Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File:                     QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier:          LrtwMYnoTh6XVihucMSF1h5PHMhtro4+QOspccMHIws=
Subject key identifier:   65:E1:21:77:60:C9:93:B6:B5:4B:81:84:6D:31:24:64:7A:76:26:04
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer:       /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial:       019FCB5D3CFAFFD5C0CCF4D86311098FF2E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number:          0E77
Signing time:             Tue 04 Aug 2026 06:01:52 +0000
Manifest this update:     Tue 04 Aug 2026 06:01:52 +0000
Manifest next update:     Wed 05 Aug 2026 06:01:52 +0000
Files and hashes:         1: O8zrLW8AWIVEs9iiDW4s5TO_x9A.roa (hash: x7HRiC6WoAyrY0ICRLQbw3hJY8kiQ6r/ahn5rm3lXqw=)
                          2: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: 6Y6jExRL4vQ9EXmzpfpvbHao9i0qSsmEH/85l2QYOcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 06:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cb:5d:3c:fa:ff:d5:c0:cc:f4:d8:63:11:09:8f:f2:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
        Validity
            Not Before: Aug  4 06:01:52 2026 GMT
            Not After : Aug  5 06:01:52 2026 GMT
        Subject: CN=65e1217760c993b6b54b81846d3124647a762604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:f0:7a:d3:06:75:26:3d:53:49:41:44:f1:
                    f1:ef:71:22:9d:7d:41:00:de:1f:04:bd:30:6b:a8:
                    f1:5d:5d:0c:ed:d9:4c:75:c8:c6:0f:58:3c:be:b0:
                    2a:f5:02:0c:b5:ea:09:2d:bc:27:79:dd:76:28:f9:
                    ac:83:5a:fc:f5:5a:47:7c:ae:89:9c:3a:37:99:e4:
                    83:52:d0:d1:de:9f:00:9f:29:19:86:38:52:65:da:
                    66:28:28:a5:b4:c0:68:44:a9:cb:cb:7a:fe:66:f5:
                    71:be:4b:25:7c:41:f3:2f:39:9d:d0:e5:f3:b4:bd:
                    ca:51:a5:78:0a:f0:96:ef:8c:38:4e:d7:8d:da:09:
                    da:10:5f:fa:9e:c7:dd:7d:88:07:0a:07:02:0b:e4:
                    3d:33:62:3c:17:f9:d5:39:5a:30:d0:79:8b:2c:59:
                    b2:51:0f:8e:95:3e:95:a6:e3:56:47:96:63:11:a9:
                    75:e4:88:ee:17:da:49:cb:c6:97:c8:e7:38:5e:08:
                    e7:16:06:1f:7e:05:05:0b:30:e2:5e:c6:f7:21:d8:
                    99:10:8b:da:3e:b8:2e:80:27:7e:2b:af:be:fb:ae:
                    3d:fe:03:78:b9:76:66:b4:23:ca:0a:71:cb:41:c2:
                    d4:57:db:d1:52:d8:fe:c9:ea:2d:53:8a:2f:f0:51:
                    f6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E1:21:77:60:C9:93:B6:B5:4B:81:84:6D:31:24:64:7A:76:26:04
            X509v3 Authority Key Identifier:
                keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:6d:70:6e:aa:d6:05:db:3d:8a:10:30:e8:14:8c:df:31:55:
         2b:72:19:65:eb:1f:be:ed:f4:23:f3:11:e5:1d:55:f9:8d:2f:
         64:7f:0e:ec:7e:71:32:46:52:d3:52:66:8a:6f:92:e9:c0:a5:
         4c:05:34:0c:77:a8:6c:8a:2c:42:59:e5:06:ac:5e:ab:2f:a6:
         22:54:be:e7:51:1d:a4:8b:79:93:b0:58:1c:2e:4b:81:3c:e4:
         d3:05:5a:d0:25:09:04:49:1d:43:4b:b0:10:2a:3a:bc:da:40:
         df:01:16:3a:23:46:9a:7f:bc:ce:7e:ed:61:2a:55:d9:e3:24:
         00:ca:b1:83:8c:5a:1e:20:22:45:bf:f8:d9:ea:be:b8:00:a8:
         f5:2a:80:ad:71:91:d6:6a:1c:47:37:ab:71:25:c9:b1:66:9b:
         ba:00:ba:05:97:29:d3:59:70:9a:26:45:61:cf:65:22:28:80:
         e5:5d:ff:72:bf:b1:2a:51:3f:95:af:98:a7:0b:d2:cb:61:b9:
         e3:9f:53:1d:f6:4b:81:16:47:eb:a0:9b:9c:71:c1:5c:88:86:
         21:e3:63:9b:85:a7:cb:d0:31:28:b6:3f:c2:af:d9:00:7e:9b:
         85:5d:4a:7a:3e:9b:31:c0:31:20:6e:7c:bd:b8:88:bb:03:00:
         22:91:f2:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/LXTz6/9XAzPTYYxEJj/LnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjY3ZjVhNmNmNDliYzQzZjIzMDRkZTAwZjc3MDVlYzVi
NzlmY2EwHhcNMjYwODA0MDYwMTUyWhcNMjYwODA1MDYwMTUyWjAzMTEwLwYDVQQD
Eyg2NWUxMjE3NzYwYzk5M2I2YjU0YjgxODQ2ZDMxMjQ2NDdhNzYyNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIPwetMGdSY9U0lBRPHx73EinX1B
AN4fBL0wa6jxXV0M7dlMdcjGD1g8vrAq9QIMteoJLbwned12KPmsg1r89VpHfK6J
nDo3meSDUtDR3p8AnykZhjhSZdpmKCiltMBoRKnLy3r+ZvVxvkslfEHzLzmd0OXz
tL3KUaV4CvCW74w4TteN2gnaEF/6nsfdfYgHCgcCC+Q9M2I8F/nVOVow0HmLLFmy
UQ+OlT6VpuNWR5ZjEal15IjuF9pJy8aXyOc4XgjnFgYffgUFCzDiXsb3IdiZEIva
PrgugCd+K6+++649/gN4uXZmtCPKCnHLQcLUV9vRUtj+yeotU4ov8FH2+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXhIXdgyZO2tUuBhG0xJGR6diYEMB8GA1UdIwQY
MBaAFEImf1ps9JvEPyME3gD3cF7Ft5/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYt
YjIyNjk1YzcwM2E5LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYtYjIyNjk1YzcwM2E5
LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk21wbqrW
Bds9ihAw6BSM3zFVK3IZZesfvu30I/MR5R1V+Y0vZH8O7H5xMkZS01Jmim+S6cCl
TAU0DHeobIosQlnlBqxeqy+mIlS+51EdpIt5k7BYHC5LgTzk0wVa0CUJBEkdQ0uw
ECo6vNpA3wEWOiNGmn+8zn7tYSpV2eMkAMqxg4xaHiAiRb/42eq+uACo9SqArXGR
1mocRzercSXJsWabugC6BZcp01lwmiZFYc9lIiiA5V3/cr+xKlE/la+YpwvSy2G5
459THfZLgRZH66CbnHHBXIiGIeNjm4Wny9AxKLY/wq/ZAH6bhV1Kej6bMcAxIG58
vbiIuwMAIpHyig==
-----END CERTIFICATE-----
Generated at Tue Aug 4 13:58:30 2026 by rpki-client