Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
File:                     qqMUWS716ou-hNBkslYXH-KvyD4.mft (raw, json)
Hash identifier:          MYy48SBiEOYXVVblUSXKjl5NMhu0DJXcLv8GyBfbG1U=
Subject key identifier:   6A:F6:FE:2B:12:AC:56:7D:81:E2:01:74:69:7C:6E:6F:2C:0D:9F:35
Authority key identifier: AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E
Certificate issuer:       /CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
Certificate serial:       019E20C84E086D7A02718B21DD3CA6C4A2EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
Manifest number:          0D8A
Signing time:             Wed 13 May 2026 10:00:58 +0000
Manifest this update:     Wed 13 May 2026 10:00:58 +0000
Manifest next update:     Thu 14 May 2026 10:00:58 +0000
Files and hashes:         1: 1y4mjCjd3yaeU16gh_uU_xDclvA.roa (hash: akVEsaylTtagPHzHitk7WCUHGfvzfwDTl/6FhQXu8p4=)
                          2: qqMUWS716ou-hNBkslYXH-KvyD4.crl (hash: gN5hvR/+jwrkwlh0sH4IUl3UqsSYGUtsFsokLAj4E84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:c8:4e:08:6d:7a:02:71:8b:21:dd:3c:a6:c4:a2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
        Validity
            Not Before: May 13 10:00:58 2026 GMT
            Not After : May 14 10:00:58 2026 GMT
        Subject: CN=6af6fe2b12ac567d81e20174697c6e6f2c0d9f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:6a:6c:61:e0:88:6f:4a:cb:7f:9a:b6:a9:
                    4f:ae:e3:9d:8b:72:a3:37:04:85:6f:ea:4f:1c:55:
                    ea:84:d6:74:b5:46:51:09:db:db:a6:b5:9a:ea:ac:
                    c2:3e:3f:82:ea:5a:33:5b:ec:25:e4:57:b5:41:dc:
                    5b:b9:df:3c:a8:2f:a3:60:74:d1:37:94:61:8d:32:
                    d0:a1:6c:9c:30:fe:e3:a8:3c:b6:69:52:de:33:2a:
                    35:39:38:54:c8:8a:94:20:99:f9:53:e9:7b:4d:44:
                    16:90:8f:9c:1a:57:03:10:eb:d6:f6:08:07:02:23:
                    ac:a3:e1:5a:6a:9e:da:aa:0e:a2:d8:5d:d3:db:7f:
                    9b:66:83:27:cb:43:d6:ff:56:df:a4:1e:06:ac:c1:
                    39:03:4a:90:33:8d:44:f7:0e:9b:60:b1:5a:73:ee:
                    1d:1b:01:9b:d9:66:3b:25:82:bd:fe:56:41:1c:9d:
                    25:fc:26:96:97:66:a1:b4:af:5e:07:75:05:77:55:
                    2b:ac:f9:6a:62:85:40:32:4d:07:54:b0:d2:73:93:
                    c1:ee:17:1d:c0:70:1f:41:c9:5f:4a:85:3f:c7:12:
                    f6:4e:14:14:f0:06:7e:7e:2c:2d:63:e5:1a:a2:91:
                    3d:d8:a8:72:8d:04:7c:73:ab:d4:12:1f:92:90:72:
                    e3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F6:FE:2B:12:AC:56:7D:81:E2:01:74:69:7C:6E:6F:2C:0D:9F:35
            X509v3 Authority Key Identifier:
                keyid:AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b3:52:d9:d0:99:62:fd:12:3a:3e:03:91:b9:96:a6:fa:67:
         dd:86:23:fb:2d:fa:7c:3c:76:ea:29:bb:2f:51:d2:cd:4b:76:
         5b:24:47:be:39:21:50:64:e5:b9:b0:71:a1:74:f9:a2:23:65:
         21:0e:c7:56:b8:15:0d:fd:94:bc:24:04:4d:ca:1a:6f:ac:5e:
         19:fe:de:77:73:01:fc:37:85:f7:bc:cb:4c:69:07:c0:00:2a:
         4d:ce:86:1b:b1:b8:22:18:b5:3f:ff:84:a4:e7:8f:9c:ee:d3:
         db:2d:92:a8:4b:5d:66:75:eb:de:07:e2:8e:5d:75:37:01:62:
         6d:a2:66:6d:20:95:2d:fc:73:5d:f3:fe:58:07:e7:85:84:01:
         4f:a8:96:49:f9:0d:e2:99:4d:cf:9e:a6:7e:c0:29:4d:83:1e:
         15:07:6c:86:d5:32:a4:16:fd:32:38:12:13:fd:11:ad:14:05:
         a8:9b:6b:72:f5:34:8b:e3:38:d1:ab:20:3f:00:9f:86:19:10:
         65:8c:24:18:32:d5:41:ea:02:3e:3f:ea:f5:48:0e:f0:c4:1e:
         c9:dd:29:e8:82:c0:b1:fe:bd:95:62:eb:99:b2:7c:73:50:c2:
         dc:e7:9d:d0:7e:8b:f7:10:83:20:25:76:6e:f1:6d:cf:d6:a1:
         d5:80:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:51:44 2026 by rpki-client