Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
File:                     QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft (raw, json)
Hash identifier:          c4zbT1UngupAdiHLFBOLYCXqMUcMGDvRwEigGgRftwE=
Subject key identifier:   1B:69:85:74:08:D2:AE:10:09:5B:2F:3B:4D:97:77:CF:4B:61:6F:D5
Authority key identifier: 42:E0:D3:77:AC:22:5D:DE:2D:E9:10:CC:7B:81:68:50:F0:B6:71:32
Certificate issuer:       /CN=42e0d377ac225dde2de910cc7b816850f0b67132
Certificate serial:       019F91DAB9F16A89961372713BE1BF924FBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QuDTd6wiXd4t6RDMe4FoUPC2cTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
Manifest number:          60
Signing time:             Fri 24 Jul 2026 02:00:58 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:58 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:58 +0000
Files and hashes:         1: QuDTd6wiXd4t6RDMe4FoUPC2cTI.crl (hash: rG2iOeeofp3BVCNK8dPQZCS/VSTviY4voT2S7rhqRHk=)
                          2: eVVWCsR3SsLT4BetTTjquKU-q1M.roa (hash: aeSr2d45S0h29TxwaX3O5Y/8gj9nHZ8GIzMdMwCrt1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuDTd6wiXd4t6RDMe4FoUPC2cTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:b9:f1:6a:89:96:13:72:71:3b:e1:bf:92:4f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42e0d377ac225dde2de910cc7b816850f0b67132
        Validity
            Not Before: Jul 24 02:00:58 2026 GMT
            Not After : Jul 25 02:00:58 2026 GMT
        Subject: CN=1b69857408d2ae10095b2f3b4d9777cf4b616fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:52:00:3e:7a:6c:60:a5:c9:e8:e5:a5:c5:
                    e7:12:30:33:4a:62:0e:3e:8f:f3:fd:b0:cc:94:0b:
                    73:1c:79:8f:2f:83:82:90:55:fa:7b:69:05:cd:50:
                    d7:e2:70:ae:d7:c7:ee:7b:43:d0:e1:f4:ab:04:fe:
                    1a:5d:00:97:1f:93:69:45:0d:15:c0:79:e1:a2:e6:
                    ad:ca:e2:82:df:66:76:f3:de:3e:81:7c:34:c2:71:
                    4d:8f:99:ba:37:76:53:b6:9e:42:6e:3d:b3:f5:5a:
                    fc:02:f3:c7:44:76:83:97:6a:c5:e5:5c:83:75:26:
                    80:26:e7:88:7c:24:ac:2f:32:6e:c5:ec:02:88:d2:
                    b3:ae:cd:2f:2b:20:04:00:92:7f:8a:07:55:b3:6d:
                    c7:e0:84:d9:15:a6:69:0f:44:94:0c:40:29:56:4a:
                    c3:ac:a0:3c:bb:46:cb:6e:7e:90:7e:93:0a:20:1a:
                    c4:33:13:49:d8:cb:c7:ba:af:e7:62:cb:b8:83:b1:
                    e3:8f:22:c0:90:56:e8:65:c5:5f:0f:b1:97:da:42:
                    ec:7d:b6:03:38:90:91:85:f0:7e:61:e4:31:36:0f:
                    d6:b8:b2:65:c2:2e:c9:2c:60:b8:02:67:6d:d1:11:
                    bd:1e:05:3b:a4:2b:a0:ee:9c:fc:fc:01:f2:7e:9a:
                    99:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:69:85:74:08:D2:AE:10:09:5B:2F:3B:4D:97:77:CF:4B:61:6F:D5
            X509v3 Authority Key Identifier:
                keyid:42:E0:D3:77:AC:22:5D:DE:2D:E9:10:CC:7B:81:68:50:F0:B6:71:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuDTd6wiXd4t6RDMe4FoUPC2cTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e0:60:44:90:5b:75:09:5a:79:10:45:8f:72:33:06:e1:b6:
         46:14:68:5d:e5:61:c3:bd:48:12:63:de:2b:21:2b:82:8b:44:
         33:a9:86:f4:b5:d2:54:9d:cd:2c:aa:2a:68:e1:08:29:49:a7:
         c3:d7:e5:38:bc:24:26:4a:40:75:e1:83:27:98:fe:dd:91:9c:
         1c:f7:52:3a:54:b5:25:f3:fa:b7:be:f3:1d:72:7a:82:c2:e3:
         4c:56:49:40:33:9f:e8:af:c6:8c:2c:b8:92:5d:ad:cd:b5:75:
         e6:1d:dd:19:dd:32:09:bc:b7:6a:92:93:36:70:20:13:cc:da:
         5b:97:c1:6b:78:8b:c0:1e:ad:a1:42:7a:a2:a4:a0:1a:ea:42:
         96:35:aa:dc:a6:81:53:75:ba:03:a3:86:1f:31:f1:a5:3d:05:
         78:11:33:2d:df:fe:7a:95:53:47:d3:c1:b7:a2:63:f2:a7:09:
         48:41:38:5a:68:38:d6:46:7f:d0:8b:73:e3:bc:21:44:66:c9:
         55:12:31:0c:f6:73:56:bf:28:54:11:06:7c:e9:a5:5c:92:18:
         fc:28:9a:8a:a8:1a:ff:ed:15:b4:ed:80:f6:73:49:75:1b:ab:
         6c:79:94:6e:ca:d7:63:61:16:fb:d5:f3:6d:08:87:e1:8b:a5:
         2a:df:d3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:30:21 2026 by rpki-client