Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
File:                     QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json)
Hash identifier:          x0BvvR9e+/tttHydjfrXJIgXluq/KF/T/TmxC8eTj3E=
Subject key identifier:   44:C4:94:87:B8:0A:25:CF:F4:FD:B3:B6:36:10:F6:81:21:5F:FC:9D
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Certificate issuer:       /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial:       019F8FEC36CE21BA5D358F3D0EEA4CF582B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
Manifest number:          172F
Signing time:             Thu 23 Jul 2026 17:00:49 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:49 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:49 +0000
Files and hashes:         1: FsJFy4QzX3uJ4UdyViwCikynttA.roa (hash: RlB8FaaAry3OAsuD+Dw02lKQL3ZJpmsn7VXQvAtrEQQ=)
                          2: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: HTB5ln2l6KsVd5TO12VkwMM0pl7CqquHbawMRBnfNa4=)
                          3: UqFzq2RNZbWlDFVYyZprB1_1sEM.roa (hash: hO5jaxlS37jXDAccfSZYbNyHj2vkt1PuodFiaALX0Zg=)
                          4: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (hash: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ=)
                          5: jQ-BZ183u_LUlZapfx_6bO5Fcbo.roa (hash: evJDPjhd4Xd7GaOP8Tsnz8tSIn8B3VRESbVEgJ+Ho4g=)
                          6: pRLpVv9iIZr5LQ4wsfWykKRldRE.roa (hash: QGMiXjwGlbraV5Ix5vfPBv3PbTgRNOnp4ou8ZJDTZqc=)
                          7: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (hash: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w=)
                          8: qHPixUdDjxrc91U2LNL_GHETLss.roa (hash: 5esutnCHRhEckm/D5dPi2+exRvIyK9kg1fmZT+vC/MU=)
                          9: qUc0afIdRt8-UOWMIe3SQvVz1n4.roa (hash: /uRdEodyR9sUKrVW+MpbljN4of9z2bshibIE/GFUwdc=)
                          10: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (hash: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:36:ce:21:ba:5d:35:8f:3d:0e:ea:4c:f5:82:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
        Validity
            Not Before: Jul 23 17:00:49 2026 GMT
            Not After : Jul 24 17:00:49 2026 GMT
        Subject: CN=44c49487b80a25cff4fdb3b63610f681215ffc9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a0:03:84:c3:53:cc:63:6a:db:11:37:97:df:
                    8e:a9:72:c5:21:e4:6c:4b:f6:62:de:3d:e1:4f:63:
                    dc:8f:35:08:b3:29:5a:c2:9e:fc:0a:46:33:be:ac:
                    6c:a8:70:a6:ab:33:f1:25:05:da:89:2e:17:3c:1b:
                    af:57:89:2b:fd:25:bd:bd:54:f6:c3:7c:34:ca:1d:
                    48:8b:04:de:1f:b0:18:cb:f1:fa:d4:5e:14:55:92:
                    d1:7c:59:3c:ab:c0:bf:da:a9:c1:c8:a8:da:55:25:
                    00:8f:9e:30:f9:0e:2d:65:53:11:3b:2b:d8:f2:b4:
                    2c:8e:7c:dc:aa:14:2d:8c:9f:ce:0b:21:7c:6d:c2:
                    a3:cf:ea:86:64:f2:16:0b:7d:22:22:44:2d:f1:c6:
                    35:df:10:56:89:40:10:df:7f:46:74:fc:cf:37:12:
                    72:c3:3a:d4:91:65:00:0a:32:4a:52:6b:09:96:05:
                    54:bd:2d:f0:5d:da:fd:84:4c:85:cf:5c:f2:29:02:
                    4f:03:05:9a:59:9c:d0:75:0b:bf:11:0e:d0:e6:f0:
                    7d:0b:01:09:82:4c:6f:da:42:30:3c:4a:d0:25:4e:
                    4a:7e:a7:df:62:7a:84:e4:8a:39:0e:e3:1e:7e:46:
                    27:18:5e:7b:ce:6e:d8:ea:5c:d3:1b:f6:2b:88:c0:
                    a1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C4:94:87:B8:0A:25:CF:F4:FD:B3:B6:36:10:F6:81:21:5F:FC:9D
            X509v3 Authority Key Identifier:
                keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:2b:10:c8:ee:f8:82:3d:ce:f4:37:2d:6c:f1:ab:65:91:83:
         36:cb:c3:2c:90:c5:9f:a8:4c:05:f2:b5:85:06:f5:c8:34:63:
         a6:6b:ac:ee:d9:66:c9:4f:66:57:e9:e8:f7:1f:eb:f0:6c:8c:
         5b:e5:58:c3:af:cc:45:e4:0e:d1:e5:d8:60:76:04:e6:87:14:
         28:71:83:c0:57:f0:ff:e1:19:e4:47:1f:de:0f:f6:39:9d:be:
         60:d1:c8:5b:3c:b0:bf:a8:e2:42:a8:e2:a5:a6:5c:9a:ee:56:
         57:0d:82:f0:7f:40:d9:88:5e:31:f1:0f:91:09:ff:00:aa:09:
         e4:68:7a:4c:7b:f3:85:54:75:b6:c4:01:77:f0:77:d0:74:55:
         7c:6c:3a:b7:55:92:35:e8:77:c1:cf:cc:b5:af:00:7c:50:54:
         6f:16:f3:ea:95:ea:7e:b6:92:f2:27:3f:49:b7:e6:6c:5a:bd:
         af:1b:fe:be:24:69:d1:72:ff:4d:e7:a6:ec:72:6d:05:a8:ac:
         7c:19:6e:6d:23:17:5c:8e:b0:cc:16:32:10:9c:e0:76:a7:81:
         69:ac:ab:b7:dd:2f:12:23:36:96:c0:fb:1a:86:63:35:da:17:
         83:46:f9:96:42:79:21:50:22:b7:f9:d4:da:8d:8e:24:db:40:
         0c:a8:f8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:59 2026 by rpki-client