Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
File:                     QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft (raw, json)
Hash identifier:          PP2OoK4allgX44vQoxu8kkXvRKiR3tB23A7Zd02q5mw=
Subject key identifier:   8A:30:B5:BC:91:DE:F9:40:33:2B:7D:DC:1E:C1:7B:B0:1E:C5:11:25
Authority key identifier: 40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06
Certificate issuer:       /CN=405ffc74ae92386afb7ce770f0390e90d4cde306
Certificate serial:       019DA4F862619062F424C68BF29D3BA6F774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
Manifest number:          050F
Signing time:             Sun 19 Apr 2026 09:00:34 +0000
Manifest this update:     Sun 19 Apr 2026 09:00:34 +0000
Manifest next update:     Mon 20 Apr 2026 09:00:34 +0000
Files and hashes:         1: QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl (hash: uStSbDNMedixE0KnZSYtJes6wzP07xDbH8OW85tjj4Q=)
                          2: wMAaF9FeE8vQPeGbyh-_gFZr-RQ.roa (hash: U3G2ZKAfz9i+c+9iabqEffqSxjMJIKuTC8d9C/LqbOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:f8:62:61:90:62:f4:24:c6:8b:f2:9d:3b:a6:f7:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405ffc74ae92386afb7ce770f0390e90d4cde306
        Validity
            Not Before: Apr 19 09:00:34 2026 GMT
            Not After : Apr 20 09:00:34 2026 GMT
        Subject: CN=8a30b5bc91def940332b7ddc1ec17bb01ec51125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:75:89:40:03:3b:fe:f6:43:45:44:0a:85:
                    b1:a9:e5:39:09:2a:33:ab:d5:11:2d:e5:be:73:1b:
                    86:63:89:ca:02:bc:4a:b3:7f:21:cc:5d:bf:11:4d:
                    55:85:55:0e:36:b1:41:eb:be:e8:60:ae:b1:ed:18:
                    8a:b3:81:15:ea:96:06:65:37:6c:0c:19:f3:6c:8b:
                    66:de:5f:8c:20:d6:b4:06:21:0d:bb:f8:1a:f3:e6:
                    ae:58:f7:2c:84:3e:dc:48:92:8f:35:72:3d:ee:e9:
                    4d:62:fc:97:0b:c8:ad:d9:c5:49:18:06:d1:00:04:
                    10:64:62:7b:ed:b5:87:f9:47:ad:00:25:2e:96:81:
                    7a:a5:55:a7:cc:fc:08:85:25:4d:5c:f3:16:35:1b:
                    97:11:86:83:40:00:b0:34:7e:02:8b:e1:5f:4d:1a:
                    c5:32:66:aa:2b:8d:f1:62:32:a0:56:5c:66:9c:59:
                    42:fc:c6:00:13:6e:21:d2:27:0a:a8:3a:6b:1b:87:
                    2a:25:19:a8:b4:df:6a:4e:4b:e8:a3:57:0a:9b:06:
                    89:9a:a4:47:43:74:df:e0:81:07:0a:a7:cc:f4:41:
                    51:35:a6:2c:97:80:f5:9d:8a:ee:25:b8:5b:19:08:
                    a6:fe:4e:92:5c:c4:47:86:51:de:21:22:dd:1c:6b:
                    96:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:30:B5:BC:91:DE:F9:40:33:2B:7D:DC:1E:C1:7B:B0:1E:C5:11:25
            X509v3 Authority Key Identifier:
                keyid:40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1c:06:0b:2a:87:e2:df:47:b9:af:c2:6f:66:81:75:c5:50:
         1a:2f:cb:4b:0d:30:a2:a5:0b:b7:5c:a8:d9:9c:d4:20:bc:51:
         37:e5:64:0f:0b:42:06:95:41:2e:6a:7d:9c:62:5d:cc:b8:ce:
         fa:4f:2a:c3:af:90:82:53:9f:a4:4b:71:cd:95:ae:60:79:1f:
         f8:2c:15:d3:6c:01:d8:37:90:b7:c9:66:fd:16:ad:cb:99:43:
         fa:88:d1:a7:8a:b5:43:5b:9b:3d:68:ac:0c:22:5c:10:6b:84:
         ce:20:65:65:7b:df:98:9c:80:8d:e8:b0:63:b5:39:7c:56:2f:
         fa:48:57:d2:07:63:0f:d7:72:32:11:54:85:1f:2a:0b:77:84:
         4e:e4:52:4c:2a:ad:01:7b:91:4e:56:dd:5e:66:c5:88:76:c7:
         35:74:fb:da:f5:43:d3:a0:da:e7:7d:d8:35:85:1b:86:12:8c:
         a9:1b:d0:4c:d0:a2:c9:96:9e:09:7a:63:58:f2:d6:c4:a6:3a:
         b0:8a:c5:8a:cc:bf:0d:81:b6:aa:94:14:e9:4f:3f:41:20:f9:
         79:29:31:ee:81:ae:08:59:9e:e0:a2:a6:d1:af:20:3d:41:e4:
         fe:23:25:ff:35:4b:2d:ba:5a:fa:f0:95:aa:94:54:33:d8:aa:
         f8:a6:0a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:36 2026 by rpki-client