Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
File:                     QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft (raw, json)
Hash identifier:          xPYKW9ivImBFvpMmGcW/lWqHyMC9MUbNAoF5ghdrkeQ=
Subject key identifier:   62:13:6C:65:94:8D:B5:07:D8:BD:9F:A0:0C:2B:40:C7:04:60:FD:BD
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Certificate issuer:       /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial:       019F9512296C49768E2DF1AF711AA8063773
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 17:00:23 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:23 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:23 +0000
Files and hashes:         1: 6P9heqcjWC1rgYXIRmhdx-97RQI.roa (hash: Wmt5NIZ7B735D829/2kh7N0lg+ZEmMiQ2DIicb7NPis=)
                          2: CeZNOwjANN4HMY30DhoMsqh7kc0.roa (hash: Eu0R/pH+qqACExevGNpBWZPYFKUIF3usiZ6pHAqzeUg=)
                          3: H9vdOoMnNvcj9O3pGR64p1cw7mI.roa (hash: IwVpFDPCmKPKuO6vfa3AZGtMLLchqRt7QtT34xytDoc=)
                          4: QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl (hash: odoE3P9UQgJS3OeiFIp6ZuApTpIh+MIQ+XAMDnCSF+o=)
                          5: lhRrxFX2ddbsLjVa14L7LqCeSk0.roa (hash: VWU2mBVhm/guPrYibtgL6oEOWFxdxHR0S2Eb5+SbI98=)
                          6: zjfJO2RH5SIxJF2laNjzaWPFUmE.roa (hash: CH64B9ZYUzeZok1rFlTbLuLN/vSRqUxl6QpPK+7D75o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:29:6c:49:76:8e:2d:f1:af:71:1a:a8:06:37:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
        Validity
            Not Before: Jul 24 17:00:23 2026 GMT
            Not After : Jul 25 17:00:23 2026 GMT
        Subject: CN=62136c65948db507d8bd9fa00c2b40c70460fdbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a4:06:07:b5:e1:2e:fe:20:bb:75:01:1d:45:
                    4f:82:d0:ab:79:69:3d:cf:f3:42:1b:7b:d0:cd:4f:
                    a0:24:90:9f:3b:86:c8:4c:d0:36:e1:6a:cf:49:51:
                    6d:6e:fd:1c:5a:61:8a:f9:4f:61:bd:d3:88:ff:b2:
                    5a:68:73:17:13:fe:72:f1:2f:c1:47:f3:f9:2a:e9:
                    59:d4:a1:d5:f9:8a:f8:10:9c:c7:dc:33:fa:52:ed:
                    91:7d:ed:c4:e9:e2:0b:55:17:be:6d:c7:4f:74:fd:
                    1b:55:69:9b:7e:03:f3:69:04:f8:c7:4c:6a:fd:e5:
                    86:76:c8:ec:8e:2c:2b:60:5d:a6:c2:de:de:eb:1c:
                    b1:aa:14:8d:49:f8:9c:25:b3:f3:6a:33:af:78:f4:
                    bb:9f:eb:38:32:84:7f:ff:94:d5:30:04:a3:ea:23:
                    3d:32:d4:4b:95:4b:dc:25:b8:95:71:85:09:5a:59:
                    ff:ff:02:b3:f8:20:90:69:97:93:37:a6:4b:b2:ba:
                    59:c2:ee:4a:d2:53:6b:35:e5:ae:92:09:ac:b0:85:
                    b5:b1:e9:c2:00:16:83:a9:19:56:3f:a9:28:69:6f:
                    0b:f8:38:57:06:94:61:bb:ca:2b:e1:3f:05:11:9c:
                    92:20:cb:e3:66:42:a7:f1:26:dd:c1:83:45:94:26:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:13:6C:65:94:8D:B5:07:D8:BD:9F:A0:0C:2B:40:C7:04:60:FD:BD
            X509v3 Authority Key Identifier:
                keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ce:f6:43:b7:ff:2f:f0:2a:8b:12:85:eb:ff:30:e0:49:21:
         f6:52:b4:66:e0:da:5b:67:1b:75:d0:48:55:c6:fa:be:35:d1:
         f7:75:81:a1:73:2a:e9:40:50:dc:a7:d3:aa:39:0e:fe:f5:fc:
         78:ac:08:ed:d6:68:df:59:a1:dc:07:0a:72:f2:b8:1c:12:47:
         7b:c8:a4:84:3f:da:9d:35:13:c5:c7:6b:d5:04:48:ac:49:53:
         7d:b7:a7:ae:1d:86:33:da:da:cd:ad:52:40:e5:47:bb:4a:7a:
         60:b6:df:6e:3f:98:4a:a0:24:08:cc:c2:ab:de:25:6e:11:57:
         33:77:37:e3:a8:e4:cd:aa:f0:79:55:9e:69:cf:7a:4f:58:ad:
         76:6f:16:fb:04:17:ec:8e:13:1a:80:35:db:53:ed:62:5c:e0:
         ba:4d:51:03:ff:f0:2d:de:c2:3f:b3:2b:6a:55:71:70:47:5d:
         a2:cc:a4:02:73:95:ac:ae:8b:0b:cf:34:ba:0b:ba:ed:07:dd:
         bd:d7:7e:dd:a8:f8:c9:3f:17:86:a7:37:99:c7:c8:55:f0:56:
         81:40:db:cb:0e:1d:d5:2a:07:db:ec:d6:10:b9:ba:25:55:e8:
         5c:79:b4:64:3b:18:da:0a:a9:25:46:7f:8b:4c:ce:9d:71:cc:
         29:50:ea:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEilsSXaOLfGvcRqoBjdzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2NlNTcxOWNhYTY4MWFkYmQ0OTNhOGQ5YTM4YTY3NWQ2
YmQ2MzkwHhcNMjYwNzI0MTcwMDIzWhcNMjYwNzI1MTcwMDIzWjAzMTEwLwYDVQQD
Eyg2MjEzNmM2NTk0OGRiNTA3ZDhiZDlmYTAwYzJiNDBjNzA0NjBmZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KQGB7XhLv4gu3UBHUVPgtCreWk9
z/NCG3vQzU+gJJCfO4bITNA24WrPSVFtbv0cWmGK+U9hvdOI/7JaaHMXE/5y8S/B
R/P5KulZ1KHV+Yr4EJzH3DP6Uu2Rfe3E6eILVRe+bcdPdP0bVWmbfgPzaQT4x0xq
/eWGdsjsjiwrYF2mwt7e6xyxqhSNSficJbPzajOvePS7n+s4MoR//5TVMASj6iM9
MtRLlUvcJbiVcYUJWln//wKz+CCQaZeTN6ZLsrpZwu5K0lNrNeWukgmssIW1senC
ABaDqRlWP6koaW8L+DhXBpRhu8or4T8FEZySIMvjZkKn8SbdwYNFlCaLhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGITbGWUjbUH2L2foAwrQMcEYP29MB8GA1UdIwQY
MBaAFEJ85XGcqmga29STqNmjimdda9Y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zZTM1NDgtZmRiNS00ZGVkLWJhNTkt
MDkxYzJkMzAzZmU4LzEvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8zZTM1NDgtZmRiNS00ZGVkLWJhNTktMDkxYzJkMzAzZmU4
LzEvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYc72Q7f/
L/AqixKF6/8w4Ekh9lK0ZuDaW2cbddBIVcb6vjXR93WBoXMq6UBQ3KfTqjkO/vX8
eKwI7dZo31mh3AcKcvK4HBJHe8ikhD/anTUTxcdr1QRIrElTfbenrh2GM9raza1S
QOVHu0p6YLbfbj+YSqAkCMzCq94lbhFXM3c346jkzarweVWeac96T1itdm8W+wQX
7I4TGoA121PtYlzguk1RA//wLd7CP7MralVxcEddosykAnOVrK6LC880ugu67Qfd
vdd+3aj4yT8Xhqc3mcfIVfBWgUDbyw4d1SoH2+zWELm6JVXoXHm0ZDsY2gqpJUZ/
i0zOnXHMKVDq1g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:17:27 2026 by rpki-client