Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File:                     Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier:          NOOv6LCm5+rJW8ptV0torXWWB3mUu1ZSYAHLiHOB6mg=
Subject key identifier:   F6:83:03:07:E1:77:C4:1D:71:81:26:60:DA:1A:81:95:7D:36:67:97
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer:       /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial:       019F91A3BBC3E18C6A477A75E3546DAA58A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number:          19C2
Signing time:             Fri 24 Jul 2026 01:00:54 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:54 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:54 +0000
Files and hashes:         1: WX-JjlZr2_9em86_V6vZFQ4B8cg.roa (hash: wU2wM6tMwVxmxZj/4qQ1Khr+94PlBhLHSf6Ng/445Vw=)
                          2: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: 3a0TIlTwmm8Un0nVBohmPfRUFYSvh1KP+NZCOzxO/Rw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:bb:c3:e1:8c:6a:47:7a:75:e3:54:6d:aa:58:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
        Validity
            Not Before: Jul 24 01:00:54 2026 GMT
            Not After : Jul 25 01:00:54 2026 GMT
        Subject: CN=f6830307e177c41d71812660da1a81957d366797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:45:4c:b6:85:4d:39:48:f9:47:e0:a7:bb:
                    b6:a2:5e:8a:95:22:0e:ba:7e:5b:2b:1e:5d:23:51:
                    a3:68:cf:77:bd:67:54:19:f1:2d:1d:9f:f5:cc:f5:
                    57:31:5c:42:98:fe:02:31:46:5e:3e:0e:88:de:dc:
                    6d:3a:76:44:fa:2a:fc:7c:fd:90:25:0d:47:e4:49:
                    fa:2b:be:7a:76:73:32:52:67:79:e4:58:a6:01:86:
                    a4:48:2d:e9:45:f7:0f:87:86:3d:b4:ad:8c:fc:4a:
                    71:cf:bd:c6:8d:cf:0b:b6:c5:11:dc:ab:56:f8:00:
                    b3:79:53:85:84:59:a7:de:17:c1:0c:30:ae:cf:e3:
                    cb:81:f3:f9:b2:f4:16:84:c9:bb:71:5d:64:ed:81:
                    5b:9a:20:75:ca:a6:45:6d:64:28:41:c4:f4:12:56:
                    90:b6:1e:74:5f:6a:02:19:4b:fb:1c:6e:4c:88:42:
                    54:eb:97:6e:34:be:2b:8e:60:de:e1:d2:7d:a7:d6:
                    a9:c0:09:d8:e2:cd:9a:a7:3a:fc:c8:69:0d:4f:28:
                    1e:b9:7d:78:21:19:17:e3:ef:5b:47:aa:5d:df:37:
                    2c:4c:66:e3:63:fe:1f:95:0a:7a:bf:48:94:a3:e2:
                    de:a5:3c:a1:ce:a5:e7:8f:d4:92:a6:33:9a:c1:a1:
                    c3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:83:03:07:E1:77:C4:1D:71:81:26:60:DA:1A:81:95:7D:36:67:97
            X509v3 Authority Key Identifier:
                keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f6:2c:d6:bf:18:25:c9:b1:f4:f4:82:d4:24:fb:9e:7f:8b:
         cb:79:f5:52:6b:80:44:69:29:d5:e2:a0:2e:46:38:be:f5:5f:
         5f:17:b4:6c:02:7b:d8:92:2f:a9:cb:88:5c:42:54:95:6d:c4:
         92:c6:94:e5:4e:1a:61:eb:12:6a:26:d5:a4:a5:38:3a:0a:02:
         40:c8:01:e7:12:86:8d:5a:69:24:d3:a4:d5:c1:9f:9a:4f:6b:
         25:00:f4:14:34:83:9d:a0:41:c5:74:38:af:13:83:3f:77:82:
         af:35:46:c8:fa:0e:27:60:79:95:7a:aa:b1:24:ed:e1:12:52:
         b1:48:dd:d9:ed:a0:fe:2e:41:0c:21:24:b6:6e:87:d3:29:49:
         20:37:57:0a:91:6b:84:70:da:bb:37:2c:b8:b4:f0:58:3a:ad:
         a6:16:97:53:69:4c:ab:b0:bb:33:6e:5e:71:9b:2c:b4:e0:ed:
         78:63:c9:16:db:a4:11:14:32:f1:05:0d:49:38:48:d2:b1:f5:
         de:9a:7a:a4:06:30:17:f8:f9:64:1e:e9:cf:47:bb:91:b0:2d:
         cb:d1:c5:4d:5b:66:5e:03:ff:9a:f0:60:31:76:a6:69:90:16:
         bb:a8:93:04:e0:2a:ef:f7:e3:5c:c0:00:fe:0d:73:27:05:a1:
         18:31:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:57:31 2026 by rpki-client