Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File:                     QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier:          jzC5nbApTu+G84Ugjd1tDkraRyG231pvprYKlpXBQKI=
Subject key identifier:   AF:00:83:E6:6F:E5:BA:52:72:43:D9:A1:46:78:32:89:54:0F:F9:DE
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer:       /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial:       019EDBE5AC21367703C647D94F94B2BBCC8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number:          0DFB
Signing time:             Thu 18 Jun 2026 18:02:02 +0000
Manifest this update:     Thu 18 Jun 2026 18:02:02 +0000
Manifest next update:     Fri 19 Jun 2026 18:02:02 +0000
Files and hashes:         1: O8zrLW8AWIVEs9iiDW4s5TO_x9A.roa (hash: x7HRiC6WoAyrY0ICRLQbw3hJY8kiQ6r/ahn5rm3lXqw=)
                          2: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: 8iyJJCrZR1zkxxtEyArewCiY3PIHOuVIYgSIoRecV0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 18:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:db:e5:ac:21:36:77:03:c6:47:d9:4f:94:b2:bb:cc:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
        Validity
            Not Before: Jun 18 18:02:02 2026 GMT
            Not After : Jun 19 18:02:02 2026 GMT
        Subject: CN=af0083e66fe5ba527243d9a146783289540ff9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:fe:8e:bd:b9:e6:d6:6c:43:51:14:0f:1e:
                    70:4c:1b:c5:eb:33:a2:3b:a5:87:8c:74:0a:d3:92:
                    7b:49:3e:76:6c:48:f8:df:33:9a:93:f2:9a:43:b6:
                    60:de:58:cd:86:e4:1d:0e:84:7d:47:6e:fe:aa:f5:
                    b8:67:f3:29:df:91:bb:b4:0f:f7:90:cf:aa:78:32:
                    b1:96:fa:95:77:0d:bc:81:16:8e:59:9a:1d:28:ca:
                    77:0a:73:5c:e7:7a:80:5f:0d:6c:92:e2:57:e5:57:
                    6e:32:4c:72:95:52:8e:79:88:90:02:d7:19:7a:ad:
                    52:cb:23:3e:37:fe:7f:d1:e9:d9:65:99:da:96:f0:
                    cf:dc:83:94:8d:92:86:1d:76:ee:45:19:4a:12:4f:
                    95:52:45:b1:dd:f2:cf:48:d4:72:7a:82:07:9b:7e:
                    3e:a8:72:60:02:e2:11:f3:9e:7e:2c:68:91:38:a6:
                    1e:ae:48:38:31:17:79:b5:d4:84:77:19:46:95:96:
                    75:b4:4d:44:e1:46:31:44:c6:f4:7c:d1:81:56:0c:
                    42:e0:3b:a4:de:d2:1e:66:5d:ef:0a:88:2b:9d:a5:
                    77:1d:0d:07:dd:b5:64:bc:8b:e7:13:34:18:c5:e1:
                    0d:5b:ac:16:73:65:14:fe:d0:d4:db:03:36:1d:bd:
                    75:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:00:83:E6:6F:E5:BA:52:72:43:D9:A1:46:78:32:89:54:0F:F9:DE
            X509v3 Authority Key Identifier:
                keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:5b:0f:f1:00:a8:c0:2a:f4:16:aa:87:13:2e:23:c5:27:9f:
         0d:0c:8b:c7:f8:4d:2b:5e:eb:fc:5f:1d:77:58:dc:eb:ed:ce:
         76:20:03:63:b5:bb:65:c6:e0:64:81:3e:90:75:ea:3b:24:56:
         ce:7e:09:7a:a0:88:fb:5a:b4:16:9b:a0:eb:36:6b:ad:45:5c:
         ea:34:87:d4:fe:cb:e6:8c:de:0d:cf:24:8b:a9:73:67:ae:66:
         35:fd:83:4c:cf:74:c2:30:5d:8b:1e:71:19:02:64:76:9b:76:
         21:0c:23:0c:a2:e4:00:dd:7a:ed:58:8b:20:37:ad:7c:4d:6a:
         03:8f:f5:91:0f:cb:d9:02:0e:70:4e:0c:cc:c2:26:44:d1:b6:
         52:7e:a8:ea:ee:bd:1b:b0:10:5b:9d:ea:37:04:8c:f7:05:0b:
         6d:65:8a:10:6c:7f:27:23:82:b0:a8:ca:ab:4b:5a:32:8b:0d:
         f4:6f:a3:d8:85:29:65:a5:62:ae:99:b0:75:85:c9:a3:cb:ac:
         00:41:65:91:75:4c:6f:71:bd:fd:7c:8d:a3:7f:3a:7e:45:1f:
         af:5c:3e:b6:2f:52:12:3d:24:46:c5:dc:9a:a3:88:07:73:a7:
         bf:c6:6c:99:e3:81:28:af:5e:dd:60:2a:12:f5:cd:a8:5d:03:
         23:09:de:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7b5awhNncDxkfZT5Syu8yLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjY3ZjVhNmNmNDliYzQzZjIzMDRkZTAwZjc3MDVlYzVi
NzlmY2EwHhcNMjYwNjE4MTgwMjAyWhcNMjYwNjE5MTgwMjAyWjAzMTEwLwYDVQQD
EyhhZjAwODNlNjZmZTViYTUyNzI0M2Q5YTE0Njc4MzI4OTU0MGZmOWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAD+jr255tZsQ1EUDx5wTBvF6zOi
O6WHjHQK05J7ST52bEj43zOak/KaQ7Zg3ljNhuQdDoR9R27+qvW4Z/Mp35G7tA/3
kM+qeDKxlvqVdw28gRaOWZodKMp3CnNc53qAXw1skuJX5VduMkxylVKOeYiQAtcZ
eq1SyyM+N/5/0enZZZnalvDP3IOUjZKGHXbuRRlKEk+VUkWx3fLPSNRyeoIHm34+
qHJgAuIR855+LGiROKYerkg4MRd5tdSEdxlGlZZ1tE1E4UYxRMb0fNGBVgxC4Duk
3tIeZl3vCogrnaV3HQ0H3bVkvIvnEzQYxeENW6wWc2UU/tDU2wM2Hb119wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8Ag+Zv5bpSckPZoUZ4MolUD/neMB8GA1UdIwQY
MBaAFEImf1ps9JvEPyME3gD3cF7Ft5/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYt
YjIyNjk1YzcwM2E5LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYtYjIyNjk1YzcwM2E5
LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFsP8QCo
wCr0FqqHEy4jxSefDQyLx/hNK17r/F8dd1jc6+3OdiADY7W7ZcbgZIE+kHXqOyRW
zn4JeqCI+1q0Fpug6zZrrUVc6jSH1P7L5ozeDc8ki6lzZ65mNf2DTM90wjBdix5x
GQJkdpt2IQwjDKLkAN167ViLIDetfE1qA4/1kQ/L2QIOcE4MzMImRNG2Un6o6u69
G7AQW53qNwSM9wULbWWKEGx/JyOCsKjKq0taMosN9G+j2IUpZaVirpmwdYXJo8us
AEFlkXVMb3G9/XyNo386fkUfr1w+ti9SEj0kRsXcmqOIB3Onv8ZsmeOBKK9e3WAq
EvXNqF0DIwneWQ==
-----END CERTIFICATE-----
Generated at Fri Jun 19 03:36:13 2026 by rpki-client