Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
File:                     qGWA4YrW_43JQr6IPBbei3MflgU.mft (raw, json)
Hash identifier:          XjzAXYDZX+mNnkz1ea3lNZw9zHvH9nAF4po/BykxEak=
Subject key identifier:   5B:F3:11:35:E5:BE:5D:2C:57:06:4D:37:C6:92:C7:67:04:0A:53:0D
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Certificate issuer:       /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial:       019EC17F98B7BFB82D41CD371EF033384101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
Manifest number:          1971
Signing time:             Sat 13 Jun 2026 15:00:25 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:25 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:25 +0000
Files and hashes:         1: 7qTepYATqKVXyyn2qZtoxxFTcjA.roa (hash: zj/P1u6iWoahM98pNTDlWucnNtLUswY/H6W+OVzgPg0=)
                          2: CxTPA5mUFSfM5zzjG_pBiZdndNM.roa (hash: +LuWTLTvb4XLHwaIc7XtaBKu05lC9tlVeMmuHJRwLok=)
                          3: FmqdkGuPwkHtcktyjB7p6qiaaA0.roa (hash: N+eixnx0ef9WfVBXPd6Nijvy/VigzdNIgybnerIGWxw=)
                          4: J037jcIbssptRuiF7QThwckkgYA.roa (hash: VzXGhtcRmbTMvgupmIWbk2ydVSdHNyFjivXfWRp24D8=)
                          5: qGWA4YrW_43JQr6IPBbei3MflgU.crl (hash: B1gh7DOSFIBheh5dt9kR6XXYYYk9F64NEcHYDTHg/A0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:98:b7:bf:b8:2d:41:cd:37:1e:f0:33:38:41:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
        Validity
            Not Before: Jun 13 15:00:25 2026 GMT
            Not After : Jun 14 15:00:25 2026 GMT
        Subject: CN=5bf31135e5be5d2c57064d37c692c767040a530d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f5:91:9a:4e:b5:63:8d:60:6f:d0:af:91:0b:
                    b0:b2:26:80:32:3c:68:61:af:ca:4f:36:9b:8d:b0:
                    e2:58:ef:49:9c:27:f1:2f:00:38:4b:26:e0:d0:9c:
                    c8:be:04:13:0a:d8:05:e9:36:a0:4e:4d:0d:ae:98:
                    fd:e4:9c:e6:77:db:5f:94:4b:36:84:71:15:86:d7:
                    3f:3d:71:e9:6e:c5:e5:4f:f5:12:fb:ef:2b:12:65:
                    e5:c8:e1:89:75:b1:b1:cd:57:7e:69:3c:06:09:a8:
                    55:31:8c:e0:f2:25:81:5a:b3:b8:ba:87:9d:ed:14:
                    95:55:c7:30:64:11:5c:04:b6:3d:ff:69:f1:8f:99:
                    58:5e:dd:d6:9c:57:a4:71:48:4a:9e:be:8c:ef:a4:
                    8c:92:a3:4a:57:13:f1:bb:1b:8a:2d:af:49:04:a9:
                    2e:51:c3:74:e1:6c:78:3e:9b:cf:0b:89:1e:1b:d5:
                    d4:5a:9e:d5:4b:29:25:e3:5f:e1:52:04:61:39:39:
                    4e:bb:fa:0c:84:b0:43:b6:de:91:3e:d8:76:a8:26:
                    ff:58:1b:7c:09:91:49:33:03:70:85:66:03:d6:b0:
                    79:56:b5:48:86:c1:68:64:a4:fd:88:3e:5b:fa:a2:
                    7c:13:b1:a1:41:ae:2a:58:c5:0d:34:7d:c8:98:24:
                    62:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F3:11:35:E5:BE:5D:2C:57:06:4D:37:C6:92:C7:67:04:0A:53:0D
            X509v3 Authority Key Identifier:
                keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f2:92:5a:1b:e8:25:76:25:43:74:83:ea:d5:c3:f8:7a:b3:
         06:54:e0:c2:cf:59:d7:f2:4d:9e:04:db:c8:8c:01:79:d8:fc:
         36:04:6b:e1:29:9f:07:03:07:fe:3a:32:9e:c9:8a:16:21:04:
         55:f7:0c:dc:cd:f8:6c:08:57:51:e3:b3:aa:66:76:12:25:7d:
         1d:00:ac:4a:b8:1e:09:89:95:31:3a:7b:44:f0:b1:73:c5:76:
         2c:47:23:ed:cc:ad:fa:5d:d3:af:c9:a5:75:2c:b5:93:d1:d0:
         19:bf:6d:fe:1a:79:a4:e4:08:9b:34:d5:4c:d7:6c:da:c3:fd:
         2d:dd:c5:e1:26:af:8e:35:a5:79:58:fb:ad:03:bd:f7:bf:54:
         21:10:05:48:a0:a4:db:6e:42:9f:1d:38:28:30:0b:74:1a:52:
         0e:48:04:ab:84:1c:07:5c:e9:f1:0f:0d:f1:69:ff:32:c5:37:
         8d:1e:b8:6d:be:47:52:bd:57:09:3e:c6:07:92:7d:22:ea:72:
         bf:65:05:d9:d2:30:a3:21:d9:69:d5:98:83:15:f8:62:c0:52:
         c6:b3:21:16:cf:b0:73:c0:08:13:73:0a:f5:a2:2c:ab:78:b2:
         54:88:85:02:2b:7e:3c:5f:e4:28:ca:9a:9f:72:05:9a:32:18:
         bc:ce:b2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:09:08 2026 by rpki-client