Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
File:                     QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft (raw, json)
Hash identifier:          wzZ0oOPcTkEXe0QCRD3oUYw9dGnFtXFxapTRqG2LCK8=
Subject key identifier:   6A:4C:FA:6B:26:6F:AF:ED:19:98:BA:F5:10:32:C2:8F:87:DD:BE:D9
Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
Certificate issuer:       /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Certificate serial:       019FACE49B6FDCBC6CE2838CFD06DD784F8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
Manifest number:          04EC
Signing time:             Wed 29 Jul 2026 08:01:30 +0000
Manifest this update:     Wed 29 Jul 2026 08:01:30 +0000
Manifest next update:     Thu 30 Jul 2026 08:01:30 +0000
Files and hashes:         1: QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl (hash: bB7s4AlEtLXAMs5+n/bDPMnSyldnuGsM7Wtk9dLiio8=)
                          2: fg1dJ5KT1fZ2mElPDebHpNVgR8U.roa (hash: Q8kFLKZwqJa3BTNxu/acXdMWWvmB0nDo3x9ALn3COiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e4:9b:6f:dc:bc:6c:e2:83:8c:fd:06:dd:78:4f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
        Validity
            Not Before: Jul 29 08:01:30 2026 GMT
            Not After : Jul 30 08:01:30 2026 GMT
        Subject: CN=6a4cfa6b266fafed1998baf51032c28f87ddbed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:29:c5:38:34:e1:d4:be:df:3b:be:0d:18:
                    cf:ec:2a:f1:fb:41:bb:e4:16:9c:f2:43:bd:fb:56:
                    7c:bc:79:a8:2e:1b:2c:64:76:b0:69:00:67:5c:fa:
                    83:78:11:f7:62:a5:f3:7c:c1:9e:07:66:ff:71:87:
                    27:57:32:a4:a5:b8:f0:27:84:b8:34:a6:8e:9f:66:
                    0a:80:62:e0:4d:33:f9:3c:36:e1:cb:1b:d7:47:ff:
                    e6:71:5a:e4:39:1f:84:dd:9d:79:ff:fb:5a:ff:fc:
                    49:07:c4:36:bd:43:98:c3:47:e3:84:66:f5:f9:76:
                    68:a0:4a:a1:ea:3f:10:d5:a3:c4:95:b3:ba:17:4d:
                    e6:9e:3a:18:5a:68:25:30:54:ec:01:2b:93:fa:44:
                    94:a1:ec:61:3f:17:80:83:7b:02:e1:5d:77:4c:83:
                    c6:6c:fc:04:80:d9:84:c3:2b:1f:36:ae:59:02:b8:
                    80:a0:4b:a2:0d:36:91:c0:01:5f:b3:e0:1f:a6:62:
                    92:b7:17:aa:a8:44:f0:4e:ce:f3:29:41:11:be:40:
                    84:74:2b:6f:44:26:30:d5:2e:8b:c2:53:22:63:36:
                    6e:1e:b6:ce:62:24:bb:23:8c:af:be:af:4d:a1:0e:
                    4a:11:cb:03:7b:e0:8c:0a:da:ff:9d:ed:70:96:53:
                    a2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4C:FA:6B:26:6F:AF:ED:19:98:BA:F5:10:32:C2:8F:87:DD:BE:D9
            X509v3 Authority Key Identifier:
                keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f6:1c:ca:c5:0c:c3:16:31:91:c5:45:2d:76:d4:f1:7b:44:
         14:a3:3b:c6:29:61:b9:3e:ea:21:21:6e:1e:2d:ad:0f:f1:aa:
         70:25:90:5a:36:e1:a7:ec:43:db:c8:71:3c:7d:92:a8:af:6d:
         86:8a:9e:96:cf:77:76:c0:00:b3:fb:9f:65:19:be:cf:b6:96:
         a9:6b:bc:d1:1a:11:d9:e9:11:ba:86:c2:23:7a:45:ea:ec:4b:
         f6:73:c5:0b:3c:b2:f6:ed:a5:61:fe:78:d6:37:13:55:61:42:
         17:f6:7e:44:62:b6:2d:69:5d:27:8a:59:d8:a3:2a:09:b8:db:
         1c:bd:0b:93:2c:45:83:18:d3:86:a7:1e:fd:2d:85:8f:3d:e9:
         6f:9d:3a:1f:af:1f:8f:6e:3c:02:8e:5d:a3:9b:46:28:a5:91:
         96:be:42:13:85:42:3d:6e:17:0b:28:26:8a:21:d9:0c:2b:67:
         e6:fd:08:2d:4d:93:c3:b6:97:f8:92:1b:ef:8f:bd:73:0e:45:
         df:6b:12:4b:e0:3e:67:1f:39:44:0d:87:3c:c8:cc:8e:ad:31:
         85:cf:9f:81:af:34:20:0e:29:b2:15:20:e3:5c:ad:9c:20:08:
         97:a0:98:f7:6d:8d:4f:c6:6f:b7:76:45:74:ef:c1:20:be:88:
         2e:4c:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:57 2026 by rpki-client