Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
File:                     Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json)
Hash identifier:          GyXDv2PZN2b2bpqvk6zhHpfeX0b9MGSZ70+aMc3WSn0=
Subject key identifier:   C8:80:5C:40:E0:7B:2F:1B:56:19:DA:49:63:11:23:51:2F:2C:91:F1
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Certificate issuer:       /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial:       019D9A071799D1D80A37ADD6BD3AC6CBF3B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
Manifest number:          14A1
Signing time:             Fri 17 Apr 2026 06:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:49 +0000
Files and hashes:         1: 17Np1y-dxxhXZQRQoDGfhlgHSac.roa (hash: AmSzrL+ixbKTyqpiqkExdglo4ra/UrlgCqcfSDgSmgM=)
                          2: G6olI-VvDp9ALlLPdV58qA5xPYI.roa (hash: 2fsCXn2dUvoQvSbjEln1rfEBr4e643A4tQ2VNOf+74w=)
                          3: LF_8Nc9ZG4x2hfVpD6ng-Xw9W84.roa (hash: ZUOEzaCiK3yAvVDZRgehq5Q9Z7Hz/VbhnM2QFVFIzbg=)
                          4: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: r4jx+56JCAKQ9n2GR0qRXAimT1UJy8AO+5/9i9j2U+g=)
                          5: Vx8Q4nTQTZu0HJqRpDNNFvvmG5Y.roa (hash: aOaC++2x4KyJJvhaR/qiM7sOgi46fJa7BbumrEhC7kc=)
                          6: bwylWe3CdnWe9jj8najvjwfcqt4.roa (hash: qtMSlaGUcmfEHPPp9StGHAcyvutX/FbfstzyO7BM1O0=)
                          7: jhgr_kqWn0P8kZgzQ4rStaVm9lU.roa (hash: 51PKmpvyPy1LPgxOcO2i5rd0p3mx3xfr6KylJBv2xsM=)
                          8: nCw-8U_e-vesUJrIZdav3xNtIF8.roa (hash: lsbhSmxHJ+rDA4NzpyD8vAFiMv8avAe680sgNxpRv1E=)
                          9: nUsb4McCUGoVLzb61SmYYxwkFCU.roa (hash: Kql7INdZrgxo8TWzAiXsnbs/TLgYXHD6OczED6pBuxI=)
                          10: zlCSnRuq7fXaqQjldkiFbWuXQxA.roa (hash: qa9yNfqriW76nUwB9t/osTdrCLM4tWgEY60WfaKBs+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:17:99:d1:d8:0a:37:ad:d6:bd:3a:c6:cb:f3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
        Validity
            Not Before: Apr 17 06:00:49 2026 GMT
            Not After : Apr 18 06:00:49 2026 GMT
        Subject: CN=c8805c40e07b2f1b5619da49631123512f2c91f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5b:c4:3e:1a:22:6a:80:c3:6b:8c:5a:2e:3c:
                    08:17:5c:74:51:a2:e1:98:da:97:e3:8f:53:04:9b:
                    14:0b:f8:f6:e0:65:37:c9:77:a6:79:ad:06:65:31:
                    56:57:97:39:db:ab:17:60:65:19:38:30:9c:e2:2e:
                    10:98:9e:b9:4a:ca:17:c6:e1:cf:2f:32:a4:2e:a7:
                    a2:ab:6a:22:74:53:6a:0f:7f:17:d9:79:04:3a:f9:
                    58:08:63:5e:5f:c8:dc:aa:bb:b9:92:e3:54:36:4b:
                    a3:d8:51:a4:23:10:f9:a8:5c:38:df:1d:85:3b:07:
                    4a:30:be:7f:55:bb:b9:44:17:66:44:ee:33:4d:94:
                    46:4e:0f:93:d8:78:7c:8c:74:2e:f4:04:0f:8f:26:
                    43:dc:96:15:30:fd:91:38:b5:ff:ec:d8:92:d5:9e:
                    ff:3c:8e:33:d7:2b:bb:03:2f:0b:69:ff:1f:74:05:
                    1d:64:91:a7:3b:a6:c6:11:77:93:26:58:8b:6f:e9:
                    2e:00:df:bb:36:6d:42:4e:9d:66:a3:cc:e0:4e:fa:
                    96:11:5c:04:71:23:09:13:23:b8:34:a5:85:76:f6:
                    0e:fe:fb:fd:e3:48:9e:47:73:3f:5e:7f:b5:ab:42:
                    df:dc:67:39:a1:cd:0d:16:08:6e:6d:87:1e:ac:8a:
                    21:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:80:5C:40:E0:7B:2F:1B:56:19:DA:49:63:11:23:51:2F:2C:91:F1
            X509v3 Authority Key Identifier:
                keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:12:35:dc:96:28:be:7e:fb:86:f0:2d:8b:ba:13:90:5c:c9:
         f0:0e:9e:b8:b4:df:9a:71:48:82:04:08:56:3a:ba:4a:e3:23:
         16:fb:aa:fe:e5:56:7f:4c:95:d8:03:cc:ab:6a:05:44:27:8f:
         9a:65:e7:7c:2d:0f:01:86:a1:fa:ee:7d:e6:40:5a:b4:c1:21:
         c9:8e:5f:e9:1d:12:27:5a:d2:27:c9:3c:97:9e:ee:f2:48:68:
         fb:5b:36:47:ee:be:b4:d4:30:b7:85:6d:bb:d5:d2:1b:ac:3b:
         c0:a0:20:96:b7:f9:47:3e:3e:d1:55:54:0d:1d:a0:a3:3c:9c:
         5f:6d:f0:d8:ab:fc:a8:c4:77:33:22:a4:6f:28:61:e4:c4:a4:
         b6:a8:23:9d:29:ed:b7:38:2f:e4:2f:b1:b8:9f:5b:20:99:fe:
         e9:7a:20:7f:55:43:61:c6:b6:dd:60:9e:3c:e3:82:f7:dc:61:
         ba:d3:60:19:95:ed:e4:bc:69:87:36:34:05:aa:33:df:6b:4a:
         c8:74:2a:7f:f4:0c:32:d7:8c:ba:7b:6d:1d:2e:cf:4c:26:46:
         e4:ba:f4:e8:7a:d6:3a:c5:f0:7f:19:55:8e:d6:23:92:9e:64:
         8c:a5:5a:50:a9:e4:96:c5:d6:1c:a0:4b:09:fd:da:ff:e2:5d:
         8e:f8:c4:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBxeZ0dgKN63WvTrGy/OwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNGZlZmZiNTc2ZTQxMWRlNTExODcxZGMxZTBiZDdhMjBl
MmM0ZDcwHhcNMjYwNDE3MDYwMDQ5WhcNMjYwNDE4MDYwMDQ5WjAzMTEwLwYDVQQD
EyhjODgwNWM0MGUwN2IyZjFiNTYxOWRhNDk2MzExMjM1MTJmMmM5MWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lvEPhoiaoDDa4xaLjwIF1x0UaLh
mNqX449TBJsUC/j24GU3yXemea0GZTFWV5c526sXYGUZODCc4i4QmJ65SsoXxuHP
LzKkLqeiq2oidFNqD38X2XkEOvlYCGNeX8jcqru5kuNUNkuj2FGkIxD5qFw43x2F
OwdKML5/Vbu5RBdmRO4zTZRGTg+T2Hh8jHQu9AQPjyZD3JYVMP2ROLX/7NiS1Z7/
PI4z1yu7Ay8Laf8fdAUdZJGnO6bGEXeTJliLb+kuAN+7Nm1CTp1mo8zgTvqWEVwE
cSMJEyO4NKWFdvYO/vv940ieR3M/Xn+1q0Lf3Gc5oc0NFghubYcerIohnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiAXEDgey8bVhnaSWMRI1EvLJHxMB8GA1UdIwQY
MBaAFEJP7/tXbkEd5RGHHcHgvXog4sTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjct
ODMxZjdlNmY1Y2NkLzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy82MTM1MDgtMDgzMi00MWY2LWFjYjctODMxZjdlNmY1Y2Nk
LzEvUWtfdi0xZHVRUjNsRVljZHdlQzllaURpeE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBI13JYo
vn77hvAti7oTkFzJ8A6euLTfmnFIggQIVjq6SuMjFvuq/uVWf0yV2APMq2oFRCeP
mmXnfC0PAYah+u595kBatMEhyY5f6R0SJ1rSJ8k8l57u8kho+1s2R+6+tNQwt4Vt
u9XSG6w7wKAglrf5Rz4+0VVUDR2gozycX23w2Kv8qMR3MyKkbyhh5MSktqgjnSnt
tzgv5C+xuJ9bIJn+6Xogf1VDYca23WCePOOC99xhutNgGZXt5LxphzY0Baoz32tK
yHQqf/QMMteMunttHS7PTCZG5Lr06HrWOsXwfxlVjtYjkp5kjKVaUKnklsXWHKBL
Cf3a/+JdjvjEnQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:54:19 2026 by rpki-client