Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
File:                     QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json)
Hash identifier:          4v9kkpeygo63+tCT5hyCAJI6VoIz2g+jnFxg5OagkAA=
Subject key identifier:   1B:F7:4D:7E:BC:86:F9:92:8C:E9:86:2B:98:71:5E:EB:AD:4A:A0:23
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Certificate issuer:       /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial:       019FA907C910D60E219D9D0B6E131D0C66B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
Manifest number:          107E
Signing time:             Tue 28 Jul 2026 14:01:27 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:27 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:27 +0000
Files and hashes:         1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=)
                          2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=)
                          3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=)
                          4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=)
                          5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: D4HoYtORVh+SFXlWB/hNgTFApEIjurJ7tVBJh34JYew=)
                          6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=)
                          7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=)
                          8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=)
                          9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=)
                          10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=)
                          11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=)
                          12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:c9:10:d6:0e:21:9d:9d:0b:6e:13:1d:0c:66:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
        Validity
            Not Before: Jul 28 14:01:27 2026 GMT
            Not After : Jul 29 14:01:27 2026 GMT
        Subject: CN=1bf74d7ebc86f9928ce9862b98715eebad4aa023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:aa:cb:fb:bf:28:31:44:f8:b4:82:7f:25:
                    73:6a:18:15:65:93:ff:4c:e1:56:b2:3f:ed:66:11:
                    a2:28:01:c7:11:99:1e:96:72:77:07:e1:08:ae:6a:
                    ae:0e:97:07:91:89:df:99:a5:ab:43:9b:7f:74:d4:
                    19:bd:1a:01:fd:e9:f8:d4:b2:88:01:a2:65:f4:b2:
                    26:9a:4f:5b:d4:50:40:0e:33:37:01:68:87:1a:88:
                    c4:45:d3:44:42:b5:8d:1c:47:fb:e2:0c:44:d4:33:
                    ae:85:ec:f3:b0:b0:1d:e4:e3:57:5b:50:46:4e:e0:
                    92:e3:1a:c5:da:1a:90:e1:41:6f:f6:7a:a6:e5:98:
                    72:3d:54:e7:32:38:c6:64:9a:4f:4a:ae:2e:2b:05:
                    a5:4f:30:70:e8:78:6c:4c:69:73:00:1b:73:42:e4:
                    36:cb:e4:00:77:72:5b:fa:e4:66:ca:8b:f7:fb:3f:
                    9d:da:28:80:08:91:18:a2:29:a7:72:16:ce:11:a6:
                    a8:da:92:29:5b:48:39:49:0c:ad:eb:e5:74:11:6a:
                    b0:4e:ec:64:12:86:4c:cb:e1:bb:94:9d:1c:08:d1:
                    70:bc:d2:66:58:93:14:a7:3a:b5:59:5b:2e:36:90:
                    e6:3f:e0:33:1f:fb:c1:2d:08:82:1d:3e:af:f6:be:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F7:4D:7E:BC:86:F9:92:8C:E9:86:2B:98:71:5E:EB:AD:4A:A0:23
            X509v3 Authority Key Identifier:
                keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a5:73:40:83:6e:bb:87:62:96:c5:0f:95:3e:d6:e5:ee:7e:
         14:cf:ba:dc:b6:5e:6f:38:8b:60:6e:51:c4:40:af:c1:70:86:
         5c:8e:de:43:79:5f:85:30:5a:3c:0b:3c:f0:d0:4c:ba:e8:00:
         34:ab:0b:41:02:a5:85:2b:fe:38:d6:2f:fb:08:13:63:7c:5d:
         c7:15:38:69:ff:66:0a:66:46:58:10:78:5d:23:1e:f2:aa:0e:
         92:30:68:3f:e4:8e:6b:1e:04:07:4a:c6:8f:95:3c:98:7e:e0:
         ff:ba:23:e0:db:09:17:10:65:45:ab:61:a1:d3:ce:87:a8:a3:
         9e:25:79:4e:6c:85:80:b7:1b:b5:da:0a:84:3d:7c:2b:78:3d:
         4c:e6:9e:6c:cb:d6:bb:5e:ae:df:8e:1b:5e:6f:df:1d:11:f3:
         05:c8:7b:20:de:11:34:f5:80:31:df:f2:76:47:bb:05:ee:4e:
         35:6d:6b:45:8b:48:73:25:99:97:1a:12:36:e3:45:0f:09:49:
         03:9c:11:fd:1f:52:ec:a2:9c:91:3e:dd:79:50:8a:c6:da:f2:
         10:1f:2a:e1:89:70:2c:57:ca:ee:55:88:74:b9:6a:8a:f5:cd:
         35:fe:25:62:b4:d1:3f:dd:40:99:1f:64:b5:ea:7e:73:a0:ec:
         c5:85:6f:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB8kQ1g4hnZ0LbhMdDGaxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi
MmU4MmYwHhcNMjYwNzI4MTQwMTI3WhcNMjYwNzI5MTQwMTI3WjAzMTEwLwYDVQQD
EygxYmY3NGQ3ZWJjODZmOTkyOGNlOTg2MmI5ODcxNWVlYmFkNGFhMDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX+qy/u/KDFE+LSCfyVzahgVZZP/
TOFWsj/tZhGiKAHHEZkelnJ3B+EIrmquDpcHkYnfmaWrQ5t/dNQZvRoB/en41LKI
AaJl9LImmk9b1FBADjM3AWiHGojERdNEQrWNHEf74gxE1DOuhezzsLAd5ONXW1BG
TuCS4xrF2hqQ4UFv9nqm5ZhyPVTnMjjGZJpPSq4uKwWlTzBw6HhsTGlzABtzQuQ2
y+QAd3Jb+uRmyov3+z+d2iiACJEYoimnchbOEaao2pIpW0g5SQyt6+V0EWqwTuxk
EoZMy+G7lJ0cCNFwvNJmWJMUpzq1WVsuNpDmP+AzH/vBLQiCHT6v9r4dWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBv3TX68hvmSjOmGK5hxXuutSqAjMB8GA1UdIwQY
MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt
NDcxMjBiOTA2OWI3LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3
LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqVzQINu
u4dilsUPlT7W5e5+FM+63LZebziLYG5RxECvwXCGXI7eQ3lfhTBaPAs88NBMuugA
NKsLQQKlhSv+ONYv+wgTY3xdxxU4af9mCmZGWBB4XSMe8qoOkjBoP+SOax4EB0rG
j5U8mH7g/7oj4NsJFxBlRathodPOh6ijniV5TmyFgLcbtdoKhD18K3g9TOaebMvW
u16u344bXm/fHRHzBch7IN4RNPWAMd/ydke7Be5ONW1rRYtIcyWZlxoSNuNFDwlJ
A5wR/R9S7KKckT7deVCKxtryEB8q4YlwLFfK7lWIdLlqivXNNf4lYrTRP91AmR9k
tep+c6DsxYVvRg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:34 2026 by rpki-client