Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
File:                     Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft (raw, json)
Hash identifier:          71revFwNsYDwiHip2X1XCKYZiiVDNtDly4swEe1Zn0c=
Subject key identifier:   5C:B0:8D:79:D3:A8:63:E4:93:91:36:7C:F8:C4:B3:74:4C:5D:D3:11
Authority key identifier: 42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC
Certificate issuer:       /CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc
Certificate serial:       019D3608A81E5C1D53977D41DF2EA759BA0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
Manifest number:          0BDA
Signing time:             Sat 28 Mar 2026 20:00:30 +0000
Manifest this update:     Sat 28 Mar 2026 20:00:30 +0000
Manifest next update:     Sun 29 Mar 2026 20:00:30 +0000
Files and hashes:         1: Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl (hash: ENsAHi3vpGMlkzpUWMPVd/jxW97bcmJMn5ajz5YkpEQ=)
                          2: Zv3FIbxrHUDa_eVep4PasKjQU6o.roa (hash: JKEF8YhZitQIVgkT+7vZT9WWbZK9Q/6ak4c105Exh3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 20:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:36:08:a8:1e:5c:1d:53:97:7d:41:df:2e:a7:59:ba:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc
        Validity
            Not Before: Mar 28 20:00:30 2026 GMT
            Not After : Mar 29 20:00:30 2026 GMT
        Subject: CN=5cb08d79d3a863e49391367cf8c4b3744c5dd311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ec:ac:11:d1:fa:9e:b0:61:07:9e:b0:1c:9a:
                    ec:ef:b1:fb:6e:40:d4:28:94:43:7b:a2:3d:4a:ec:
                    e0:bc:e5:51:15:60:43:eb:8c:b4:5c:27:4f:d6:07:
                    66:84:a3:4c:ed:60:56:f6:f5:25:86:8f:e0:ee:92:
                    bd:f6:44:c1:63:7d:c5:b5:85:c3:1c:b9:66:00:94:
                    4d:0c:3d:21:d4:85:40:15:2e:a1:c4:74:e7:14:33:
                    51:c2:61:aa:de:c2:d8:f2:a5:5c:d3:d1:d5:c7:71:
                    d5:f1:74:30:5c:3a:16:bd:9b:ad:90:96:a9:c5:f1:
                    1f:02:02:19:05:02:38:63:60:66:41:d6:3f:63:bf:
                    db:55:c4:05:aa:07:c8:bf:b2:49:5f:7a:06:23:28:
                    70:46:15:af:86:25:64:09:7d:4c:2f:29:4b:7d:b4:
                    c8:a5:81:8f:82:11:a0:6f:b0:7f:55:0f:c6:b9:23:
                    7e:bd:d2:fa:ab:16:ad:7c:59:fb:4c:21:fa:24:0c:
                    19:d9:2a:35:dc:d9:80:a8:9b:9d:eb:47:43:35:9d:
                    a9:ed:4c:4b:42:95:12:bf:d6:98:b5:36:c5:2e:d3:
                    52:e0:d8:ed:5c:06:a7:49:fd:54:b5:97:04:92:5d:
                    97:78:c5:16:8b:db:f2:ad:62:c4:2f:38:f2:34:4c:
                    f4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B0:8D:79:D3:A8:63:E4:93:91:36:7C:F8:C4:B3:74:4C:5D:D3:11
            X509v3 Authority Key Identifier:
                keyid:42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:41:26:4b:fe:21:68:da:46:35:45:17:c4:87:ea:b2:87:74:
         82:6c:22:69:86:f0:d2:ee:5f:ff:2b:36:2e:5b:4d:1d:f4:da:
         b6:53:e4:7d:42:2f:9e:3d:f9:24:28:25:df:b6:93:7a:a3:0b:
         84:e1:5f:e3:f3:93:4c:d9:84:91:1d:5f:bc:61:5e:ff:98:c0:
         e1:0b:ae:d1:f4:da:f8:35:eb:20:d0:b1:24:49:2c:e4:c6:6f:
         4c:d0:69:2e:fc:3c:fb:4f:e2:12:11:9f:da:fa:2a:d4:97:f6:
         09:12:f4:b0:36:b4:d1:6d:95:c3:4b:3e:73:fe:44:a9:40:21:
         e7:33:27:af:b9:1f:24:55:35:53:d9:dc:83:00:cb:92:47:05:
         ba:16:1c:44:d2:e8:fc:23:ad:46:8c:bf:15:6a:8a:c4:61:0b:
         21:22:6f:7e:e7:77:92:2c:42:86:44:1d:2a:54:9e:30:db:82:
         ee:5c:02:ed:78:62:0c:d1:33:e7:26:7a:50:77:7f:46:e5:a8:
         aa:f5:6f:ad:7c:65:e1:9e:b2:04:ea:08:cd:de:0a:ed:48:4e:
         2c:e8:85:33:8b:4c:49:d6:ad:16:6f:7b:80:78:0f:28:70:50:
         01:13:53:f6:07:4f:c7:e9:79:dd:23:d0:02:02:d9:3c:bb:ed:
         0a:12:94:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ02CKgeXB1Tl31B3y6nWboKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZmU1NWU2Mjg4YTFiNDcwMmY5ZWJlN2Y4YzYwNjBiNmNm
YmIxYmMwHhcNMjYwMzI4MjAwMDMwWhcNMjYwMzI5MjAwMDMwWjAzMTEwLwYDVQQD
Eyg1Y2IwOGQ3OWQzYTg2M2U0OTM5MTM2N2NmOGM0YjM3NDRjNWRkMzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+ysEdH6nrBhB56wHJrs77H7bkDU
KJRDe6I9SuzgvOVRFWBD64y0XCdP1gdmhKNM7WBW9vUlho/g7pK99kTBY33FtYXD
HLlmAJRNDD0h1IVAFS6hxHTnFDNRwmGq3sLY8qVc09HVx3HV8XQwXDoWvZutkJap
xfEfAgIZBQI4Y2BmQdY/Y7/bVcQFqgfIv7JJX3oGIyhwRhWvhiVkCX1MLylLfbTI
pYGPghGgb7B/VQ/GuSN+vdL6qxatfFn7TCH6JAwZ2So13NmAqJud60dDNZ2p7UxL
QpUSv9aYtTbFLtNS4NjtXAanSf1UtZcEkl2XeMUWi9vyrWLELzjyNEz0xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFywjXnTqGPkk5E2fPjEs3RMXdMRMB8GA1UdIwQY
MBaAFEL+VeYoihtHAvnr5/jGBgts+7G8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXY1VjVpaUtHMGNDLWV2bi1NWUdDMno3c2J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84MTQxZGQtNDQ5Yi00ZDFmLTgxMWEt
ZDYxOTBjY2Y3ODU3LzEvUXY1VjVpaUtHMGNDLWV2bi1NWUdDMno3c2J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84MTQxZGQtNDQ5Yi00ZDFmLTgxMWEtZDYxOTBjY2Y3ODU3
LzEvUXY1VjVpaUtHMGNDLWV2bi1NWUdDMno3c2J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkEmS/4h
aNpGNUUXxIfqsod0gmwiaYbw0u5f/ys2LltNHfTatlPkfUIvnj35JCgl37aTeqML
hOFf4/OTTNmEkR1fvGFe/5jA4Quu0fTa+DXrINCxJEks5MZvTNBpLvw8+0/iEhGf
2voq1Jf2CRL0sDa00W2Vw0s+c/5EqUAh5zMnr7kfJFU1U9ncgwDLkkcFuhYcRNLo
/COtRoy/FWqKxGELISJvfud3kixChkQdKlSeMNuC7lwC7XhiDNEz5yZ6UHd/RuWo
qvVvrXxl4Z6yBOoIzd4K7UhOLOiFM4tMSdatFm97gHgPKHBQARNT9gdPx+l53SPQ
AgLZPLvtChKUXg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 03:41:29 2026 by rpki-client