Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
File:                     QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json)
Hash identifier:          gIzCMnVpP1r6eYNxhw9HlVWsW9P7cWt5mJgxUsl6fsE=
Subject key identifier:   B8:5A:B4:7B:5B:D3:F8:6E:F5:07:52:8B:E5:D6:E1:36:D1:04:DE:06
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Certificate issuer:       /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial:       019CABA210116DA8FCA1F9511AE19699C9F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
Manifest number:          15AE
Signing time:             Sun 01 Mar 2026 23:00:50 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:50 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:50 +0000
Files and hashes:         1: GWyAGqdOn5bYyHYnvLDvJP7OcDo.roa (hash: aePs2l3qizlCTkevGtE9e7vqvgCIXjUea/ZI4K6j0lQ=)
                          2: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: 0zJlRusnV0531u49gep8khWAdwVVB0Vwf75i8V4nXRs=)
                          3: UqFzq2RNZbWlDFVYyZprB1_1sEM.roa (hash: hO5jaxlS37jXDAccfSZYbNyHj2vkt1PuodFiaALX0Zg=)
                          4: baqSF0nqYusoIFECKjM-YPjRpPk.roa (hash: Qah7uqDRXltB4WrVjydJLT6cz2tOioqH5UQyq3ujOpo=)
                          5: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (hash: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ=)
                          6: jQ-BZ183u_LUlZapfx_6bO5Fcbo.roa (hash: evJDPjhd4Xd7GaOP8Tsnz8tSIn8B3VRESbVEgJ+Ho4g=)
                          7: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (hash: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w=)
                          8: qHPixUdDjxrc91U2LNL_GHETLss.roa (hash: 5esutnCHRhEckm/D5dPi2+exRvIyK9kg1fmZT+vC/MU=)
                          9: qUc0afIdRt8-UOWMIe3SQvVz1n4.roa (hash: /uRdEodyR9sUKrVW+MpbljN4of9z2bshibIE/GFUwdc=)
                          10: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (hash: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:10:11:6d:a8:fc:a1:f9:51:1a:e1:96:99:c9:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
        Validity
            Not Before: Mar  1 23:00:50 2026 GMT
            Not After : Mar  2 23:00:50 2026 GMT
        Subject: CN=b85ab47b5bd3f86ef507528be5d6e136d104de06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:85:c1:b8:f4:50:a3:69:dd:52:d8:d4:55:99:
                    6a:89:57:e1:3b:1c:a7:a6:7b:d7:db:a7:bf:fa:19:
                    68:28:f3:a8:71:75:a7:82:86:8c:d6:33:98:94:88:
                    35:31:af:ab:e8:4c:ef:24:2e:33:cc:6d:6a:1d:f7:
                    58:e9:69:ef:14:ea:a6:52:48:ab:00:60:dc:f0:7a:
                    e5:d6:70:92:88:80:4c:d1:38:ad:6f:fa:01:33:d1:
                    2e:f2:96:e5:8c:0c:de:0c:c9:90:ef:2d:5d:fc:61:
                    20:ab:de:0f:4e:52:75:6f:76:c3:83:83:9f:c8:ce:
                    1c:ba:09:44:e7:a0:f7:bd:00:5a:24:18:ec:24:89:
                    ef:6a:70:80:83:d3:76:ca:88:0c:1a:0b:cd:be:43:
                    2f:dc:f3:ee:4e:de:5d:3f:2c:ac:47:68:7c:bc:72:
                    15:f0:e9:ab:8c:8f:96:98:7d:5c:b0:65:58:78:dc:
                    39:f0:6d:e4:c7:07:a8:b4:e3:81:5d:f9:e5:df:a6:
                    40:f6:2a:33:58:01:ab:2c:63:1d:a0:dc:89:43:6e:
                    c5:17:e8:61:ca:ee:75:e6:66:79:30:63:3b:3c:4d:
                    96:bf:1f:e5:33:bb:f9:e9:6b:58:0e:7c:8a:dc:35:
                    6e:97:f8:82:98:70:59:3e:79:6d:50:31:52:e0:0f:
                    b8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5A:B4:7B:5B:D3:F8:6E:F5:07:52:8B:E5:D6:E1:36:D1:04:DE:06
            X509v3 Authority Key Identifier:
                keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:12:6f:3a:29:4c:9d:34:fa:d8:4d:68:58:41:06:e1:c6:31:
         9c:88:32:ee:da:27:26:07:d6:02:0c:e2:8d:37:21:75:5c:44:
         1b:df:c2:ff:f0:6a:3b:bf:48:d0:41:61:57:e7:ec:73:79:db:
         47:26:63:32:e6:ab:19:2d:e2:78:8a:16:3f:83:35:8e:98:5f:
         27:2f:71:58:19:a1:34:d9:25:0d:59:42:8a:a4:15:09:8a:a8:
         68:d2:97:ee:f6:21:e4:67:3b:a8:d4:42:a4:eb:dc:42:cf:77:
         be:c9:fb:6d:d0:e9:0e:5f:eb:a5:0d:04:42:89:d4:0e:66:b2:
         75:3f:fa:c8:78:61:b1:06:62:26:f9:97:da:4c:44:c2:c4:bf:
         be:8f:ea:94:c6:c9:95:df:e6:5a:e2:f3:e3:b8:82:64:1e:81:
         f5:69:73:ce:5c:30:3c:04:a0:fc:a3:fe:87:f7:1f:b8:7b:6b:
         de:c2:ed:0f:28:4b:6d:b9:49:0b:69:e9:99:1b:b2:43:57:19:
         d7:40:22:54:81:59:2f:75:37:e4:ff:10:31:7b:75:43:40:f1:
         46:8c:1f:d5:c0:e9:d0:19:1f:f3:c6:f7:e1:37:1e:1a:bd:bf:
         fd:5e:bc:4c:1e:d0:22:34:50:e3:66:15:f4:cc:f3:df:9a:a6:
         18:bc:d8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:19 2026 by rpki-client