Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File:                     qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier:          jf8O3fEVXL6SVBfMBXELaeFDOoegoUj8AbEDkvPqEsM=
Subject key identifier:   23:3F:62:FE:33:D0:36:16:B5:7A:BF:C5:64:6C:F1:3C:30:FD:EF:64
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer:       /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial:       019F94DBBADFE72AF2E17F0F13CD2CD430FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number:          0A54
Signing time:             Fri 24 Jul 2026 16:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 16:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 16:00:55 +0000
Files and hashes:         1: FVti0CnJBxW_ujwVe576uT5sBZY.roa (hash: wKPtK/uPr/cpuHyaQuhDbiv2SdMMAyJiY4SSf65iULo=)
                          2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: qqi87tsqvQFRu0NqQMXv6+mkgLFIUsLTrTUyIW+RxYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:db:ba:df:e7:2a:f2:e1:7f:0f:13:cd:2c:d4:30:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
        Validity
            Not Before: Jul 24 16:00:55 2026 GMT
            Not After : Jul 25 16:00:55 2026 GMT
        Subject: CN=233f62fe33d03616b57abfc5646cf13c30fdef64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:16:39:d7:99:bb:9d:52:07:11:da:17:86:
                    46:bd:0b:2e:8d:73:1d:0e:89:c0:6c:36:72:42:cc:
                    c8:10:57:1e:cb:c5:19:86:18:99:6d:cf:9a:2a:c4:
                    30:a9:88:e4:04:49:97:36:e0:62:3f:0f:37:be:98:
                    da:85:1a:92:b3:91:07:14:2a:25:d8:a4:b7:6a:4f:
                    2b:58:7e:6d:11:8e:54:5d:82:8f:79:d5:f9:69:e3:
                    8c:e9:b8:d1:6a:85:25:b2:58:e9:af:d2:5c:79:74:
                    80:b2:0e:d3:c8:45:8f:d3:d3:6c:0f:99:7e:fe:84:
                    db:07:67:fb:da:df:90:c4:98:de:3d:2f:f9:82:bd:
                    e7:20:bc:89:3b:e6:04:77:0d:b4:b7:48:cb:8c:e2:
                    75:e6:4c:3d:98:6a:5d:03:37:76:16:28:50:91:7e:
                    62:11:60:04:8c:e5:c5:72:83:cb:9f:4e:8b:17:bd:
                    0f:42:76:71:c7:d7:5a:39:ba:18:08:cf:a4:3a:71:
                    70:80:68:08:e7:9f:34:12:de:24:7a:6e:53:62:9e:
                    72:b0:44:e7:51:1c:a3:75:e9:06:ff:cf:91:39:15:
                    8c:ee:bd:68:4b:58:a9:31:7c:ea:21:3c:5c:a6:54:
                    33:54:c5:a9:2e:cb:fa:85:d8:4a:c1:2d:ae:03:a7:
                    20:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3F:62:FE:33:D0:36:16:B5:7A:BF:C5:64:6C:F1:3C:30:FD:EF:64
            X509v3 Authority Key Identifier:
                keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5c:ee:bf:02:67:5c:f6:94:96:5f:cc:68:fc:fc:bf:c7:32:
         72:71:cd:2d:e4:65:43:d2:74:65:10:47:65:2b:48:00:10:2c:
         c4:72:c2:46:36:7b:f9:95:00:40:c7:6d:c5:c9:a4:45:e9:6e:
         b7:18:b8:39:73:64:55:62:df:4d:bc:50:84:67:c9:71:99:cc:
         51:f0:32:1a:ff:48:a2:34:3b:93:d0:c9:06:25:7d:86:db:88:
         b9:a7:bb:8c:71:25:57:6c:98:e4:d5:70:04:db:9f:c2:6b:4f:
         20:8d:e3:66:27:90:11:bc:6e:38:ef:c0:33:ea:4c:bc:60:fc:
         88:93:d2:31:33:6c:55:ac:c0:aa:4a:82:52:08:05:c7:7c:2f:
         70:33:1d:4a:42:00:ea:3c:d8:c9:85:dd:08:e0:89:d1:ac:91:
         22:94:a6:32:c4:9d:3f:4c:cd:8d:61:dc:60:9f:b2:f9:b9:85:
         f8:c9:2a:1a:c6:69:5d:89:83:46:7b:38:2b:99:86:bd:a5:18:
         07:d8:f5:fd:13:0c:61:74:56:7b:29:27:f2:4b:e8:98:84:e1:
         e6:b9:74:ef:ff:b7:5c:af:6f:57:d7:32:5c:67:fe:61:2a:83:
         d6:59:84:07:a4:9a:18:3a:44:46:c5:db:d1:12:bf:62:bb:30:
         72:cc:26:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+U27rf5yry4X8PE80s1DD7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YWJhNjNlODA2YTIxZDQ2MDM1Y2E2ZTlkMzQ1YjAzZGJj
OGU1NTMwHhcNMjYwNzI0MTYwMDU1WhcNMjYwNzI1MTYwMDU1WjAzMTEwLwYDVQQD
EygyMzNmNjJmZTMzZDAzNjE2YjU3YWJmYzU2NDZjZjEzYzMwZmRlZjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH4WOdeZu51SBxHaF4ZGvQsujXMd
DonAbDZyQszIEFcey8UZhhiZbc+aKsQwqYjkBEmXNuBiPw83vpjahRqSs5EHFCol
2KS3ak8rWH5tEY5UXYKPedX5aeOM6bjRaoUlsljpr9JceXSAsg7TyEWP09NsD5l+
/oTbB2f72t+QxJjePS/5gr3nILyJO+YEdw20t0jLjOJ15kw9mGpdAzd2FihQkX5i
EWAEjOXFcoPLn06LF70PQnZxx9daOboYCM+kOnFwgGgI5580Et4kem5TYp5ysETn
URyjdekG/8+RORWM7r1oS1ipMXzqITxcplQzVMWpLsv6hdhKwS2uA6cgiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCM/Yv4z0DYWtXq/xWRs8Tww/e9kMB8GA1UdIwQY
MBaAFKirpj6AaiHUYDXKbp00WwPbyOVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1Zjkt
ZjRhMzllMThjZmI0LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1ZjktZjRhMzllMThjZmI0
LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlzuvwJn
XPaUll/MaPz8v8cycnHNLeRlQ9J0ZRBHZStIABAsxHLCRjZ7+ZUAQMdtxcmkRelu
txi4OXNkVWLfTbxQhGfJcZnMUfAyGv9IojQ7k9DJBiV9htuIuae7jHElV2yY5NVw
BNufwmtPII3jZieQEbxuOO/AM+pMvGD8iJPSMTNsVazAqkqCUggFx3wvcDMdSkIA
6jzYyYXdCOCJ0ayRIpSmMsSdP0zNjWHcYJ+y+bmF+MkqGsZpXYmDRns4K5mGvaUY
B9j1/RMMYXRWeykn8kvomITh5rl07/+3XK9vV9cyXGf+YSqD1lmEB6SaGDpERsXb
0RK/Yrswcswmpw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:16:58 2026 by rpki-client