Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
File:                     Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json)
Hash identifier:          fB81eKW1B3TBVqmdS5U7HhQBEbHqaSyK7j1kuHD+eNg=
Subject key identifier:   12:58:D6:89:33:0C:AF:D0:CE:02:26:22:F5:7D:4E:29:FD:0F:33:97
Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
Certificate issuer:       /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Certificate serial:       019F8FB4E455E04515C5A6115F44DAA5ABE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
Manifest number:          08B5
Signing time:             Thu 23 Jul 2026 16:00:24 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:24 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:24 +0000
Files and hashes:         1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: ArJMq6QaVeBa6ZM/LK14hyJdQSMVryJurXZeSyc0jSs=)
                          2: gODxSRHwWTf0AdhEf-vZlAdcT8Y.roa (hash: 3YgISHwQEuO0iWUQza0xD+9L4RrntGi+pZDu8veL4Yo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b4:e4:55:e0:45:15:c5:a6:11:5f:44:da:a5:ab:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
        Validity
            Not Before: Jul 23 16:00:24 2026 GMT
            Not After : Jul 24 16:00:24 2026 GMT
        Subject: CN=1258d689330cafd0ce022622f57d4e29fd0f3397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2c:8f:23:8a:5c:ab:c0:d7:b9:de:41:5a:c5:
                    06:8d:13:cb:39:c0:b8:99:ff:67:2b:21:f4:b5:74:
                    8e:69:fe:56:35:f6:75:ea:10:57:7d:5e:4f:59:76:
                    bc:f9:93:cc:5b:a8:37:cf:2b:2d:18:78:0f:c9:79:
                    95:d9:82:80:77:89:7f:b5:2d:b1:5e:b0:8a:5b:0a:
                    22:da:bc:74:92:0b:83:66:08:55:df:25:b3:55:38:
                    78:30:a8:c8:6a:15:2c:cd:ae:fa:d7:11:8d:5c:e8:
                    74:16:48:a6:6a:44:e6:06:32:55:6a:08:7e:b3:ae:
                    1a:78:0c:92:52:90:e0:64:4b:8e:fa:62:19:cd:f6:
                    1a:cd:01:b3:0b:2d:61:c3:35:cb:fc:55:64:d8:17:
                    d5:f2:1c:cc:6e:15:28:26:a4:f0:85:a0:dc:f5:92:
                    b0:bd:73:c9:71:07:4a:09:df:2c:a7:ad:3b:fb:f7:
                    70:44:19:66:81:af:2d:70:0c:fa:11:f6:4e:b2:81:
                    70:95:52:b7:8b:fb:f8:7d:1c:22:77:8d:1e:81:21:
                    fc:09:89:5f:59:af:31:32:45:a8:4e:50:84:2f:72:
                    10:71:79:8e:cb:86:1c:4c:eb:7f:4d:22:02:8e:f5:
                    b3:62:70:3e:6b:a8:6f:b9:36:ef:e3:60:c9:d0:4d:
                    b0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:58:D6:89:33:0C:AF:D0:CE:02:26:22:F5:7D:4E:29:FD:0F:33:97
            X509v3 Authority Key Identifier:
                keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9c:42:ea:06:08:69:44:b5:13:8e:4e:8c:95:82:e3:f7:15:
         a7:37:2a:62:b2:e7:26:95:19:2d:27:b5:55:8c:09:34:66:78:
         c8:c4:69:a4:bd:25:81:c7:8e:58:4c:60:2e:83:bc:11:b6:cd:
         a3:ef:f2:0f:dd:96:ad:02:8a:4e:78:33:00:8c:f9:f0:5d:76:
         a5:67:88:3e:99:5e:45:16:da:28:e8:5a:b8:ee:9d:c6:97:d8:
         30:c6:aa:7f:d2:d5:4c:f5:ca:d6:a3:06:4c:dc:41:12:08:f7:
         df:a6:e8:18:eb:34:89:c7:f5:a0:1b:46:3f:c3:3f:42:f3:ef:
         0e:11:ba:b7:6a:cc:49:e1:fc:7b:27:bb:9b:47:d6:be:6e:e0:
         ff:3f:f9:3b:9f:7f:ba:48:2b:9d:2f:7c:8c:ec:d0:96:88:b1:
         ee:20:f6:38:2f:c1:22:61:af:bc:3e:b1:e9:b6:81:5f:43:c5:
         d2:bc:82:38:85:ee:5e:c0:fa:63:46:4b:d5:d9:39:db:60:c6:
         d6:85:11:13:94:65:45:d0:1c:e8:66:cf:1c:ad:c3:55:c1:a1:
         73:69:40:ab:c5:66:c8:c6:a3:cc:0e:d1:5d:b0:1f:31:7e:24:
         34:8d:21:64:66:b8:65:1d:2f:96:bd:d7:4b:8d:30:f5:e8:f9:
         51:2f:8c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:27:49 2026 by rpki-client