Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.mft
File:                     1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.mft (raw, json)
Hash identifier:          J38tC0SFuG2B+0DNLlkseH6apvKiL15HSm30d+zJH/8=
Subject key identifier:   97:92:0C:4E:31:3A:00:00:4E:F6:E4:4A:F5:33:CE:BF:9A:71:6D:DD
Authority key identifier: F9:0C:FF:CB:29:EC:75:8C:AE:3F:54:C6:F5:0A:B3:BF:69:53:0F:1A
Certificate issuer:       /CN=f90cffcb29ec758cae3f54c6f50ab3bf69530f1a
Certificate serial:       019F8F7F267C8A344ADF574356A001C8BEB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:42 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:42 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:42 +0000
Files and hashes:         1: 1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.crl (hash: /vmOqdgl9pk2x5GpFdj7zo4akhV9bJhNafcPOYpt1ek=)
                          2: AzVaz8Wv4zmV7ZBOoRzO4yPctdE.roa (hash: yYSVYxBpq8wewCw4ExeSk//aRdqOHQHDWwbP/VWRcds=)
                          3: BE9SKr84ZzNinvDUOtQsxIus1PU.roa (hash: NJy50Gb8QXCb9hwDocalr71wywFzdVxA+AKgOp5RhCQ=)
                          4: ahzg2jU7lSLG85BOWPO2OuHFuyM.roa (hash: 23XmMooSM5bQ9DLWo9+BnbvwrzjkG4Q/VmbGV0tBXvU=)
                          5: hBVf0oSR64lXEURMC_6uWoVydG8.roa (hash: PmOQkDBponpodSJxyDx+cYvEIwxcLnkIXOwcqmg5y5c=)
                          6: ylDBTYX9mMbZPrIC82FbSWOlE0Q.roa (hash: VerZxxF2BuwJmE0kidxiI2BSXlIpBlA7x46UriSXoUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:26:7c:8a:34:4a:df:57:43:56:a0:01:c8:be:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f90cffcb29ec758cae3f54c6f50ab3bf69530f1a
        Validity
            Not Before: Jul 23 15:01:42 2026 GMT
            Not After : Jul 24 15:01:42 2026 GMT
        Subject: CN=97920c4e313a00004ef6e44af533cebf9a716ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2c:d1:fd:3e:3b:9d:28:42:b7:91:05:c7:a7:
                    4e:86:d2:a4:19:93:a4:c2:43:da:c5:54:f4:68:89:
                    2b:42:8b:a6:98:ed:20:53:27:fb:53:3c:3c:27:33:
                    7a:cc:25:3b:a3:d5:9f:50:26:9e:47:5c:c7:ae:87:
                    34:ce:69:3c:e4:f9:b3:46:f7:fe:44:c5:fd:a3:71:
                    4e:07:de:96:d5:02:8c:95:d1:d8:f4:11:cd:61:53:
                    e2:a9:5e:05:93:86:2f:d8:9b:69:de:8a:62:f6:3c:
                    35:3b:0b:60:5f:9f:1a:62:14:46:06:25:59:dc:06:
                    44:22:0e:27:c8:4b:cd:93:95:9e:cf:de:4b:3b:29:
                    57:f1:85:99:73:56:24:1c:0d:64:4e:cc:3d:36:f8:
                    cf:af:38:a6:8b:3a:5d:80:45:ca:10:10:12:a9:19:
                    d4:5a:c8:23:af:11:80:c4:2e:a7:a6:8c:cc:84:da:
                    d5:cd:cb:26:a2:0a:46:8d:7a:a9:43:e3:d0:a8:ad:
                    5f:f1:31:63:6a:cf:be:1a:05:57:18:7d:26:74:79:
                    91:65:46:2e:06:ec:8c:92:3f:bc:b1:f3:a9:a1:bc:
                    24:6a:a7:dc:03:05:e4:38:a0:2f:6b:8b:c4:81:5a:
                    7d:fe:29:7d:5e:ba:24:47:d4:a5:3a:75:cd:58:ed:
                    4a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:92:0C:4E:31:3A:00:00:4E:F6:E4:4A:F5:33:CE:BF:9A:71:6D:DD
            X509v3 Authority Key Identifier:
                keyid:F9:0C:FF:CB:29:EC:75:8C:AE:3F:54:C6:F5:0A:B3:BF:69:53:0F:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/1-Qz_yynsdYyuP1TG9Qqzv2lTDxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:15:0a:24:fd:8c:e7:35:97:15:17:ed:01:96:93:2a:ba:5a:
         cc:b8:b9:ab:bd:66:2a:ae:07:35:5c:aa:d1:5f:a9:59:67:2d:
         55:18:84:19:9c:b8:5c:a3:02:0f:54:b6:3b:cc:ae:52:d9:c0:
         f1:09:1c:49:b9:b2:0a:51:7d:03:9f:cb:65:c1:9d:8e:ae:ae:
         a0:bd:20:90:d5:69:9f:b7:96:64:8a:85:98:59:2f:90:29:da:
         69:51:08:d1:d4:e6:50:2b:e2:fa:25:ab:f8:f4:96:76:f0:37:
         01:da:1f:2c:d4:c2:fe:ef:c0:e1:46:d5:06:44:9e:fd:23:94:
         13:55:51:65:8f:ad:fd:b2:5a:3a:b8:9d:aa:c8:21:03:4e:f6:
         eb:28:b4:2a:7c:72:cf:bd:28:4c:b4:f0:d1:60:cd:58:7f:a4:
         09:54:3e:07:72:ec:fc:cd:e2:18:ba:79:59:4a:fe:12:aa:99:
         aa:e8:c7:6f:3b:62:64:2c:53:5c:82:b1:44:d0:60:70:89:e3:
         b2:d4:a3:74:2a:18:49:fa:cf:5e:87:db:fb:16:b3:6c:2b:e5:
         12:37:0f:43:09:61:22:82:33:36:48:cc:1f:14:5d:e3:ac:5a:
         35:a1:ae:5a:e1:08:04:bd:7a:00:ae:93:c9:db:d1:13:eb:04:
         f1:90:a3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:22:56 2026 by rpki-client