Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
File:                     QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft (raw, json)
Hash identifier:          lCmOcK2YoPtOtUE50mR/lMn55OONVAlb066zBC7t3M4=
Subject key identifier:   52:98:B6:DC:20:2D:99:FD:B9:12:A7:1A:0E:CC:D4:7C:E9:6F:6E:EA
Authority key identifier: 41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16
Certificate issuer:       /CN=4155087a81848bf7b37ff8be59751d79440d8116
Certificate serial:       019D382E00CB081D576E237FED03BB4A744D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
Manifest number:          07EB
Signing time:             Sun 29 Mar 2026 06:00:32 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:32 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:32 +0000
Files and hashes:         1: QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl (hash: +/JYHXcT6bkpOvEIMaeyzrBxBAvRTYW+Zc9pE2TdRHc=)
                          2: hphZeFHfi_kyciuoqV7fUm3Dht8.roa (hash: AEuhgXiumBto93ZbZHfzAPUERMbrKkfc9/R3pmgN1Dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:00:cb:08:1d:57:6e:23:7f:ed:03:bb:4a:74:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4155087a81848bf7b37ff8be59751d79440d8116
        Validity
            Not Before: Mar 29 06:00:32 2026 GMT
            Not After : Mar 30 06:00:32 2026 GMT
        Subject: CN=5298b6dc202d99fdb912a71a0eccd47ce96f6eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3e:10:67:2a:8e:fe:83:aa:bc:cd:4d:d8:dc:
                    73:2b:4b:b8:63:fb:dc:d0:4f:cb:ed:29:1a:41:03:
                    ae:45:6a:c6:40:70:f4:51:e8:84:40:ff:40:b5:4c:
                    d4:e5:f8:38:a9:5c:0c:35:50:86:6a:ac:37:29:20:
                    f7:bd:10:d5:2b:78:09:f0:0b:fd:eb:c2:a5:6b:0b:
                    a7:5e:40:0b:5b:09:5c:e0:20:97:21:2c:fd:85:28:
                    50:a6:74:d4:e8:82:f5:55:2f:b9:51:9f:14:17:22:
                    bc:b4:58:b4:7f:9b:dd:ec:15:f6:ce:26:2f:ed:6d:
                    72:33:01:44:e0:32:6f:1c:fe:96:57:86:bb:88:75:
                    1d:64:77:68:b4:b6:b4:b2:53:e3:7a:07:5a:bb:b5:
                    99:0c:23:3a:97:5d:af:8b:89:92:6a:13:5c:5d:29:
                    49:ff:1b:af:d8:f9:26:3a:97:a1:b2:9f:0d:aa:a3:
                    43:4b:49:5a:91:6e:4d:d4:0f:db:05:ab:d8:28:6f:
                    dc:8c:e7:dc:2a:63:61:f1:25:53:49:a4:96:2e:92:
                    b8:dc:11:7f:ad:eb:63:ac:8c:b3:17:d9:cb:62:40:
                    90:65:27:5c:2f:42:a7:e0:a1:32:9b:d9:d1:96:b9:
                    09:dd:02:5f:59:a2:d5:dc:15:6e:10:37:74:6a:81:
                    61:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:98:B6:DC:20:2D:99:FD:B9:12:A7:1A:0E:CC:D4:7C:E9:6F:6E:EA
            X509v3 Authority Key Identifier:
                keyid:41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a5:07:72:18:58:50:7f:a2:47:cf:65:0b:60:a4:50:62:0e:
         4e:22:3d:d3:20:01:7e:99:50:bf:e1:e5:9d:0c:6b:b0:a4:78:
         9c:51:0d:92:01:5b:96:ba:12:fb:87:86:83:7b:ea:fc:6b:9d:
         0e:73:cb:b8:d3:9a:e4:6f:99:49:90:30:26:4b:94:93:b2:4a:
         bf:1c:03:8c:4f:c7:c2:e5:0f:24:37:e4:58:8a:26:8b:6b:e0:
         27:7b:36:72:af:5c:b5:fa:c6:fe:f1:30:48:9a:50:20:fb:62:
         75:d1:d3:ab:6c:53:ee:39:c4:67:a2:7a:96:5b:1e:12:f2:6e:
         01:13:09:73:2a:15:7d:73:5b:d0:2b:09:53:9b:ed:11:c4:7c:
         04:ef:40:46:a1:f1:ef:37:c3:95:2d:76:3f:38:a0:20:22:73:
         03:7b:e4:c6:0b:2f:e7:4f:36:92:d4:9e:fe:2d:3a:7b:36:f6:
         89:f7:fc:12:08:f3:d9:43:d6:e6:c5:cd:ce:8b:8f:0c:91:e9:
         ba:2a:c1:e5:f2:fa:ba:f5:ac:37:7c:f3:d8:54:7a:c2:35:ce:
         3d:8a:f6:c0:52:5c:61:f8:d2:b0:6e:b6:12:81:cd:19:88:70:
         16:f8:1c:a2:71:f7:f6:b0:4d:f0:39:5c:aa:f4:69:34:e6:89:
         74:07:68:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:27 2026 by rpki-client