Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
File:                     QQSkCCHEF2zELiVe9sFydHPD8Ao.mft (raw, json)
Hash identifier:          wHcVoQaJhtq3ShLVTGl/KlMBeEbDTaZF1cEqS4x5W78=
Subject key identifier:   9F:B3:EB:7D:8F:CB:E4:FE:42:2F:C9:2D:20:E5:A4:38:D5:A3:4A:C3
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Certificate issuer:       /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial:       019F916D539D10BEE8B8A08F18D02D53A029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
Manifest number:          19E2
Signing time:             Fri 24 Jul 2026 00:01:28 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:28 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:28 +0000
Files and hashes:         1: 1-fuWQ0J7N3Mc1-LpV47OkEYJ6Pg.roa (hash: d64kZTOMQS3ywmOiCwM9goS+Zs55OgLIp48OWiE2tqI=)
                          2: 3qCviuOG-ueF_1VEjm9A7m4dsIk.roa (hash: sAL6XW3hWoRAGWp0+zVbTSYYIBh9Tr5DdziSNbosFMc=)
                          3: 4iREikE0FlzD4Lki3jJx6aaj7Ek.roa (hash: R85Lc2X5cjTiidE1qCVwRr469wMVOizgeXCdlpP24Do=)
                          4: 7F404ndf6WlAawVxH8uEqbUfNqg.roa (hash: 0vRuwJ86hGL2rgS3c27BsrNGgAqpwI3nuvZOYvEC2o8=)
                          5: 891fnCNTe0IKQYnO-ZqvxNgk-7k.roa (hash: VPRQl1y1jooeZjbup+JMP7DkoiYT1QAj+vISvPCzQ5U=)
                          6: Amhr13WKOrupDvbNhR-H8uA8vnQ.roa (hash: DunPwzqrWTpngKU5F7a27cbOD9P4pJ+IEPvx/MUiLIg=)
                          7: CBtEHJaHzVeN2D-IZE6BCv7mSC8.roa (hash: heEBAu3l6Z4RAGafbljD+NgYk3gtGcKPKxmuj7zaY7U=)
                          8: CRbc03vb_t7S-8OrjziURXlLPLs.roa (hash: AwT4/FD/dxBwMmMETo+hpYLUml8m4wGXejb2vnR3jvE=)
                          9: DmNgBVzwALAZpD0xt4gW0SabWP4.roa (hash: +HcyssYq+nPIZImlmBkQlaLU/HQWdmQa3/3LFcnfluc=)
                          10: Dq47WCi1_R3R9nKkOKnsCn37r54.roa (hash: 5JD7iNqs4qn/sy+bgp/hKnEbHR2EBc8c01xHZGOpYMA=)
                          11: EiEKEI95auMCB7NfQVwo9byU814.roa (hash: qJa+m44cB1n22XnwN3TBLrmdvt3RH9NDFwUuAESZSTE=)
                          12: JKDe6ScGUf5knBKSEZ3INxcpX_k.roa (hash: cP1FQRZP0bYy6TqBtYSmhv38p8stWSoSv7D1CesDGKo=)
                          13: N-ugS43QXCOLtMQg4hBDzZHSfs4.roa (hash: H5adi4ikfxvo36OYV+mOyefgvVd4tLYXrjrnT87kOLI=)
                          14: O3ilaHX6VJtoUZBeu1-BglPYb-I.roa (hash: PoRHXYKRSqCrsj4FltoRS6V1gs+nJ0Qsq87ffUhtPkI=)
                          15: PAfqhrbdkl_yRiUylPK1xIqq4lg.roa (hash: MoYNDn1wuFUbbeUFbkvj5yCW8TfAg9g5sltO0zCqY1Y=)
                          16: QQSkCCHEF2zELiVe9sFydHPD8Ao.crl (hash: ekFwejarIC+FWVJjoq5C5VTykagIUJLnN+7mpcqFBCQ=)
                          17: U7Tc0OMn99OVh4UaH8Gir63iiJs.roa (hash: VeiRvPbD+gYEQvLB86zuV+IwSFIqcHPYDQqYvNeKjps=)
                          18: Vr8UKQBR2K4aBwszRxtTMGpM3RU.roa (hash: pBwjHOXlk8Xh2v3/m1xk7uIqqtM9MysBJJTXP9nTkqk=)
                          19: aw7187ZOI0MpqazuRWsrcYgwwpQ.roa (hash: NIDCNaG3ouNUdnwxeJaCcGty477WEOLvnr2djhhc/90=)
                          20: cWtnPd8ZvgFa7GRaqMfs10BE4qc.roa (hash: jN/lGIzUOKHwZH6DyNIy+6o9b1TpGieuOJIXydb73lg=)
                          21: c_XVhcUysLwXAHApwazs-UkQkmQ.roa (hash: yDd1bLRr1tOEIQ6ft+0WAm2AEOFTsdq7bRYUYaVYKNA=)
                          22: hkSLq2UREFy1118xumuIZnvQ67Y.roa (hash: SOh35WJM4tvkJo/U2D6+8WiI7UsWl69I9bV1omMOiek=)
                          23: kqgMt21-DFLMw82FOeig-EaUgf0.roa (hash: IMAdg24Zv5aLWg8Ll0N/xPxQR4lu+BjbaXj/E4I85pM=)
                          24: n3D-Zk4G38G2tBgyUy3hXStCuWg.roa (hash: xWuIVNN480cZZue76BwJppWLzoJjQqcpD9fuq0+OWZ0=)
                          25: q1B4D6fhb1hsDMHl4DgqMg1LBS0.roa (hash: QyvrcsEDHcRC23C4LJneKzaSVc+UGnP9rW3V3L3o3QM=)
                          26: qtg18Q1n5Jfx1gK-KfQtl08To-k.roa (hash: oG53ITscWjNRdxBTzyirX6KiMhTU+HEToywwA4a+H6Q=)
                          27: rPUe_mYrLSmTmFv2LQZ8OTHJG9k.roa (hash: 5iRsBFsd3e5QtYFbDWJgyq4JRArcPXehU90Piw8H6Eo=)
                          28: sJ1sC2Tf4OlwBqYXFNFoZRduFG8.roa (hash: Lhps7HR/EcrDbFr4rG5Dh/G7U6wPLWZb+NnuBmiPIWs=)
                          29: sJZVmKX-G_XNNEcca8MTXPH-dbc.roa (hash: DQKLyMn35LbEuueIciMk2w6CESjK2ZNYZ5n5ZL//wOw=)
                          30: tWMyn7tpor7zLv8S77uSSoVBOzY.roa (hash: 9VLMYOGfLfqrY2pS0fnmG2KOSYmzAO47mTzvU9rKrJk=)
                          31: vgFc0Uh_MgrlizJZvhlwuychk-E.roa (hash: GdhoQmVw/bO3KTSgyH6uYKhysKhPclMR0dWBbW/oMfg=)
                          32: yfk1E30luISg0XzXUtlJ2MNM9eM.roa (hash: WxN+8AXOM93AE57ePd+WfH578Dm9CftwqJPfTKxDhLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:53:9d:10:be:e8:b8:a0:8f:18:d0:2d:53:a0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
        Validity
            Not Before: Jul 24 00:01:28 2026 GMT
            Not After : Jul 25 00:01:28 2026 GMT
        Subject: CN=9fb3eb7d8fcbe4fe422fc92d20e5a438d5a34ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b7:e5:4c:b8:36:e6:a8:fc:18:fb:d5:2d:a3:
                    70:41:d5:64:0d:68:d1:30:4d:20:2b:69:3f:c4:ae:
                    91:53:c7:a6:93:45:00:13:24:52:8d:dd:b1:3f:78:
                    d8:db:79:a2:98:9f:12:36:ff:fa:f6:32:1f:b5:35:
                    d9:e0:03:1e:ec:ce:f2:68:61:2a:dd:65:3f:9d:27:
                    48:d9:02:91:0d:35:c2:8e:a9:ab:7b:ae:e5:03:34:
                    74:3a:43:df:d4:dc:ab:8b:fa:a0:94:c2:8a:26:1e:
                    d6:b2:e7:c9:e2:bc:f0:f2:1e:2a:c9:d4:89:fa:73:
                    38:b4:50:3e:d6:15:15:59:92:be:b3:be:bb:71:20:
                    7a:30:3a:7c:5a:ba:ef:32:33:5c:3a:f5:40:f4:f6:
                    9b:5e:0d:b1:32:fa:12:9a:08:58:5f:0e:aa:9b:e9:
                    04:22:51:b3:2e:13:8e:ea:3a:ad:9c:d5:d0:a4:f4:
                    cd:74:0a:eb:0a:73:50:3f:9f:f9:a1:2d:7c:a4:d1:
                    a4:2d:1a:13:f7:a6:5b:9b:62:53:87:af:3a:a6:93:
                    cc:20:3b:11:7c:36:57:ae:0b:84:e1:a1:84:16:1d:
                    e8:33:7d:34:0b:1e:40:6c:15:ad:fc:1e:3a:1a:ea:
                    fb:d5:98:3f:ac:93:db:e2:3a:d7:42:ca:5c:c5:98:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B3:EB:7D:8F:CB:E4:FE:42:2F:C9:2D:20:E5:A4:38:D5:A3:4A:C3
            X509v3 Authority Key Identifier:
                keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1f:e1:92:92:d3:a2:7f:2d:9e:d5:54:7c:7f:63:49:4a:46:
         69:8e:ea:f3:3b:47:d7:61:55:fd:74:ec:8d:68:86:58:fc:c5:
         52:2c:ae:91:39:c9:2c:2b:7d:53:db:d8:a4:c6:32:84:7d:af:
         58:24:e7:cb:f2:da:c5:93:fb:74:2b:04:6a:30:6a:a1:a1:a4:
         12:07:d1:7c:70:bc:b1:f6:68:37:07:c2:fb:44:2b:d7:a1:bc:
         71:cd:f3:40:e4:c3:ee:40:5a:2b:3e:da:16:2e:71:85:90:74:
         39:c7:1e:a3:c1:9c:3d:d6:50:0d:3a:5f:b7:e3:0c:27:11:1c:
         57:88:19:ad:01:63:4b:51:79:7f:e1:08:9a:14:c5:aa:00:55:
         30:96:84:d1:ce:71:72:0a:df:31:62:de:ae:0d:72:d7:5a:83:
         34:ec:00:a0:42:e0:f3:41:d7:68:8d:3c:f1:ac:ce:96:16:ec:
         a7:80:82:55:c8:48:b5:6a:05:93:32:b2:43:79:cd:b9:54:3a:
         e6:c8:72:72:7b:5c:82:b4:0b:87:e4:c8:96:ce:ac:34:35:b3:
         2c:86:01:f6:5d:1f:3d:78:d7:c0:75:f0:7a:a9:fb:4d:1d:3f:
         96:72:61:2d:c6:1b:a6:4e:ad:3b:4e:6f:34:2b:02:d0:1a:28:
         f3:c0:63:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:24:03 2026 by rpki-client