjg0NGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOgElvLMF5Bw2habtXBeK4gIURcy
iH1fqoXnZUB8k0Mog/vTdwXGUK26JAcuUjViDqk5jUuNs/0yLK2KgX7LrdNDKyfw
wFK2TFUVk9CG+pUFdR+1w7uBHbgoY/BRCbtBrnJl/VQZbuG30YbwxlfSTsnTUsY7
olfUfUxfNWz4Uu26PPu5dvSZKYwSoMg7V8jE8k780DVEPuOOgyI+TPeFb6hwnx6m
SA63Z6NT32+UXs/ph0AaXTjuCvpJKrSPMGoK+Zlc2JbLLF4NG8bK79a44VOq++ZS
uIfTQH+0b0mr4t4DcOgqxNui2UWs2wSpfel7lXTTGeUeL88hN+xyf/w7TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJI0tE7ltRuQ2ogCM/0M064B+ESsMB8GA1UdIwQY
MBaAFEIMw/NL/UOsXN9hA3s9Fsln1zI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81NmMxMTYtOWI3Yy00YTNhLTkxZjYt
NTkzZDBiYjc4YmU2LzEvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC81NmMxMTYtOWI3Yy00YTNhLTkxZjYtNTkzZDBiYjc4YmU2
LzEvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXq93P7Nc
+8OBcJVwwJ1cc16fwenCRH/HZHOnnslBUIKeut1gJcFiekJyX7we84pqvUezC1Rj
+4zsYKGRoD1oYaclTZZ0GvOg3VnGojuYnXs6IyURreXQ8skvd4S0Zi7HLkIebvPZ
ccfIWn/dGmXQuZiHsxOclfODv/ERPAdPubPsX/49dzKlElpQkw+1VLAA9ILV29Wh
58wDTyjp5LoHRNytgfTqPNEA5jV4nbtzJ7nVsRn4yhJWNO5baPZKKkrT1mzx46ZC
3D7JrKKkikpF9K324TGtYvOw9nYd1PHmQMdA5ybnl0DlCUpzp+JlaHIjyy1s39aN
ACHyG0hSkUhxMg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:06:25 2026 by rpki-client