Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
File:                     QYJu6QJw_dFCOvgJByYAZxjfxs8.mft (raw, json)
Hash identifier:          91LJSRgnajpDqxcv7bgSC/R1ZXrg/avvnT4nJT/4mYU=
Subject key identifier:   99:F8:6B:34:7E:9E:62:BC:D1:C5:F3:DB:8B:62:24:AC:40:30:78:07
Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
Certificate issuer:       /CN=41826ee90270fdd1423af8090726006718dfc6cf
Certificate serial:       01A0D9BB7450C31153F5E98CD985FB1C94E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
Manifest number:          19C5
Signing time:             Fri 25 Sep 2026 18:02:15 +0000
Manifest this update:     Fri 25 Sep 2026 18:02:15 +0000
Manifest next update:     Sat 26 Sep 2026 18:02:15 +0000
Files and hashes:         1: QYJu6QJw_dFCOvgJByYAZxjfxs8.crl (hash: 6lSggiVhxamwhTtCYf7avQ5PU7brMqBX4VxdiOTO1s0=)
                          2: vUZltBKcGS-PyNExw351SsPo8f0.roa (hash: R88L+/UM9Ub6dUxPG9JUIXyMGiUf8ahmjgxxPz1xB4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:bb:74:50:c3:11:53:f5:e9:8c:d9:85:fb:1c:94:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf
        Validity
            Not Before: Sep 25 18:02:15 2026 GMT
            Not After : Sep 26 18:02:15 2026 GMT
        Subject: CN=99f86b347e9e62bcd1c5f3db8b6224ac40307807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:1b:b3:ef:1d:2d:70:6c:bd:a5:58:90:90:49:
                    41:79:fd:c3:b3:c8:54:63:91:f9:95:cb:20:06:8f:
                    4d:a1:a2:40:c2:aa:e2:08:28:e2:4b:89:6e:08:0a:
                    08:8d:fa:c2:7b:f6:34:ee:c3:74:c0:88:b3:ea:41:
                    ea:37:6e:eb:cf:c7:02:0c:60:e9:e4:d6:75:22:5b:
                    8e:8c:9f:fa:89:25:5e:16:75:6b:a2:a6:43:a4:5f:
                    58:f7:27:fe:38:81:37:55:bf:bd:8c:a0:b1:21:54:
                    60:8e:f8:63:65:6f:ac:11:83:c5:bf:56:bd:43:43:
                    d5:a7:cf:83:bc:d8:69:5a:02:a5:9c:cb:0d:26:b2:
                    db:f3:7d:22:56:76:73:c2:e0:a7:5e:0e:00:77:b0:
                    7c:c4:96:42:bc:84:b6:96:50:4f:4e:14:5c:5d:a0:
                    9b:c4:f3:22:b2:35:ad:3a:b7:35:5e:11:f7:d2:3d:
                    a6:8b:aa:37:92:8e:00:99:3b:c5:81:ce:21:b7:68:
                    96:ce:44:c0:b5:d2:9e:38:cd:09:87:80:db:73:15:
                    a7:80:93:e7:53:ed:aa:6d:f8:cd:5b:6f:51:57:97:
                    88:c2:03:b3:36:b3:6b:c5:85:f4:81:a6:47:3f:bb:
                    00:9f:23:42:f0:d1:2c:8f:49:4a:00:e7:ee:06:97:
                    fe:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F8:6B:34:7E:9E:62:BC:D1:C5:F3:DB:8B:62:24:AC:40:30:78:07
            X509v3 Authority Key Identifier:
                keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:69:e4:5f:df:34:b1:bc:3a:ec:b2:82:25:7e:51:73:b2:85:
         51:d7:1a:35:f9:98:95:39:f9:58:1b:0a:5b:24:8d:aa:ad:34:
         d9:9c:c0:2b:1a:62:02:27:c3:39:6d:1b:ee:87:39:a3:db:e7:
         d0:62:30:cd:c8:35:ff:a4:b8:73:16:d2:50:7c:b5:0e:5d:60:
         9f:07:84:a8:2d:1c:45:f8:34:69:0d:bc:fc:c3:7d:60:d4:c3:
         43:fb:11:7f:10:cb:3d:a3:11:f0:8b:95:c3:0b:89:ce:f1:c0:
         86:0d:bf:d7:6d:39:f1:a7:3e:f0:cc:9d:45:30:3a:01:2c:cf:
         e5:51:4c:e0:dd:46:5f:e8:2b:04:1c:3b:dd:3a:76:0b:3d:31:
         dd:c1:ea:4e:13:66:dd:e1:68:76:04:d1:19:10:6c:7f:94:21:
         c7:88:cf:07:71:2a:2b:1a:00:da:9b:12:a2:82:d6:91:9f:8a:
         68:7b:0b:77:5c:69:8e:fd:34:49:cd:ad:d5:06:92:b3:c4:87:
         af:c6:0b:d0:f4:c0:f2:16:63:e3:ff:b5:77:1d:97:f1:64:c6:
         62:fd:53:7b:7f:d1:9f:23:00:e8:e4:a0:53:db:ef:fa:61:8b:
         e4:af:65:5b:8c:1d:be:3c:04:19:a0:b2:8c:e0:46:a6:59:88:
         82:a4:cd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:36:45 2026 by rpki-client