Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
File:                     Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json)
Hash identifier:          k+rDc3kPqXUgyhdufhU3XwpHfpLevZIhNgCPrXUigyw=
Subject key identifier:   40:F2:CF:57:B2:4E:B5:CA:E1:93:EB:04:B6:0F:B7:3B:3A:F2:E7:9C
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Certificate issuer:       /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial:       019FAB2C16E2A8497FB8C432E2399BE0FB5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
Manifest number:          15B3
Signing time:             Wed 29 Jul 2026 00:00:21 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:21 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:21 +0000
Files and hashes:         1: 17Np1y-dxxhXZQRQoDGfhlgHSac.roa (hash: AmSzrL+ixbKTyqpiqkExdglo4ra/UrlgCqcfSDgSmgM=)
                          2: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (hash: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w=)
                          3: LF_8Nc9ZG4x2hfVpD6ng-Xw9W84.roa (hash: ZUOEzaCiK3yAvVDZRgehq5Q9Z7Hz/VbhnM2QFVFIzbg=)
                          4: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: FVXeJUbwv/ZnuS+ELE/DhSmOsYcHJXf46PRLCs0w+Qs=)
                          5: Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (hash: aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=)
                          6: bwylWe3CdnWe9jj8najvjwfcqt4.roa (hash: qtMSlaGUcmfEHPPp9StGHAcyvutX/FbfstzyO7BM1O0=)
                          7: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (hash: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM=)
                          8: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (hash: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E=)
                          9: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (hash: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI=)
                          10: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (hash: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:16:e2:a8:49:7f:b8:c4:32:e2:39:9b:e0:fb:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
        Validity
            Not Before: Jul 29 00:00:21 2026 GMT
            Not After : Jul 30 00:00:21 2026 GMT
        Subject: CN=40f2cf57b24eb5cae193eb04b60fb73b3af2e79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0e:a1:ad:37:e0:f6:24:2b:9c:1d:05:a8:88:
                    1f:6d:65:7b:ac:9b:7c:8e:b1:bc:f4:1a:15:22:b4:
                    1f:28:9f:f6:96:16:18:cd:6a:54:c8:95:7f:90:99:
                    ef:58:88:91:02:83:e5:e8:a4:ed:84:bf:54:6b:a2:
                    4f:bf:dc:10:cc:20:2e:f7:9a:23:5a:e5:8b:02:1e:
                    44:bf:f2:10:58:d4:55:e9:99:1e:f7:49:fb:a3:d5:
                    1d:b4:13:7c:f8:e6:32:87:55:7e:33:99:bc:93:5f:
                    99:d8:da:8d:ba:c8:d9:6f:27:35:d7:dd:4c:23:65:
                    5c:7b:4a:4d:0d:a8:a2:b1:7f:96:a0:a7:81:21:ce:
                    ff:dd:9d:05:88:55:5d:be:37:01:0d:6d:8c:27:67:
                    94:33:5c:cc:1c:e3:0b:f1:77:5d:74:1d:20:9a:84:
                    4f:09:57:90:4f:4e:5c:59:6c:29:13:79:a7:45:b4:
                    f2:85:f5:61:23:35:cb:07:0d:f4:97:bb:47:3c:df:
                    8e:cc:d8:33:2e:1b:83:2b:dd:f9:c5:3c:d4:37:d5:
                    cf:06:31:c0:24:44:a0:da:4e:fe:35:56:48:ad:80:
                    1b:87:f1:d6:8a:2b:8a:31:66:1b:39:80:87:b6:48:
                    7f:63:a9:7e:4f:ca:3f:b2:2b:6b:25:b4:12:ba:1a:
                    72:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F2:CF:57:B2:4E:B5:CA:E1:93:EB:04:B6:0F:B7:3B:3A:F2:E7:9C
            X509v3 Authority Key Identifier:
                keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:94:ca:e8:e7:ce:40:d9:7d:0d:18:88:cc:79:71:fb:a7:1d:
         06:6e:0d:ae:5d:b2:61:53:1c:e3:cd:55:84:87:b0:a2:83:a4:
         c9:d6:c9:40:c9:23:00:cd:82:9a:02:1f:29:55:ea:09:7d:d0:
         ea:02:bb:64:bb:71:84:6c:24:75:08:83:01:dd:9e:82:fc:5f:
         ab:b3:a9:ca:81:1a:f6:83:2a:7b:c3:2f:06:a4:f5:59:06:06:
         2f:86:55:c0:d0:7f:a8:f7:c4:9f:30:d0:ba:16:44:28:ae:48:
         44:df:78:ca:f9:6f:96:4e:47:c8:b6:d3:0e:17:a5:ed:36:3b:
         65:fa:89:77:21:61:ec:c6:8b:67:ec:a6:9b:00:e1:83:11:6c:
         6b:cb:4e:81:72:f4:0e:53:c0:17:3f:8a:e1:db:7e:86:37:fe:
         b1:c9:53:d1:f5:80:f6:d2:e7:1d:42:d6:59:6c:76:23:d3:29:
         fe:b2:13:83:9d:bc:76:30:60:4a:6a:4d:3c:1e:3c:53:45:33:
         80:d9:c5:fb:22:3b:f4:79:5b:e2:8e:a0:d7:25:3f:db:2e:a4:
         7a:0c:f5:95:e4:52:74:5f:c0:bf:c7:89:27:67:4f:23:3f:94:
         14:80:9e:63:95:7c:e1:8f:7b:94:aa:89:fc:91:39:6c:5a:b4:
         d9:1c:48:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:27 2026 by rpki-client