Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
File:                     dqdYJumRIlpCn_ih5__cgEZkIN8.mft (raw, json)
Hash identifier:          iy/SLV00YkTGLuvAbnMMz4GLcMseqMB1vcqvWFzB7To=
Subject key identifier:   63:44:16:04:E0:A1:50:67:4E:80:13:F8:91:B7:4C:FB:6B:8B:8C:F2
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Certificate issuer:       /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial:       01A1DBDDB59227E484BF87931E859B4FDDB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
Manifest number:          1B1D
Signing time:             Sat 14 Nov 2026 21:01:42 +0000
Manifest this update:     Sat 14 Nov 2026 21:01:42 +0000
Manifest next update:     Sun 15 Nov 2026 21:01:42 +0000
Files and hashes:         1: 3lVoSteGkpKcde56m2WcsA8N-s0.roa (hash: 1XrtONYMpJVe4WnBQhEVaGnetVY+4paKXOigWmRK674=)
                          2: 72qqOl08Ng_75PrEX39wChvsHq8.roa (hash: wdAGiwDNclYEAAkLFN5CEwmjhcr+4EBdtbN76kXOOjo=)
                          3: AFJzhmH9R0mG2bUCJPJT6j8bKrw.roa (hash: EzibNTyau7BTPE7oIO9TUlGehtGq8uPVCAnORk3k9nM=)
                          4: HBckW3ER80MSeSiwpy-Z-q1qiGA.roa (hash: QBBHo4qiNBL+JHuv6YtHpt1D3ezGsz5yopdFgNvM84U=)
                          5: Jj6QniBhg0ekrss-TvVc94h0S2M.roa (hash: qf4l8DU2kkBt1QRzcva1hlT0ObLg86RVHmV+gl/DthY=)
                          6: M_Zrv0eTt-hhAHKM89cDFtPfvPI.roa (hash: 8QhFDfLhK8OB14NksFoRCKIZ2O0CQM/pbJL/g+vvAt4=)
                          7: Piwh6Gdq7GydD4rudpdk_H1-iJ8.roa (hash: wtN9D7HevPrfH3K/IMhwZNny7MHPmsA5+nenLp6rWiU=)
                          8: b4ESO_pvGgCqVp88yRCz-5OoSf0.roa (hash: gzB0VXXq99U/xkP9oWFBiaWwqsbZ9lY1uOT5L1wm/Fk=)
                          9: dKz_j_O-lAoD6qg2pO9vZUA4BGw.roa (hash: AKN2pF1PfbziQzZH+0SJyj3F9OOfW1sRqDb4wG8eZgw=)
                          10: dNznR1-S7vVnFASVh_hci4jZkMQ.roa (hash: zQ1QJ64mxnosKyQobzETFihGQBbENfar+9z/U7xN1lc=)
                          11: dqdYJumRIlpCn_ih5__cgEZkIN8.crl (hash: BcH7ysPzoU4Edb4Ne0JIKUKX/dx/Lxxu/4CvlzrntMQ=)
                          12: fUNqCWuIckYGiVfEbuqCIkLI6d4.roa (hash: 2XlV9ynqjk3ChcE4Iw5juKC67TwbxBsySYHKnmHonQo=)
                          13: j2x4B6ObPzHT8ea8R_EMWP2PPik.roa (hash: X9UYUryQZPrf+c81HDCEnwfx3vw9iA0hQ/eJMGoOoMU=)
                          14: lkbj_rHQ3odPB7yMiampsN-UZno.roa (hash: qptKUULvCznnpcjyPdRsDYHUthdNfWlbjNhIIyjJ/gg=)
                          15: mcWyzJOHr9Zx7r67vsArKVYzm-M.roa (hash: jPJa6OTo4Vh6SlUAyeSF3ybtpQx5852t+NVU3VYBCWg=)
                          16: p5-KSOQJoRc-a4h6VGwthwBmpAw.roa (hash: Oaku+ye04iIHVUwLwL5t3yBGhVH08pyoMvs2MjpbNqY=)
                          17: qrN-Uu0M-3HDr-76__U4MO8Jem0.roa (hash: F/0Bv+YLgCLY8hUXxBuIT6dqQV4aBe4yFDyDrHdklVY=)
                          18: sN7KZAb0tSBb8kQXanj5RVDo87M.roa (hash: sNtlv5Kfns7Qub92+PG+1MiYKqG3uVLYzRGiFbw3ks8=)
                          19: u3HM98A-Q9MDGyUnaURhtvW-lGU.roa (hash: orjD4qXj9t+4NhQVjT8wKDidu8IPZ4dL81G059Mpu9c=)
                          20: vbIqeSU0561jYPf76GOTQkgqkkU.roa (hash: I6pxxL2tdL5sG8uXzs35tb/DbPA84Se4ObiynAzOPa8=)
                          21: xFb3afKCHZ5K-TLErHfTSuMJKOU.roa (hash: 6l4PHj5QdfEodyTxnZX/6jrZVq4xk62zNf4EfjYJEmo=)
                          22: y2z9eC0pey0L-F8Me0uxP0CdRNE.roa (hash: ynALlANptr3j2opU4Eof0BTlyqYbPLK8fhfTetUFwTw=)
                          23: ygWs-sHzivtfoMPPnMV6aV1UCv4.roa (hash: KjRCKq03kFFE3PyzvTA3OcOazG7q6LPfF+mD7puBZ4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:dd:b5:92:27:e4:84:bf:87:93:1e:85:9b:4f:dd:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
        Validity
            Not Before: Nov 14 21:01:42 2026 GMT
            Not After : Nov 15 21:01:42 2026 GMT
        Subject: CN=63441604e0a150674e8013f891b74cfb6b8b8cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d8:08:52:89:fa:e4:c6:31:c3:fb:b3:d2:e2:
                    89:fa:17:a6:bb:84:55:ef:ba:f5:c1:46:5b:a9:31:
                    56:52:4f:89:9b:74:82:af:f5:b7:ae:c2:da:b8:f6:
                    5e:29:54:27:90:36:29:c9:de:e3:9c:83:a7:58:e2:
                    cf:94:eb:47:e1:f7:33:3f:99:86:ac:72:ba:f5:a7:
                    a2:31:2e:d3:d5:db:d7:8e:98:74:99:02:c8:4f:b8:
                    13:d3:34:af:e5:4f:4b:ab:85:40:84:88:b3:c9:60:
                    d0:a7:f1:0e:80:ad:e5:e4:07:11:c5:46:ca:9d:62:
                    e2:b1:da:f8:ed:28:ad:f1:fd:6d:40:24:b2:85:c9:
                    30:af:ba:a0:40:a0:78:8c:4a:47:14:d3:23:07:68:
                    52:2f:35:9b:db:5d:11:e2:7b:c4:81:02:59:36:29:
                    cd:ec:a5:df:e9:52:af:31:89:35:5e:5f:89:1a:16:
                    d4:ef:1d:27:dd:99:c5:6a:91:03:24:bc:a4:2a:cf:
                    02:6d:ed:6c:85:1b:ba:5d:84:1a:05:39:e1:66:57:
                    d3:f1:8b:5d:70:ef:16:45:3a:47:3f:aa:24:49:fd:
                    a6:ac:24:d9:28:e2:20:b6:55:22:b6:b8:a7:d4:d1:
                    0a:3e:51:17:b8:ec:e7:d2:74:dd:c5:aa:5c:ca:e1:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:44:16:04:E0:A1:50:67:4E:80:13:F8:91:B7:4C:FB:6B:8B:8C:F2
            X509v3 Authority Key Identifier:
                keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:62:61:e3:6d:5a:a4:13:6c:03:af:13:e8:8f:d7:7c:d4:fe:
         c7:c2:48:52:f5:b0:d0:37:c9:07:1c:c4:93:c7:05:6b:09:22:
         6e:00:f4:a4:20:a7:fa:5d:cb:9f:af:b8:0d:0c:0c:f0:a3:53:
         94:5c:b6:a5:4c:5f:5f:92:0c:ae:ab:51:da:9f:2f:8b:15:2a:
         5d:52:91:26:dc:4c:c5:6a:65:7b:55:54:de:e1:34:04:80:a0:
         37:8e:b1:b5:5f:8c:57:4b:57:a5:b8:5d:32:35:a2:ff:97:0c:
         5c:c5:0e:95:54:17:08:f5:13:21:d1:fd:e6:83:0e:90:f5:1e:
         37:af:fa:83:58:d7:bd:c9:2f:f9:10:85:20:66:5a:e4:35:8c:
         2a:ac:9d:bb:b5:00:ff:d4:6c:65:80:ce:b3:c6:c5:3f:2a:6e:
         50:10:76:e5:c2:bf:99:86:bc:a8:29:a2:79:8d:4d:7c:99:3c:
         56:37:bb:62:49:84:94:ed:55:22:03:17:97:16:a6:d4:04:8a:
         78:23:a7:9e:46:2c:73:32:08:14:17:5c:72:02:3e:de:8c:b2:
         95:66:a3:3d:84:7c:a0:a0:a0:0e:4e:71:1a:fc:5b:22:2c:92:
         18:cc:fb:88:11:e7:23:18:bd:35:36:d8:42:fb:20:b3:03:89:
         39:2e:9b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:37:26 2026 by rpki-client