Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
File:                     QQSkCCHEF2zELiVe9sFydHPD8Ao.mft (raw, json)
Hash identifier:          cxXWFoQ/NT8DvEc5D4gyG40gCLByhokK/S3g1J6Oj3Y=
Subject key identifier:   11:BC:A4:35:11:BA:2C:DC:B4:07:84:45:BF:7C:32:E5:3C:DD:0A:4D
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Certificate issuer:       /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial:       019CAF1142D5DF84270F4766CA7BEF64E2FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
Manifest number:          1862
Signing time:             Mon 02 Mar 2026 15:01:09 +0000
Manifest this update:     Mon 02 Mar 2026 15:01:09 +0000
Manifest next update:     Tue 03 Mar 2026 15:01:09 +0000
Files and hashes:         1: 1-fuWQ0J7N3Mc1-LpV47OkEYJ6Pg.roa (hash: d64kZTOMQS3ywmOiCwM9goS+Zs55OgLIp48OWiE2tqI=)
                          2: 3qCviuOG-ueF_1VEjm9A7m4dsIk.roa (hash: sAL6XW3hWoRAGWp0+zVbTSYYIBh9Tr5DdziSNbosFMc=)
                          3: 4iREikE0FlzD4Lki3jJx6aaj7Ek.roa (hash: R85Lc2X5cjTiidE1qCVwRr469wMVOizgeXCdlpP24Do=)
                          4: 7F404ndf6WlAawVxH8uEqbUfNqg.roa (hash: 0vRuwJ86hGL2rgS3c27BsrNGgAqpwI3nuvZOYvEC2o8=)
                          5: 891fnCNTe0IKQYnO-ZqvxNgk-7k.roa (hash: VPRQl1y1jooeZjbup+JMP7DkoiYT1QAj+vISvPCzQ5U=)
                          6: Amhr13WKOrupDvbNhR-H8uA8vnQ.roa (hash: DunPwzqrWTpngKU5F7a27cbOD9P4pJ+IEPvx/MUiLIg=)
                          7: CRbc03vb_t7S-8OrjziURXlLPLs.roa (hash: AwT4/FD/dxBwMmMETo+hpYLUml8m4wGXejb2vnR3jvE=)
                          8: DmNgBVzwALAZpD0xt4gW0SabWP4.roa (hash: +HcyssYq+nPIZImlmBkQlaLU/HQWdmQa3/3LFcnfluc=)
                          9: Dq47WCi1_R3R9nKkOKnsCn37r54.roa (hash: 5JD7iNqs4qn/sy+bgp/hKnEbHR2EBc8c01xHZGOpYMA=)
                          10: EiEKEI95auMCB7NfQVwo9byU814.roa (hash: qJa+m44cB1n22XnwN3TBLrmdvt3RH9NDFwUuAESZSTE=)
                          11: JKDe6ScGUf5knBKSEZ3INxcpX_k.roa (hash: cP1FQRZP0bYy6TqBtYSmhv38p8stWSoSv7D1CesDGKo=)
                          12: N-ugS43QXCOLtMQg4hBDzZHSfs4.roa (hash: H5adi4ikfxvo36OYV+mOyefgvVd4tLYXrjrnT87kOLI=)
                          13: O3ilaHX6VJtoUZBeu1-BglPYb-I.roa (hash: PoRHXYKRSqCrsj4FltoRS6V1gs+nJ0Qsq87ffUhtPkI=)
                          14: PAfqhrbdkl_yRiUylPK1xIqq4lg.roa (hash: MoYNDn1wuFUbbeUFbkvj5yCW8TfAg9g5sltO0zCqY1Y=)
                          15: QQSkCCHEF2zELiVe9sFydHPD8Ao.crl (hash: rc3xXHlbf0Iw/Ppeh8Vet328FLDxqrMfIXlf1ZcD21g=)
                          16: U7Tc0OMn99OVh4UaH8Gir63iiJs.roa (hash: VeiRvPbD+gYEQvLB86zuV+IwSFIqcHPYDQqYvNeKjps=)
                          17: Vr8UKQBR2K4aBwszRxtTMGpM3RU.roa (hash: pBwjHOXlk8Xh2v3/m1xk7uIqqtM9MysBJJTXP9nTkqk=)
                          18: aw7187ZOI0MpqazuRWsrcYgwwpQ.roa (hash: NIDCNaG3ouNUdnwxeJaCcGty477WEOLvnr2djhhc/90=)
                          19: bek0EGCQei4vOYeo1cw3OqhyNWo.roa (hash: m6rdcoyVs1N3a8H7buHnpBQjMeyGoW4VObVUZcGs+7M=)
                          20: cWtnPd8ZvgFa7GRaqMfs10BE4qc.roa (hash: jN/lGIzUOKHwZH6DyNIy+6o9b1TpGieuOJIXydb73lg=)
                          21: c_XVhcUysLwXAHApwazs-UkQkmQ.roa (hash: yDd1bLRr1tOEIQ6ft+0WAm2AEOFTsdq7bRYUYaVYKNA=)
                          22: hkSLq2UREFy1118xumuIZnvQ67Y.roa (hash: SOh35WJM4tvkJo/U2D6+8WiI7UsWl69I9bV1omMOiek=)
                          23: kqgMt21-DFLMw82FOeig-EaUgf0.roa (hash: IMAdg24Zv5aLWg8Ll0N/xPxQR4lu+BjbaXj/E4I85pM=)
                          24: n3D-Zk4G38G2tBgyUy3hXStCuWg.roa (hash: xWuIVNN480cZZue76BwJppWLzoJjQqcpD9fuq0+OWZ0=)
                          25: q1B4D6fhb1hsDMHl4DgqMg1LBS0.roa (hash: QyvrcsEDHcRC23C4LJneKzaSVc+UGnP9rW3V3L3o3QM=)
                          26: qtg18Q1n5Jfx1gK-KfQtl08To-k.roa (hash: oG53ITscWjNRdxBTzyirX6KiMhTU+HEToywwA4a+H6Q=)
                          27: rPUe_mYrLSmTmFv2LQZ8OTHJG9k.roa (hash: 5iRsBFsd3e5QtYFbDWJgyq4JRArcPXehU90Piw8H6Eo=)
                          28: sJ1sC2Tf4OlwBqYXFNFoZRduFG8.roa (hash: Lhps7HR/EcrDbFr4rG5Dh/G7U6wPLWZb+NnuBmiPIWs=)
                          29: sJZVmKX-G_XNNEcca8MTXPH-dbc.roa (hash: DQKLyMn35LbEuueIciMk2w6CESjK2ZNYZ5n5ZL//wOw=)
                          30: tWMyn7tpor7zLv8S77uSSoVBOzY.roa (hash: 9VLMYOGfLfqrY2pS0fnmG2KOSYmzAO47mTzvU9rKrJk=)
                          31: vgFc0Uh_MgrlizJZvhlwuychk-E.roa (hash: GdhoQmVw/bO3KTSgyH6uYKhysKhPclMR0dWBbW/oMfg=)
                          32: yfk1E30luISg0XzXUtlJ2MNM9eM.roa (hash: WxN+8AXOM93AE57ePd+WfH578Dm9CftwqJPfTKxDhLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:11:42:d5:df:84:27:0f:47:66:ca:7b:ef:64:e2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
        Validity
            Not Before: Mar  2 15:01:09 2026 GMT
            Not After : Mar  3 15:01:09 2026 GMT
        Subject: CN=11bca43511ba2cdcb4078445bf7c32e53cdd0a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7e:91:6c:d7:81:07:a9:27:6c:9e:1d:4c:0d:
                    db:7c:37:e0:83:12:bd:42:09:58:07:52:d0:76:c4:
                    76:73:42:84:bb:b7:24:49:10:7e:c3:48:99:f8:c3:
                    34:01:15:eb:14:48:60:36:79:34:b7:7e:20:03:36:
                    0a:60:a2:99:93:97:e3:29:3a:5f:52:81:69:ce:02:
                    6f:8e:a8:c3:f7:f1:17:fd:30:01:10:55:13:64:5f:
                    e6:c8:db:02:70:76:87:0a:e8:68:b1:98:2b:f6:53:
                    fd:39:71:a4:4d:65:18:46:13:78:98:19:93:67:2c:
                    0f:b6:5f:a4:fa:c1:2b:60:0b:a6:6f:ee:ad:61:b5:
                    49:f4:63:5a:fb:b9:81:b7:d0:3a:bd:a5:20:03:55:
                    66:66:c8:92:2c:57:71:99:69:08:26:ef:01:d0:59:
                    4f:25:53:c2:46:58:54:e2:b2:ac:d1:18:21:52:67:
                    f5:e4:d6:85:16:b6:28:4d:87:23:74:ab:d7:4d:fb:
                    09:a5:97:ce:66:a6:bc:da:09:c8:63:03:75:27:ce:
                    b8:65:a0:6a:87:2f:b1:74:da:1b:97:5b:7a:52:59:
                    84:02:9e:3f:33:3f:f4:f1:30:34:c9:8e:35:21:e9:
                    0d:8b:01:41:0b:b1:ce:09:1d:80:68:de:eb:b5:77:
                    59:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BC:A4:35:11:BA:2C:DC:B4:07:84:45:BF:7C:32:E5:3C:DD:0A:4D
            X509v3 Authority Key Identifier:
                keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:ae:26:4b:99:ff:87:01:8c:c5:b6:70:ce:13:03:b5:90:32:
         e0:4f:90:87:91:e2:71:2f:0f:b4:f9:b4:4d:0a:68:cd:78:d5:
         5c:91:45:84:52:ae:83:5a:8f:09:b7:0a:82:e4:39:2a:56:88:
         27:8c:fc:d5:fd:d9:9b:fd:91:f9:9a:37:ec:ed:7e:b6:99:10:
         b9:f9:1f:6a:7b:bc:2a:70:c5:b0:75:00:ec:5c:07:7b:30:c3:
         28:dc:5b:17:81:57:f1:8c:cf:84:0b:43:96:d0:b8:41:9d:be:
         4b:b0:4d:48:5c:d2:5c:70:0c:bd:b2:45:39:8c:a3:80:f2:7a:
         82:85:cc:75:07:f2:0a:ce:da:b5:c6:46:7b:27:f0:61:68:e5:
         43:30:55:23:6a:13:41:71:49:db:4b:d7:b0:ba:c8:c5:4c:95:
         aa:57:3a:40:58:6a:db:73:f0:02:b3:ca:1a:91:ac:47:72:cd:
         96:30:34:38:5d:07:8a:9a:bc:3b:64:00:49:b4:e6:4c:d5:5a:
         5c:e6:42:16:b0:78:bc:99:8d:a6:e6:9c:3c:69:72:1e:18:20:
         0c:ad:d8:f3:60:8a:83:25:28:b1:4a:1c:f1:0a:44:13:8b:20:
         9e:7f:5d:b4:38:08:7f:cc:a2:92:8e:df:50:8d:bd:af:d0:b5:
         cf:49:5f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:44 2026 by rpki-client