Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File:                     Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier:          v3l2h5TwFMETLdO0NdxDpthXi4yIug/Mc9tRU3xb5BQ=
Subject key identifier:   B6:8A:4D:5F:D6:02:F8:45:59:3D:9A:B3:3D:0C:51:33:5C:23:98:69
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer:       /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial:       019EC111F8D529CB7BC94DCB590FEBCF468A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number:          1956
Signing time:             Sat 13 Jun 2026 13:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:40 +0000
Files and hashes:         1: WX-JjlZr2_9em86_V6vZFQ4B8cg.roa (hash: wU2wM6tMwVxmxZj/4qQ1Khr+94PlBhLHSf6Ng/445Vw=)
                          2: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: sZuFueWoc/wAHU7lRBguxFarU0IvINz2lVzem8MJBSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:f8:d5:29:cb:7b:c9:4d:cb:59:0f:eb:cf:46:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
        Validity
            Not Before: Jun 13 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=b68a4d5fd602f845593d9ab33d0c51335c239869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cd:af:e0:b0:0a:56:a7:cd:ea:d0:17:5b:46:
                    b9:b1:9e:7e:c9:fd:26:58:d6:f7:95:ad:03:dc:53:
                    90:04:55:1e:87:c4:86:07:27:a8:29:c6:46:84:73:
                    f5:0e:10:06:18:e3:c8:76:3e:cc:d9:b5:9b:1e:df:
                    98:2c:d5:52:c8:b2:7c:ba:63:4f:66:2e:23:94:fd:
                    2b:6a:bb:21:ca:94:90:60:0f:43:44:d7:73:9a:b6:
                    c3:70:bb:6c:e3:07:33:4c:4f:25:53:5b:15:11:b6:
                    79:c7:d7:d4:cc:23:51:78:ba:78:18:a1:dc:08:7f:
                    12:6d:5c:f1:e1:ba:20:e2:8a:85:69:54:0a:6a:ba:
                    d0:05:79:f8:f1:56:d2:63:a5:93:56:f5:35:a2:f9:
                    34:f9:00:c9:8d:ed:96:54:7b:7c:fb:be:cb:47:49:
                    41:e1:66:e5:80:cf:80:73:9a:e5:95:b4:49:f2:cc:
                    3b:bd:a8:a7:9b:30:04:36:8f:af:27:51:11:49:04:
                    26:a3:03:de:56:40:a8:ab:b2:c5:a8:eb:c6:de:6b:
                    ae:e7:01:28:f0:bb:3e:a0:85:02:64:4e:1f:78:5c:
                    b1:86:6e:b5:2b:84:83:ca:68:70:2f:31:d7:d1:cc:
                    c3:e2:eb:af:c3:cf:a0:eb:51:9c:23:a0:2e:06:7f:
                    82:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8A:4D:5F:D6:02:F8:45:59:3D:9A:B3:3D:0C:51:33:5C:23:98:69
            X509v3 Authority Key Identifier:
                keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:aa:f5:46:ff:42:25:4d:29:a9:9a:ca:6a:a0:6f:a3:27:65:
         91:61:40:97:6d:3a:bb:9f:9f:a2:b1:dd:21:5c:19:d9:2f:5e:
         f2:ae:d5:1f:f0:5b:e8:a6:f9:87:3c:8c:76:51:67:1f:21:76:
         ea:e8:f7:21:3a:b7:20:4c:85:2a:cf:dc:3d:52:61:1c:d0:9f:
         13:ea:85:72:18:3c:3e:fa:d5:34:ab:f4:28:cf:03:0d:e6:ed:
         eb:75:0d:01:b3:44:28:e5:81:64:5c:5f:54:cd:26:5d:55:7e:
         0e:94:68:cf:f3:04:55:79:4c:ae:27:89:f2:20:5d:61:db:c7:
         f8:1d:e9:e0:c2:b3:65:35:05:fd:9d:dd:a3:9f:c1:87:8a:57:
         ee:bb:d7:5c:ce:7e:09:0c:72:33:dd:c7:b4:38:58:d9:45:e4:
         19:3d:99:28:67:6a:f0:c6:a3:1c:f8:6b:b4:40:6c:46:1a:d5:
         ad:e0:b1:33:66:9f:f2:90:b1:19:d3:ca:6b:00:10:6e:2c:8a:
         89:d6:61:0c:02:33:95:83:0f:f1:b3:a7:df:a4:71:ea:89:27:
         e6:d4:9d:71:47:00:2c:8b:30:c8:50:2c:9b:7d:e7:53:8b:3a:
         7a:08:cf:80:77:bd:da:be:4f:50:ae:9e:98:53:85:0d:ca:cb:
         ff:77:3b:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEfjVKct7yU3LWQ/rz0aKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhY2Y5MDJjNjI4MGViNWZlYWY2NzVjOTg5ODlkMDVjZDE1
NzQ0MTEwHhcNMjYwNjEzMTMwMDQwWhcNMjYwNjE0MTMwMDQwWjAzMTEwLwYDVQQD
EyhiNjhhNGQ1ZmQ2MDJmODQ1NTkzZDlhYjMzZDBjNTEzMzVjMjM5ODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM2v4LAKVqfN6tAXW0a5sZ5+yf0m
WNb3la0D3FOQBFUeh8SGByeoKcZGhHP1DhAGGOPIdj7M2bWbHt+YLNVSyLJ8umNP
Zi4jlP0rarshypSQYA9DRNdzmrbDcLts4wczTE8lU1sVEbZ5x9fUzCNReLp4GKHc
CH8SbVzx4bog4oqFaVQKarrQBXn48VbSY6WTVvU1ovk0+QDJje2WVHt8+77LR0lB
4WblgM+Ac5rllbRJ8sw7vainmzAENo+vJ1ERSQQmowPeVkCoq7LFqOvG3muu5wEo
8Ls+oIUCZE4feFyxhm61K4SDymhwLzHX0czD4uuvw8+g61GcI6AuBn+CuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaKTV/WAvhFWT2asz0MUTNcI5hpMB8GA1UdIwQY
MBaAFFrPkCxigOtf6vZ1yYmJ0FzRV0QRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iYWNhYzAtNTdkYi00MzQ3LThjODct
ODliNWI2N2I3MjM0LzEvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iYWNhYzAtNTdkYi00MzQ3LThjODctODliNWI2N2I3MjM0
LzEvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6r1Rv9C
JU0pqZrKaqBvoydlkWFAl206u5+forHdIVwZ2S9e8q7VH/Bb6Kb5hzyMdlFnHyF2
6uj3ITq3IEyFKs/cPVJhHNCfE+qFchg8PvrVNKv0KM8DDebt63UNAbNEKOWBZFxf
VM0mXVV+DpRoz/MEVXlMrieJ8iBdYdvH+B3p4MKzZTUF/Z3do5/Bh4pX7rvXXM5+
CQxyM93HtDhY2UXkGT2ZKGdq8MajHPhrtEBsRhrVreCxM2af8pCxGdPKawAQbiyK
idZhDAIzlYMP8bOn36Rx6okn5tSdcUcALIswyFAsm33nU4s6egjPgHe92r5PUK6e
mFOFDcrL/3c7ew==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:47:39 2026 by rpki-client