Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
File:                     q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft (raw, json)
Hash identifier:          NikTewnUCFxsBBRpLWveuYIf++Trixci3V+QMRXq2iQ=
Subject key identifier:   AB:08:7A:72:9F:00:EC:8D:9C:23:62:D9:6F:0B:F8:5B:87:9E:64:AE
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Certificate issuer:       /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial:       019EC14875AB6F067679BFC15F53520FC8A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
Manifest number:          166B
Signing time:             Sat 13 Jun 2026 14:00:11 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:11 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:11 +0000
Files and hashes:         1: 0PWfBn0oGldVFHP5tIF47j3zzAs.roa (hash: 0sM6Ze3gvOmQYlCu1oomU3dkg7xN6YhbGGDnKDWKSSQ=)
                          2: 2_JDrlEf39vL8qmUM9CaRXwOr04.roa (hash: /7e65G97+6p4mluseOQELP9OxF86iI75OQ+5Z/TQzmA=)
                          3: 5d874HtQy3_g6Lh42ATS1BQL16o.roa (hash: FFJNypVbDwx5p1OtRayAO1/xI3zEji2XKy7Oj/jRza0=)
                          4: 6NzUbUPfmG_2OYaxE5u0iljd-HM.roa (hash: GEVpwDXH3AnmmmYcwcQLhZ1oJzowlyvgSDom4fjBpAM=)
                          5: BVx20OvNIr_bjMiJlAuvJK99SH4.roa (hash: DO6SxTL8ZIDZlJLjGOfKoMzyvMaVazIOTTdETJq4hxI=)
                          6: DyhSqV4302w_Jd8C_oWX0mObDDc.roa (hash: XVB5wgNU/o6hHZ2aTWsuDvd3gUhS28oEwkGfS/KVZ7w=)
                          7: H9Xbs19Dof8eiG5lJjAhQV9WdWI.roa (hash: iXBhXfrYk+sqUaa89rfM9pApaz51gWzZlcef+RPdmsg=)
                          8: MSewK7b92JObaKeUrbrsAb5fWQk.roa (hash: sWACoQHb5c7UneFSMmjv5A00HKxYwU6xUqQ/8qlbIPE=)
                          9: NqUE_7vgG-i019hpuas3mtpVIf4.roa (hash: X2ZRbDZD/jel7nDnPIG6pqjl2LVgOhthOTW0hTf7CyA=)
                          10: ZBRiJj4yKjp6xE7hgkNq4cQdPLQ.roa (hash: 6GJHppVcWVXgDv6JkXYDCys38/Oyzd7ZRUn3j/wIDXU=)
                          11: eKfYhAdXZm4QBxrRp-Jb19IhjKA.roa (hash: IW6hoy0lnAYpEm6NvMoOrfkrhinHm5CYNAqE2SF2Y3g=)
                          12: ogeLgfFMk0tfTmUZf9Mc6hQMOKk.roa (hash: 6KJzsBOmWkWNjIPw+pN6XcIjmWVNJnyQyPCTB+CKohg=)
                          13: q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl (hash: NkdTw7qk+mgUa2mbhKjhuGfUPoDDJZtbdFsTZPXizLI=)
                          14: qaltJRhtOumKjVHwnWVUetcuLl8.roa (hash: BGZRfPeZLiJVX41F+zt+HW9khnF21BsLuwIzvIKpNck=)
                          15: slCMC5MetlL-UdrbcYVL6ivEaR8.roa (hash: L9bTvLMwoTmbYW/wx8YfNg5L/r3pNdrG0c8bxsu4UcE=)
                          16: tFL9wVh4WkSXocKu5wD0zL_9_m8.roa (hash: 6EEVwO12s7jfNRlLHqcR0cD6u3HIV2GLT5UfsJtR9iA=)
                          17: wGOi-hc1qunRv3mfhlCNuwgWq88.roa (hash: VEFeNu27Mw/MaO7I2TqKbQuNe8tJIgFySJ8plRBHBzM=)
                          18: zLZn5fjIxGUIeLJs3xz-C3OdAK8.roa (hash: RzZEQ/gzmc0sHqoihLaxMsPQLNBKCTKE0KmCQNShYdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:75:ab:6f:06:76:79:bf:c1:5f:53:52:0f:c8:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
        Validity
            Not Before: Jun 13 14:00:11 2026 GMT
            Not After : Jun 14 14:00:11 2026 GMT
        Subject: CN=ab087a729f00ec8d9c2362d96f0bf85b879e64ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:44:33:60:0e:33:6a:8f:3e:9f:bc:c6:16:
                    be:02:60:7c:e6:06:35:9d:45:3c:59:fb:67:54:75:
                    a5:69:95:ad:e8:a8:eb:5b:3c:3b:54:fe:3c:f3:48:
                    21:68:1e:64:73:b1:e6:d6:b7:68:7e:d4:73:45:a2:
                    31:f9:2d:ba:59:f0:22:25:89:54:44:3e:86:2d:17:
                    5c:45:65:4a:b8:10:23:77:9a:dc:bc:2c:53:b3:24:
                    f8:4b:7b:25:45:45:83:a2:44:32:41:ec:5b:21:f2:
                    7c:21:1c:99:46:97:e6:c3:67:4a:f1:0b:4b:5a:7c:
                    a4:89:c3:a6:49:a7:0e:72:28:8a:d5:44:7b:3c:9c:
                    13:50:4d:89:e8:49:5e:af:51:3e:4d:21:0c:6d:b2:
                    0d:e2:f9:56:f0:2c:65:9f:0d:4f:ad:ff:ab:ac:10:
                    ab:ae:d3:37:5a:bf:94:62:e1:70:37:c8:44:c1:b3:
                    a9:6b:b0:dd:0a:dc:e4:0c:e0:50:76:99:d5:3e:a9:
                    8d:ac:fd:2c:21:ab:fe:8a:82:b2:35:44:f2:6c:06:
                    15:0b:89:bb:b9:c4:8e:4b:4b:c8:fb:42:33:28:11:
                    fb:a3:b1:db:6e:9f:c2:f0:ea:00:8b:a2:d2:91:09:
                    59:4a:53:79:9e:9f:bb:06:f0:dd:39:41:f1:f6:de:
                    d1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:08:7A:72:9F:00:EC:8D:9C:23:62:D9:6F:0B:F8:5B:87:9E:64:AE
            X509v3 Authority Key Identifier:
                keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:e4:2a:d6:bd:96:74:5f:7c:0e:1b:6f:d2:02:b6:70:df:cc:
         f9:95:a8:e7:f1:db:40:74:60:1b:7f:8d:99:f8:34:ff:9e:67:
         ae:63:9b:2b:09:dc:66:ef:4c:22:61:e3:f0:6a:20:97:e8:e4:
         cc:d0:b3:3b:d1:80:06:a3:2a:9a:3a:22:b0:44:72:51:1e:8d:
         17:e4:17:9e:5a:ba:5a:0d:91:92:34:bd:6c:f8:fe:63:36:03:
         2e:db:d0:a6:6d:74:30:ed:7c:aa:ee:18:d8:77:b6:93:ca:13:
         c2:aa:35:1b:c9:59:e8:90:34:a3:97:6a:76:99:0d:81:d7:15:
         3a:23:d7:67:18:e1:a7:7f:f2:81:7b:a4:13:8d:a7:4b:ab:22:
         56:6e:c1:8f:92:52:1f:8e:36:b0:4f:97:cf:d9:02:03:c6:e0:
         b3:f1:d4:4f:4d:65:4d:f9:d0:ec:3d:f5:02:5e:9d:29:72:64:
         08:24:cb:1b:68:56:e8:01:3f:01:56:87:a6:13:0f:be:8f:61:
         bd:89:ad:38:28:fa:c8:fe:c3:ec:3d:cd:35:25:16:08:e5:39:
         5c:56:10:37:d6:18:1c:0a:cd:c8:7e:17:38:28:ca:af:fe:99:
         d4:f3:d0:d0:86:d2:ab:19:8c:24:46:1a:fe:37:94:d3:11:f2:
         1b:bd:e3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:26:48 2026 by rpki-client