Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
File:                     QXY9se0zSnxSgKuYVHQpFK4MTFI.mft (raw, json)
Hash identifier:          cBboR334T/ORdb06n4wgXq4FydYd6wi+Gpi8Z7QX1/4=
Subject key identifier:   17:F5:18:22:8C:90:86:08:83:93:8E:B1:7C:F1:B3:97:06:AE:4A:0B
Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
Certificate issuer:       /CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Certificate serial:       019F91A36355835965B2F019F103DFE94157
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 01:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:31 +0000
Files and hashes:         1: COcuQD28TY4ZqHPvGBIq2LU3DXk.roa (hash: sGBU4PQ1UIgFaLuANN/BNFi8JnXaw9XHPOkCM2vz3ZQ=)
                          2: K_paFEQGcD7Dwb0KkGKaMQdIqNM.roa (hash: ivJfY98y3w5lIdblfpjkHHl9Y491gAGuVUxW2bbSNrk=)
                          3: QXY9se0zSnxSgKuYVHQpFK4MTFI.crl (hash: o49WOXB9Nr3t9LDuYPaMZDDTVRJbYlGIy1H6FDi9wZs=)
                          4: SLqudbuR-X_G17PVNpWnd2oSWUg.roa (hash: D231831UXSiNe5nD27nyCz/MyBN0j+z0R+T49a0xy84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:63:55:83:59:65:b2:f0:19:f1:03:df:e9:41:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52
        Validity
            Not Before: Jul 24 01:00:31 2026 GMT
            Not After : Jul 25 01:00:31 2026 GMT
        Subject: CN=17f518228c90860883938eb17cf1b39706ae4a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:76:c4:c0:3a:b5:a5:93:cc:7a:6d:f1:25:ab:
                    07:d0:5a:3f:ca:43:e1:93:29:9d:36:e6:1d:00:48:
                    c0:c0:c8:2f:33:08:39:22:b9:72:04:35:31:ba:22:
                    cd:bd:38:78:ff:a6:8a:2f:15:b3:c0:8e:4e:30:22:
                    d4:d1:31:14:c7:f8:aa:7f:d3:41:a4:48:f5:18:12:
                    90:f7:8d:db:eb:74:20:0c:1d:da:52:2f:56:59:83:
                    ab:73:c0:93:61:b7:25:da:9c:33:43:24:13:f0:f0:
                    25:bb:f4:64:f7:07:a9:d1:2d:23:1c:e5:52:1d:f9:
                    03:79:7d:74:a6:dc:4c:2f:61:1e:b0:43:da:68:1b:
                    0f:8d:26:12:7b:b8:17:fe:4f:49:47:08:71:79:6e:
                    27:b1:ec:f8:3f:92:f3:a1:b9:5b:01:eb:5a:64:74:
                    c8:17:8c:9f:2c:b8:83:ab:d0:ac:ae:4f:a6:7c:50:
                    32:3f:d6:48:8d:8d:4d:9f:7d:73:c9:ea:44:c8:7a:
                    12:b4:0f:02:fd:d4:bb:72:5c:70:c8:a9:0c:e5:e4:
                    36:81:4d:bb:72:2d:a1:9e:fe:55:29:87:a9:f6:f6:
                    30:9a:3c:b5:16:7a:4e:99:48:ce:92:36:6d:dd:88:
                    94:90:dd:e9:2a:00:91:b3:64:f0:aa:28:bf:e5:b5:
                    17:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F5:18:22:8C:90:86:08:83:93:8E:B1:7C:F1:B3:97:06:AE:4A:0B
            X509v3 Authority Key Identifier:
                keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:41:42:8a:70:c6:a5:fd:29:ca:af:84:cc:28:d2:71:8b:2f:
         21:28:d3:11:a2:ca:3f:5a:35:d8:f1:dd:c3:d3:57:35:2b:6f:
         a3:b9:95:31:47:9c:48:e5:56:24:b4:71:46:48:bd:0b:af:52:
         fa:0d:bb:72:3b:37:fd:a2:7b:27:d3:17:7f:76:69:a6:34:d6:
         06:1e:d3:7a:58:17:03:2d:d1:ab:1f:e4:21:8b:3f:25:e7:ea:
         24:10:12:43:15:d8:3d:f2:b7:d4:10:c4:a2:b0:ae:ca:77:a9:
         91:ac:e0:e4:15:16:8e:10:92:68:0b:11:ba:6e:61:26:a8:2b:
         14:f0:6b:99:47:67:e1:c8:15:4a:16:35:1a:5f:ab:93:90:11:
         cb:19:65:93:c1:fd:74:26:d7:57:47:87:a9:6b:e5:85:9c:fe:
         f4:48:86:b9:dc:d4:c8:a1:aa:02:55:e3:0c:b7:d1:cb:a6:1f:
         83:5b:f2:a7:39:7b:4a:97:3f:57:da:aa:b7:6b:67:b4:de:f7:
         0d:f9:b1:4d:c9:ab:fb:aa:2e:5f:ee:e1:44:db:8d:e5:d7:18:
         ff:d3:2a:9c:ce:b5:e1:61:ac:d9:57:c6:fb:e9:a2:01:0b:24:
         e6:30:49:3c:dd:1d:e3:41:93:e3:ec:ed:69:ac:91:59:b7:1e:
         a1:6c:c2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:47:12 2026 by rpki-client