Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File:                     qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier:          QL4HASxVlfxNiZzrnFZSxTk9+1P5mZQReq+Ho8hSl3Y=
Subject key identifier:   39:30:60:31:FD:0E:F2:36:25:D3:38:A4:E6:92:5E:17:E7:6E:B9:1B
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer:       /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial:       019F9391D12DCC5417F781A52D5B39B6ED28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number:          11E9
Signing time:             Fri 24 Jul 2026 10:00:34 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:34 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:34 +0000
Files and hashes:         1: bDniOy7bJDqEB7j18XhIORHd9P4.roa (hash: 7UeZ8ffZs41TrgD9TFvep3setoYXza5q1+hwG2ZnLPc=)
                          2: ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa (hash: bZXcOl6PpFz9za7K+EZymB9rux3LD9nnlgPnINrzVx8=)
                          3: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: bVHmGyhEK1D+jXLnDrEoTcGSbyvhfoJD6kPToIPPiYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:d1:2d:cc:54:17:f7:81:a5:2d:5b:39:b6:ed:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
        Validity
            Not Before: Jul 24 10:00:34 2026 GMT
            Not After : Jul 25 10:00:34 2026 GMT
        Subject: CN=39306031fd0ef23625d338a4e6925e17e76eb91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:56:39:43:23:2f:2e:db:a4:bd:9f:2f:cc:32:
                    09:e5:08:93:17:63:37:7f:a6:ff:d0:b9:d5:f5:3d:
                    ca:10:ef:7c:a4:68:0c:dc:64:7a:6f:34:3d:ac:40:
                    1d:33:de:d4:17:3a:26:b7:02:f1:17:eb:1a:38:7a:
                    3a:12:a2:c0:fc:a4:d7:96:c9:f7:cf:05:1e:9c:4f:
                    9c:27:ab:0b:74:62:e3:0f:2c:5b:47:dc:e5:6c:78:
                    43:0c:86:33:28:fd:dd:e5:de:58:0c:0d:d5:65:f9:
                    de:d6:1b:81:d7:b9:2f:8b:1a:42:a8:93:f3:f3:3d:
                    f3:5d:bc:78:27:f9:11:76:55:cf:3c:00:d7:0f:16:
                    ce:31:6d:2e:51:8e:b3:64:b7:2e:b2:7c:e1:b1:11:
                    52:8a:93:8d:07:bb:bd:d3:6b:4e:4f:35:6e:2f:dc:
                    33:1b:1e:77:04:ae:e7:48:55:7a:53:d7:30:fb:f2:
                    03:b2:11:32:02:91:a5:a5:ed:44:41:af:b2:ea:02:
                    8a:ad:4d:1f:c5:ae:70:06:f7:63:4c:33:b5:7e:96:
                    96:42:5a:69:65:2e:67:77:5d:41:5a:eb:7b:b3:c8:
                    c4:df:67:22:33:36:33:7a:06:c3:b1:d9:76:e4:fe:
                    23:c1:23:47:d2:fb:93:fc:62:fe:00:12:60:0c:8b:
                    97:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:30:60:31:FD:0E:F2:36:25:D3:38:A4:E6:92:5E:17:E7:6E:B9:1B
            X509v3 Authority Key Identifier:
                keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:a3:b7:08:bb:6f:49:96:5b:99:a0:57:11:97:98:d8:06:ac:
         ef:60:9a:cc:80:35:c9:75:3f:e7:5d:b0:5f:0c:e1:08:fc:ab:
         e9:4e:5d:61:fb:2f:15:cd:d0:6e:b9:d3:a9:29:df:15:de:68:
         15:3a:a7:08:d0:1c:53:84:39:0d:73:4d:cb:49:18:e1:7f:fc:
         53:32:e9:8c:7b:cf:e1:68:06:8a:da:a3:3e:b8:9f:0f:d7:3d:
         89:1f:f0:00:d8:b3:23:cd:e7:f1:1f:b4:ac:54:88:e6:0c:58:
         aa:ee:b6:3f:e5:aa:0e:a4:29:78:fe:d4:c8:0b:74:c2:0e:fb:
         96:00:b2:ec:e1:d3:58:73:88:4c:24:50:43:e5:8e:27:3b:e8:
         ed:67:40:3c:35:09:7c:00:9d:c3:2b:ac:a2:40:45:5b:e5:2c:
         65:6b:ba:d0:31:d4:8e:0d:2e:32:7d:c6:87:96:a7:06:78:5f:
         b5:96:df:04:06:84:4a:b9:28:a5:e2:eb:40:db:58:a9:f8:41:
         44:e0:25:ee:91:be:cd:46:f4:40:be:d5:03:f6:21:51:e2:eb:
         7e:23:3a:49:e7:03:dc:04:e9:cb:4f:1a:1a:ac:18:c6:81:ed:
         b2:a8:e1:62:c0:c7:5c:52:9c:81:e6:85:5a:dd:33:27:95:b7:
         12:62:f6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:29:39 2026 by rpki-client