Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
File:                     QpK12ktP_q9yBklRj7qqEMXLKBE.mft (raw, json)
Hash identifier:          4hL5IVA2PLX9xUP6eK5AewqAQxZs3koIfRI0Ictdkd0=
Subject key identifier:   1D:67:39:D6:E9:0C:5E:C7:09:44:28:AC:6E:AB:2B:4E:FB:C6:E0:A6
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Certificate issuer:       /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial:       019F916DCF0E892A02FE1B0D7EA21DB6E764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
Manifest number:          16C0
Signing time:             Fri 24 Jul 2026 00:02:00 +0000
Manifest this update:     Fri 24 Jul 2026 00:02:00 +0000
Manifest next update:     Sat 25 Jul 2026 00:02:00 +0000
Files and hashes:         1: 1-zKeb-IeX8t9rg1jjNFl_xTAf8k.roa (hash: x/2HWodFxHIIakQ067uMyNqGJxCZUgbeCuK82JlyTVE=)
                          2: 2ApePr27C2Mxz5cN7WWk4U2tDDk.roa (hash: CD0cmU5ZM9bBvaZuSvXRxXdU7JshBZqKvAkjtm5OfiY=)
                          3: 3djyl22f-p0y1ATvkQjBV19gaTY.roa (hash: jUbyPz81HGv4KSalEDkzBpcXbqg6wngIGk3uloRyvjk=)
                          4: 7FJVYVN98VNVQnUXzxLPoJeoiaA.roa (hash: F4/DBsFDr9yR6nMLsl05TEcPKZ7vaecFKVkddQKtGmM=)
                          5: QpK12ktP_q9yBklRj7qqEMXLKBE.crl (hash: jbswIn1UHgzihD5Bmwz0FWF8CU6XwbfiE1BAoVSP8+8=)
                          6: _zP73NXlOD_8EgcbXNN-hPdzSQo.roa (hash: XVZFe/ZBZLQR/k8FwFmC9dpWix1IncPAmzb2M0KXlGk=)
                          7: aLtWeupezBLiYrwMc00VinuvN_k.roa (hash: T8m+LUOBdylJKBiUGmraIgCBwgzPA5xxWmLAvriQrm0=)
                          8: h5uK1sxm-LA7F7RnXnRUsWfGsFc.roa (hash: kiAKvXhdtX2kzyGIv4FUOZn9GRgVG3rv957GsPh/b7w=)
                          9: k3EyxzEGO684lLpKgy_muF8oOKo.roa (hash: W5sM5cj+H6IIPNHWDPzvbGLEH/hSqzWhtRK9Is/t5Pg=)
                          10: n-1zO1mkbkpAK25DKPeRknT2Xwk.roa (hash: fAsIaj/DFcfGvej8sp2fgwVMTS7hWzp8nJHPmFLM/NM=)
                          11: tVRKIzEi3C5oivV0NSF6cpvQXxw.roa (hash: DCE8qPP2+ixczk2thpFiZupianuMg94BL32mNt6WYVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:cf:0e:89:2a:02:fe:1b:0d:7e:a2:1d:b6:e7:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
        Validity
            Not Before: Jul 24 00:02:00 2026 GMT
            Not After : Jul 25 00:02:00 2026 GMT
        Subject: CN=1d6739d6e90c5ec7094428ac6eab2b4efbc6e0a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:6a:3b:bc:5c:5e:56:46:65:c8:7a:2e:a3:
                    9c:8c:38:fe:13:32:08:e1:af:4a:c0:24:fc:0e:10:
                    88:47:88:3f:82:33:d6:2a:55:c5:4b:31:93:9d:b7:
                    3e:1e:ca:aa:02:78:2e:d6:8d:f3:ff:23:73:a2:c6:
                    81:32:ba:a6:05:e1:1b:25:a1:2d:51:03:77:65:34:
                    7b:4f:9d:b4:d3:4a:c9:63:9b:7a:12:88:3b:ab:de:
                    21:e4:96:84:09:32:86:a2:55:c6:43:c6:94:0e:cd:
                    44:1b:e7:cf:8b:d8:e8:70:cb:01:40:9a:35:f1:c4:
                    73:36:29:8d:11:0a:43:52:da:b9:28:18:66:1a:46:
                    03:e5:47:6c:3f:23:30:1c:67:80:c4:ea:c1:b4:e4:
                    30:8e:85:c5:9e:f2:65:8f:a5:84:18:3b:85:9f:82:
                    66:2a:9b:23:c0:bf:fb:09:94:31:1e:1a:02:52:3f:
                    c4:f3:7a:e0:47:a8:e0:a4:c4:b9:dd:ba:6f:50:76:
                    c0:84:cd:98:af:29:98:66:0f:42:f1:5c:b3:d0:c6:
                    12:f8:02:15:98:f3:91:79:39:78:02:fc:80:11:dd:
                    e3:e5:63:e5:49:dd:67:d4:fd:a6:a2:a3:fa:30:92:
                    b2:2b:df:e9:7e:3c:70:78:a1:f6:0c:ad:03:0e:4a:
                    7a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:67:39:D6:E9:0C:5E:C7:09:44:28:AC:6E:AB:2B:4E:FB:C6:E0:A6
            X509v3 Authority Key Identifier:
                keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:77:11:5b:fb:84:76:f5:b5:75:9c:17:c7:ca:c0:e6:93:cc:
         fa:3a:70:84:66:b8:6b:18:bc:ad:14:48:6f:5c:10:d9:d6:b2:
         4a:f4:99:c4:e5:76:21:4b:9f:84:62:e5:c5:42:44:4e:85:8b:
         2b:c1:6c:7d:ff:40:dc:0e:41:fe:90:7c:2a:69:e1:6b:17:21:
         4d:e7:c4:09:c4:c6:65:88:eb:5e:18:3a:9d:44:b0:23:91:5e:
         0e:94:81:b9:42:9c:72:a2:59:fd:2f:96:85:54:07:41:aa:a5:
         ab:be:05:1a:b2:e3:8e:59:27:b0:b4:c0:24:e8:c4:a2:59:64:
         b0:2d:9b:df:4e:ff:55:c1:04:c0:b9:0b:b0:37:74:29:9c:06:
         7d:aa:c2:88:ed:e5:38:30:eb:1d:0a:7f:1d:46:d2:1c:a6:5e:
         39:fd:76:7f:57:f3:d3:ce:93:bc:18:6c:8d:55:06:72:94:e3:
         f1:05:1d:6a:09:b2:ae:54:d2:71:92:27:fe:f6:30:22:dc:59:
         29:55:d2:af:ff:22:d3:e2:8d:50:b7:aa:93:16:7e:e0:8e:3c:
         41:0b:1d:b4:0a:e8:d2:f9:13:b4:e7:c5:94:75:32:45:4b:99:
         a1:42:4d:b5:64:64:2d:be:06:17:ff:39:95:25:0c:2e:23:03:
         d9:6b:82:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:34:10 2026 by rpki-client