Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
File:                     Q4T2-m3sztVXioWlHgvWVwHqNOw.mft (raw, json)
Hash identifier:          z+LEprwD1QBv2hJ3XQlyc4LH1MTWYx8xs4kKvea6MFU=
Subject key identifier:   F6:EA:7D:D6:1C:9B:41:3D:8C:49:DF:D1:ED:C5:DF:D8:E4:31:3C:DE
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Certificate issuer:       /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial:       019EC1EDC931A0237452F77E7BE52C257264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
Manifest number:          196F
Signing time:             Sat 13 Jun 2026 17:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:46 +0000
Files and hashes:         1: GlqGr2JXY3PhL5VUlM1NVcQhR0w.roa (hash: eNE9wH9uFmshNKZCXrztw6ppTkQy/INcRXUojDA/i0Q=)
                          2: MNCcfOf0YS36WqFOiIyVG7kT7lw.roa (hash: xDxtOXtE08yNKWuVaze/oNgNsHgsu08VrPvfwX+Etss=)
                          3: Q4T2-m3sztVXioWlHgvWVwHqNOw.crl (hash: uhMUlCnye3U4Y2ufLsxxMgZhxPHHT+U/4dT611yAIpc=)
                          4: WjEJKBNSHVEcN3ymO9d7rBHNhsg.roa (hash: /ukNM+uY+q4nZGfneifUiM0pEWc8ClpbPhjLj7YvUSQ=)
                          5: ZkpkKq6oEr-_I6JVpG2CjygiNpU.roa (hash: iZ1/Xaqf4kk2t//5gAR8BRoA23b+RGLpyfieDXD6saI=)
                          6: fh7S3k35orygy_NxNIqp6F0-sJI.roa (hash: XfQHhVDUDcNs2QAWWCjGzgrFd34jfifMCK0Ay/ulRf8=)
                          7: uNc9xxeMsmhjoPp_AoWS-X6p82U.roa (hash: Ic5jIOaYkijIZKE1wsb+bGe4vb/8GZ2qRJh6Qu5nzIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:c9:31:a0:23:74:52:f7:7e:7b:e5:2c:25:72:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
        Validity
            Not Before: Jun 13 17:00:46 2026 GMT
            Not After : Jun 14 17:00:46 2026 GMT
        Subject: CN=f6ea7dd61c9b413d8c49dfd1edc5dfd8e4313cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:54:47:8c:ac:9e:18:ef:55:fd:a9:41:e9:
                    3f:cf:1c:66:17:e6:1e:a2:c8:e9:58:ea:9b:cb:b3:
                    11:22:9b:cb:53:80:d9:0d:60:89:79:01:83:f8:2f:
                    d0:0b:c4:8a:7f:4c:55:c3:8a:31:4c:f8:ee:8f:98:
                    fa:92:94:3c:41:13:66:39:95:e1:d7:48:cc:ac:c8:
                    d3:2e:9b:8d:a3:e1:36:f3:fb:bc:ca:a8:d4:b6:21:
                    a0:a8:43:16:34:b1:f5:71:a1:de:2c:42:a1:22:d8:
                    7b:50:25:c3:15:35:1b:99:d6:b5:92:c6:7a:5b:f7:
                    4c:61:f9:dd:a5:77:7e:6c:80:d2:27:d4:20:66:ef:
                    8c:e1:37:39:5e:db:65:ef:15:3d:a8:f6:0f:43:32:
                    75:3c:ec:3e:f4:1b:25:8d:45:7b:b8:bb:4f:8d:df:
                    85:c4:a5:fe:2e:d1:03:66:b7:74:7a:0d:2c:52:7e:
                    26:1b:d5:d5:2a:39:36:0c:48:c3:54:59:65:08:ba:
                    8b:10:c7:0a:49:eb:5a:eb:96:26:9a:ec:68:16:34:
                    18:d7:cc:39:19:58:49:fa:b5:c1:b4:52:9b:8b:2c:
                    af:de:d9:08:f6:0e:11:fd:39:e7:cc:ff:ad:5d:0f:
                    5d:14:65:f4:ef:f7:17:71:80:d4:66:a2:d5:f6:31:
                    0e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EA:7D:D6:1C:9B:41:3D:8C:49:DF:D1:ED:C5:DF:D8:E4:31:3C:DE
            X509v3 Authority Key Identifier:
                keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5e:be:f2:9a:f0:bb:6d:f5:2b:71:91:5c:9f:de:f8:bc:66:
         88:a4:aa:cc:0c:e5:b4:52:eb:c7:1f:14:e6:00:b0:2b:8a:81:
         fb:bf:b2:e5:01:ef:a0:67:18:97:8c:24:cf:90:53:83:95:a5:
         5a:9a:02:aa:99:52:e9:78:3e:fc:e2:fc:29:37:e9:2f:8e:67:
         5b:c7:28:f8:e3:df:94:57:b0:66:71:02:ef:26:1c:85:65:6a:
         1b:7b:b0:bc:58:e2:b3:3c:2d:01:90:61:3b:22:ed:07:e7:e8:
         1f:27:a5:5d:fb:25:69:ed:4b:9c:69:29:12:5c:5f:32:f0:c4:
         ff:2c:c4:9b:3c:af:74:79:21:28:29:4c:fb:6e:3a:8d:24:de:
         f8:6e:ed:88:f5:3f:6b:15:43:bc:55:a9:fa:0c:b8:81:7c:75:
         84:71:ab:81:09:6b:b9:d3:01:51:22:71:22:d9:dc:85:f4:c1:
         24:6a:34:84:f5:ec:73:f8:19:0a:c8:5e:d3:fb:5a:fb:a3:13:
         12:cc:b7:fc:cc:00:35:b8:92:d6:4f:70:6a:bf:7f:6f:46:97:
         6d:f1:b4:49:4a:fc:0c:99:63:6c:79:cd:ce:f8:52:99:a0:a1:
         b8:ca:71:87:e5:f0:77:f6:04:f3:4f:4e:2a:7f:c8:5b:14:60:
         fb:c3:ea:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:04:09 2026 by rpki-client