Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
File:                     qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft (raw, json)
Hash identifier:          8mGkJdDhZuJir+Mt80lO1zHWugPGAmp52NtZcC7+dHo=
Subject key identifier:   75:92:FB:E9:15:20:92:D3:8A:E9:99:9F:58:A4:84:78:39:C8:74:91
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Certificate issuer:       /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial:       019D9CD177AD10A5AAD5D7C7E7C7898ED182
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
Manifest number:          0C6A
Signing time:             Fri 17 Apr 2026 19:01:06 +0000
Manifest this update:     Fri 17 Apr 2026 19:01:06 +0000
Manifest next update:     Sat 18 Apr 2026 19:01:06 +0000
Files and hashes:         1: 1yNxCmePPnXYmANALvF6crPNDSc.roa (hash: NnbT8iaws5JgljNe+UvSj+hAMr2jidNTvDwKfdnsRJM=)
                          2: IjH8Bw6khS3HfsHRDOq7KVhCvtE.roa (hash: xqV8sj84jv/de5gXJFmozbmUfKDQmxucnoddgaBj3m4=)
                          3: cMufgoQU0L0jv10NNeCceGj__mo.roa (hash: nQdacmV+KrpQrHaTQNA9qp4TW/zHU/aMagi4CQEt/fQ=)
                          4: o4XRIYaubJYsaKle7Mq2zp2yQPU.roa (hash: /2hj0m+hPdpMrzwdZKFg60yCkkhQ3QugnRJdjSqOsJc=)
                          5: osiPIqZHFwJFJVDnL4CHHio8HdM.roa (hash: vGPA8SjpFPALGX8zEZpTARWGQMkoh1k17+6L+YmNaLY=)
                          6: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl (hash: 7V2RKFQjiC83gSxa8Rv1nwq3m1R84b0Bw4E1RJ0WtuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:d1:77:ad:10:a5:aa:d5:d7:c7:e7:c7:89:8e:d1:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
        Validity
            Not Before: Apr 17 19:01:06 2026 GMT
            Not After : Apr 18 19:01:06 2026 GMT
        Subject: CN=7592fbe9152092d38ae9999f58a4847839c87491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f1:28:04:16:bf:d1:64:0d:f4:1f:0f:50:37:
                    f8:67:0b:f2:84:ba:7a:0e:72:7b:b7:67:11:8a:33:
                    a8:90:91:6a:bf:8d:b6:6d:57:1d:17:42:30:e8:54:
                    ce:f2:e5:ec:46:71:81:be:e5:07:af:bf:e2:2b:84:
                    d0:42:aa:2e:32:8a:1e:87:91:00:47:92:ae:0c:31:
                    ef:af:d7:96:b1:e9:e2:1d:82:7f:d9:19:c8:88:19:
                    00:1c:f3:a1:fa:b9:ce:60:5b:f8:4b:a4:cc:79:7e:
                    c6:1a:be:df:2b:ac:5d:65:10:5a:dd:dd:4d:d6:ff:
                    42:3c:b8:9d:11:2b:af:53:7f:5a:27:24:82:46:d6:
                    47:10:a2:dc:58:e3:86:7e:62:93:c1:76:c3:24:f8:
                    78:cd:ba:e5:26:e8:22:4a:e7:ac:80:71:11:6d:f2:
                    90:47:77:81:b0:17:f0:c6:f4:f1:f9:f2:47:50:dd:
                    12:f6:47:a0:82:02:31:b0:32:02:69:ae:0c:ad:d9:
                    62:4f:10:c7:ce:fd:0d:59:54:e5:d8:5c:32:ae:f1:
                    8e:2a:2e:ba:fa:e2:47:48:92:5b:ad:6a:35:44:dc:
                    bb:d8:31:94:62:39:d1:5e:cd:8f:05:08:66:b4:9e:
                    42:f9:e9:6a:c8:d0:c8:ee:64:d4:01:64:3e:4c:78:
                    30:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:92:FB:E9:15:20:92:D3:8A:E9:99:9F:58:A4:84:78:39:C8:74:91
            X509v3 Authority Key Identifier:
                keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:ea:d5:63:99:ec:c2:f1:c2:4d:8d:94:95:b2:7e:a3:a3:b0:
         64:c9:b5:d9:4f:40:5f:82:46:96:22:b5:7c:93:d2:bc:8f:0f:
         d5:54:08:8a:db:77:64:4a:9a:0d:98:e8:26:f1:47:b5:01:3e:
         98:65:e5:55:8f:01:88:2e:29:ff:27:e2:26:ce:82:dc:31:cc:
         d8:d6:2a:ef:cf:ad:d5:10:13:59:c0:0a:76:c2:a8:87:88:82:
         fb:12:88:fb:8a:03:fd:04:e2:52:30:8c:58:39:35:e1:d9:94:
         a2:aa:bc:d9:99:d1:75:00:2e:f5:c7:79:78:d2:c3:8e:fd:26:
         c9:e3:cd:fe:2a:59:4f:fd:a8:2a:a6:1f:90:e2:55:cd:08:9a:
         30:51:e0:00:fa:bd:b1:4e:7c:93:32:5f:bf:36:1b:cc:01:05:
         f2:76:a1:8f:b5:c0:c4:69:57:02:72:a2:ae:c6:04:5d:27:6f:
         0f:1c:ab:1b:2e:0d:51:fd:cb:d0:0b:15:fc:52:f1:77:fe:de:
         4d:4b:6e:32:f2:c1:eb:75:42:80:e7:87:bf:8e:a1:ca:e6:f2:
         42:79:91:f5:25:b1:f8:e6:8e:cc:3a:25:dd:2e:c3:66:b3:6b:
         79:e6:ef:cd:38:c0:ec:c3:93:dc:50:a4:6f:c6:6b:e5:0c:c0:
         4a:51:71:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0XetEKWq1dfH58eJjtGCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NTJkMGQyNjY1NTczODU4MzZhYWI3YWUzZmRjZWQ0Y2E3
NGFkODkwHhcNMjYwNDE3MTkwMTA2WhcNMjYwNDE4MTkwMTA2WjAzMTEwLwYDVQQD
Eyg3NTkyZmJlOTE1MjA5MmQzOGFlOTk5OWY1OGE0ODQ3ODM5Yzg3NDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvEoBBa/0WQN9B8PUDf4ZwvyhLp6
DnJ7t2cRijOokJFqv422bVcdF0Iw6FTO8uXsRnGBvuUHr7/iK4TQQqouMooeh5EA
R5KuDDHvr9eWseniHYJ/2RnIiBkAHPOh+rnOYFv4S6TMeX7GGr7fK6xdZRBa3d1N
1v9CPLidESuvU39aJySCRtZHEKLcWOOGfmKTwXbDJPh4zbrlJugiSuesgHERbfKQ
R3eBsBfwxvTx+fJHUN0S9kegggIxsDICaa4MrdliTxDHzv0NWVTl2FwyrvGOKi66
+uJHSJJbrWo1RNy72DGUYjnRXs2PBQhmtJ5C+elqyNDI7mTUAWQ+THgw2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWS++kVIJLTiumZn1ikhHg5yHSRMB8GA1UdIwQY
MBaAFKlS0NJmVXOFg2qreuP9ztTKdK2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAt
NGMyMWE1MDVmMzQ2LzEvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yNzBhOTEtY2JmZC00NTAzLWI5NjAtNGMyMWE1MDVmMzQ2
LzEvcVZMUTBtWlZjNFdEYXF0NjRfM08xTXAwcllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwerVY5ns
wvHCTY2UlbJ+o6OwZMm12U9AX4JGliK1fJPSvI8P1VQIitt3ZEqaDZjoJvFHtQE+
mGXlVY8BiC4p/yfiJs6C3DHM2NYq78+t1RATWcAKdsKoh4iC+xKI+4oD/QTiUjCM
WDk14dmUoqq82ZnRdQAu9cd5eNLDjv0myePN/ipZT/2oKqYfkOJVzQiaMFHgAPq9
sU58kzJfvzYbzAEF8nahj7XAxGlXAnKirsYEXSdvDxyrGy4NUf3L0AsV/FLxd/7e
TUtuMvLB63VCgOeHv46hyubyQnmR9SWx+OaOzDol3S7DZrNreebvzTjA7MOT3FCk
b8Zr5QzASlFxOA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:03:58 2026 by rpki-client