Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
File:                     QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json)
Hash identifier:          9SG4/Bpwo/ZCA8EklypIe8yeKdx4m9EJ9eByiO9zjPw=
Subject key identifier:   7E:E0:ED:7C:89:AB:5D:9C:32:08:E6:C4:23:D5:9D:21:D4:EB:A4:42
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Certificate issuer:       /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial:       019F935BF33456E09D3A0060A1B8E1DD595E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
Manifest number:          19CF
Signing time:             Fri 24 Jul 2026 09:01:44 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:44 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:44 +0000
Files and hashes:         1: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: m0E+TwspaxLlj+4//LsKyy5I6f47i9YEAT2GHzp6Qm8=)
                          2: mTYFd1745jhrZ9TtN2i23HR2pUI.roa (hash: ydADvfnj2q9V4OlnDPfNddiaxsr5Yrl3BEkKtbnsrx4=)
                          3: nOreBNvB9sHvjaOwA-7mkOrWqLI.roa (hash: PolGTwJfcBCQ5ul8B/u+HLxsm0nGBzqvFUKDQhFP6Lk=)
                          4: pPjzGwxRrQB5-40BluFsbIPRays.roa (hash: sQ+RWTCTmzmCdnVJPlVfZs+TlcOrO5vdITrduRsIAW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:f3:34:56:e0:9d:3a:00:60:a1:b8:e1:dd:59:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
        Validity
            Not Before: Jul 24 09:01:44 2026 GMT
            Not After : Jul 25 09:01:44 2026 GMT
        Subject: CN=7ee0ed7c89ab5d9c3208e6c423d59d21d4eba442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:9c:52:e0:bf:8b:28:b5:a5:d2:13:bd:ee:
                    30:3b:ca:0d:1c:ba:ae:3a:eb:44:ae:70:e4:2f:13:
                    26:22:4e:58:bc:ae:e8:2b:de:72:73:ed:38:84:0c:
                    02:68:08:e7:9c:fd:45:21:52:40:2f:77:93:cc:1b:
                    a2:da:d7:f3:5a:db:a4:6d:e1:41:d7:f3:1c:11:5e:
                    58:06:35:d1:a1:2c:54:bc:b5:ae:0c:25:b3:02:3a:
                    76:d5:86:0c:07:aa:03:47:d3:fc:43:07:fa:25:89:
                    60:5f:57:88:05:30:e3:84:40:e4:6a:a3:e7:82:ce:
                    e7:c8:d5:11:14:fc:5e:3f:d6:b0:05:24:ed:94:0f:
                    2e:fb:e5:8c:8f:dd:2f:36:28:c3:32:9a:ef:92:12:
                    67:b3:0b:5c:7c:6d:c7:81:39:02:05:27:bd:13:92:
                    b7:f6:3e:e2:8e:e1:03:29:12:66:24:06:9d:b8:04:
                    6d:90:b2:f1:a8:30:58:db:54:84:3f:81:84:91:f6:
                    02:95:7b:f7:fc:99:49:0b:3b:3a:b5:1a:b0:7d:17:
                    2f:17:4e:ec:07:29:83:42:c8:b9:25:81:32:58:07:
                    2f:59:86:9e:8b:85:cb:0f:5b:c9:39:26:ca:c7:1f:
                    65:26:29:07:8f:61:85:d8:aa:1e:49:57:3c:ef:34:
                    16:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E0:ED:7C:89:AB:5D:9C:32:08:E6:C4:23:D5:9D:21:D4:EB:A4:42
            X509v3 Authority Key Identifier:
                keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:7b:d2:66:c9:fa:28:52:95:0c:f0:9f:d6:da:be:81:bb:7f:
         71:99:4d:37:70:bd:34:80:12:32:57:b9:4c:40:d9:c4:5d:9b:
         43:8f:23:e3:eb:ae:5a:e4:be:50:d3:8b:39:dd:f1:da:8c:af:
         88:da:47:12:b1:f9:94:58:f9:dd:29:e7:ba:91:5e:b6:54:b0:
         ef:cb:eb:98:f9:0b:0c:1d:f2:dc:ff:91:41:a9:d5:63:b6:a8:
         7a:39:fd:53:f2:c1:15:c8:47:4b:4b:76:46:bf:1c:7e:c4:32:
         c8:de:16:2b:e0:c4:5c:d2:7f:72:d7:fc:c8:4f:03:b4:32:4b:
         b9:50:87:2e:fc:7c:3f:14:3d:0d:84:5b:65:59:08:c1:af:c6:
         11:7e:4a:37:1d:8d:dd:d9:59:37:83:c8:59:71:a4:9d:5c:37:
         47:5c:48:7f:ea:d4:77:f2:f4:f9:3e:6a:20:59:d8:e4:2f:a8:
         d0:c8:0f:f1:5a:31:50:19:02:f3:95:cf:35:76:0d:1f:dd:6f:
         77:bc:46:55:ae:fa:cd:f4:29:b3:44:63:5c:2b:02:28:6f:5b:
         27:96:60:cc:17:2e:06:d4:6d:54:22:3c:52:0c:35:1f:63:61:
         b7:fe:47:50:a9:33:54:b6:a7:3f:39:a0:21:ff:77:3e:5f:ef:
         20:0e:f5:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW/M0VuCdOgBgobjh3VleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZjFhMjRjODBmZGNhMzI5NjQ0NTczYWU2ZDYxYzlmMmUz
NzRlZDgwHhcNMjYwNzI0MDkwMTQ0WhcNMjYwNzI1MDkwMTQ0WjAzMTEwLwYDVQQD
Eyg3ZWUwZWQ3Yzg5YWI1ZDljMzIwOGU2YzQyM2Q1OWQyMWQ0ZWJhNDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqracUuC/iyi1pdITve4wO8oNHLqu
OutErnDkLxMmIk5YvK7oK95yc+04hAwCaAjnnP1FIVJAL3eTzBui2tfzWtukbeFB
1/McEV5YBjXRoSxUvLWuDCWzAjp21YYMB6oDR9P8Qwf6JYlgX1eIBTDjhEDkaqPn
gs7nyNURFPxeP9awBSTtlA8u++WMj90vNijDMprvkhJnswtcfG3HgTkCBSe9E5K3
9j7ijuEDKRJmJAaduARtkLLxqDBY21SEP4GEkfYClXv3/JlJCzs6tRqwfRcvF07s
BymDQsi5JYEyWAcvWYaei4XLD1vJOSbKxx9lJikHj2GF2KoeSVc87zQWQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7g7XyJq12cMgjmxCPVnSHU66RCMB8GA1UdIwQY
MBaAFELxokyA/coylkRXOubWHJ8uN07YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzkt
NzE2OGFlMGI4Mjc4LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mZWQ5MmEtMjEyMC00MzI2LWEwYzktNzE2OGFlMGI4Mjc4
LzEvUXZHaVRJRDl5aktXUkZjNjV0WWNueTQzVHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3XvSZsn6
KFKVDPCf1tq+gbt/cZlNN3C9NIASMle5TEDZxF2bQ48j4+uuWuS+UNOLOd3x2oyv
iNpHErH5lFj53SnnupFetlSw78vrmPkLDB3y3P+RQanVY7aoejn9U/LBFchHS0t2
Rr8cfsQyyN4WK+DEXNJ/ctf8yE8DtDJLuVCHLvx8PxQ9DYRbZVkIwa/GEX5KNx2N
3dlZN4PIWXGknVw3R1xIf+rUd/L0+T5qIFnY5C+o0MgP8VoxUBkC85XPNXYNH91v
d7xGVa76zfQps0RjXCsCKG9bJ5ZgzBcuBtRtVCI8Ugw1H2Nht/5HUKkzVLanPzmg
If93Pl/vIA71GQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:52:53 2026 by rpki-client