Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
File:                     QMV_fAvv5jtgBOlE32hMnVHkaPM.mft (raw, json)
Hash identifier:          VD5qkOHjFfa6ttoJvVDcoeUyxpxtewwxLbfmfimhhZc=
Subject key identifier:   5A:9A:F1:7C:67:42:06:11:43:2F:AC:4E:FE:A6:52:9E:56:39:65:3F
Authority key identifier: 40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3
Certificate issuer:       /CN=40c57f7c0befe63b6004e944df684c9d51e468f3
Certificate serial:       019D37F76289EBB21DB3A51BFD2C40C00B76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
Manifest number:          0C33
Signing time:             Sun 29 Mar 2026 05:00:52 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:52 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:52 +0000
Files and hashes:         1: 2f-P4fDHiKWUADrK-tktjHqGw6s.roa (hash: zVsJo2j3kxjfhqS1ysVureSptf/JpUq/fXy1LYaHfRY=)
                          2: QMV_fAvv5jtgBOlE32hMnVHkaPM.crl (hash: vabQtGzY962vBBRsAdoyy/s0ect6kvCzlRL1I5bmVhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:62:89:eb:b2:1d:b3:a5:1b:fd:2c:40:c0:0b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40c57f7c0befe63b6004e944df684c9d51e468f3
        Validity
            Not Before: Mar 29 05:00:52 2026 GMT
            Not After : Mar 30 05:00:52 2026 GMT
        Subject: CN=5a9af17c67420611432fac4efea6529e5639653f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:50:d1:5b:96:81:f7:2b:4b:46:c9:2c:db:
                    fb:94:46:70:9f:fb:c4:6e:68:14:5c:d2:7b:e2:4e:
                    1e:63:09:d7:f2:35:ee:51:2d:35:67:ed:3a:ef:84:
                    09:70:6a:15:9e:be:a5:23:ea:24:28:24:48:9b:2c:
                    ed:8e:50:3e:79:73:6b:0a:0a:4d:f2:0a:84:72:c1:
                    7a:4c:77:96:c3:5b:a4:61:e8:fa:8f:fa:7c:72:ca:
                    6c:d4:80:de:53:5e:ac:38:4a:f1:3b:97:0c:75:7d:
                    b3:e5:1f:1b:3a:65:83:09:80:00:2e:7d:10:74:51:
                    a4:d7:6c:6e:6d:5a:7c:36:b5:42:87:12:3e:87:41:
                    dc:9c:c7:9e:94:eb:bf:a7:38:e0:15:71:6d:6e:5c:
                    c2:bb:ea:1a:c6:39:4a:e6:96:5f:c6:f2:c2:f5:fa:
                    fb:cb:49:02:fa:a6:3a:3b:23:2f:bb:5c:d0:5f:71:
                    82:2a:0f:ed:ed:2b:95:20:57:d7:e9:1c:bb:34:59:
                    44:06:bc:1b:6c:d8:1f:89:3d:15:59:81:ee:d0:5c:
                    52:f1:a2:f3:e2:64:6c:83:e7:a6:4c:ef:25:13:73:
                    eb:8b:7d:ae:a6:f9:9e:87:bc:55:64:2d:2d:2a:0c:
                    78:e2:5f:0c:a0:29:93:34:60:6a:e2:7a:37:e7:4e:
                    9b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:9A:F1:7C:67:42:06:11:43:2F:AC:4E:FE:A6:52:9E:56:39:65:3F
            X509v3 Authority Key Identifier:
                keyid:40:C5:7F:7C:0B:EF:E6:3B:60:04:E9:44:DF:68:4C:9D:51:E4:68:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMV_fAvv5jtgBOlE32hMnVHkaPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/fe2e01-d854-4fbc-ba19-2b012fe8ea52/1/QMV_fAvv5jtgBOlE32hMnVHkaPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:55:06:18:d1:3b:ca:60:76:41:47:a2:42:d4:bf:59:cd:fb:
         be:c7:e8:70:11:4d:ad:f2:b9:d8:22:93:e2:0c:67:72:b0:5f:
         22:a3:6d:d1:94:a6:f1:29:26:42:f8:22:fe:06:a4:3b:73:6e:
         13:38:44:d4:66:df:37:62:c3:b6:0e:4a:47:01:33:df:61:0b:
         19:8e:32:56:ac:3d:4e:f9:d6:a0:4a:fd:73:d3:ac:c0:6c:4c:
         44:66:65:5b:78:81:d5:ba:ee:c6:02:86:15:74:1e:34:d9:4c:
         db:ec:f2:53:e7:e8:6a:57:26:a8:bc:f0:aa:02:cc:c7:5e:ee:
         69:41:50:3d:70:9f:83:c8:9b:81:9e:4f:f2:87:62:f6:82:a4:
         30:45:74:54:9f:42:23:74:96:2b:81:2c:e0:14:df:7e:31:43:
         6d:0d:54:98:ac:12:31:ec:51:74:6d:80:f0:ab:13:a2:1b:c5:
         ec:c6:83:e3:09:c1:d1:15:08:a6:c7:f4:b3:1d:53:df:df:32:
         aa:6d:85:8a:59:f2:2b:05:03:21:a1:7b:cc:51:4b:f5:5b:7b:
         8e:69:af:53:48:9b:c0:1f:79:37:4f:fc:41:08:79:90:02:8c:
         5f:95:3f:07:18:4c:94:b8:b7:2e:bd:24:22:3c:5a:18:d6:83:
         5b:e3:c3:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0392KJ67Ids6Ub/SxAwAt2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYzU3ZjdjMGJlZmU2M2I2MDA0ZTk0NGRmNjg0YzlkNTFl
NDY4ZjMwHhcNMjYwMzI5MDUwMDUyWhcNMjYwMzMwMDUwMDUyWjAzMTEwLwYDVQQD
Eyg1YTlhZjE3YzY3NDIwNjExNDMyZmFjNGVmZWE2NTI5ZTU2Mzk2NTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyRQ0VuWgfcrS0bJLNv7lEZwn/vE
bmgUXNJ74k4eYwnX8jXuUS01Z+0674QJcGoVnr6lI+okKCRImyztjlA+eXNrCgpN
8gqEcsF6THeWw1ukYej6j/p8csps1IDeU16sOErxO5cMdX2z5R8bOmWDCYAALn0Q
dFGk12xubVp8NrVChxI+h0HcnMeelOu/pzjgFXFtblzCu+oaxjlK5pZfxvLC9fr7
y0kC+qY6OyMvu1zQX3GCKg/t7SuVIFfX6Ry7NFlEBrwbbNgfiT0VWYHu0FxS8aLz
4mRsg+emTO8lE3Pri32upvmeh7xVZC0tKgx44l8MoCmTNGBq4no3506blwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqa8XxnQgYRQy+sTv6mUp5WOWU/MB8GA1UdIwQY
MBaAFEDFf3wL7+Y7YATpRN9oTJ1R5GjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU1WX2ZBdnY1anRnQk9sRTMyaE1uVkhrYVBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mZTJlMDEtZDg1NC00ZmJjLWJhMTkt
MmIwMTJmZThlYTUyLzEvUU1WX2ZBdnY1anRnQk9sRTMyaE1uVkhrYVBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9mZTJlMDEtZDg1NC00ZmJjLWJhMTktMmIwMTJmZThlYTUy
LzEvUU1WX2ZBdnY1anRnQk9sRTMyaE1uVkhrYVBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglUGGNE7
ymB2QUeiQtS/Wc37vsfocBFNrfK52CKT4gxncrBfIqNt0ZSm8SkmQvgi/gakO3Nu
EzhE1GbfN2LDtg5KRwEz32ELGY4yVqw9TvnWoEr9c9OswGxMRGZlW3iB1bruxgKG
FXQeNNlM2+zyU+foalcmqLzwqgLMx17uaUFQPXCfg8ibgZ5P8odi9oKkMEV0VJ9C
I3SWK4Es4BTffjFDbQ1UmKwSMexRdG2A8KsTohvF7MaD4wnB0RUIpsf0sx1T398y
qm2FilnyKwUDIaF7zFFL9Vt7jmmvU0ibwB95N0/8QQh5kAKMX5U/BxhMlLi3Lr0k
IjxaGNaDW+PDyw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:45 2026 by rpki-client