Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
File:                     QWbAb_SeBTSAniNABbqlzKfhRqg.mft (raw, json)
Hash identifier:          2dH+WHwScHKvJKIANGYTyUlOnXja0fVARBuXbxVcEBs=
Subject key identifier:   C5:88:36:9B:36:33:23:01:44:FE:A6:1D:EF:06:90:A4:AA:A5:99:27
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Certificate issuer:       /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial:       019EE70D19CD970C5BA4BD50FA968D43CE65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
Manifest number:          0483
Signing time:             Sat 20 Jun 2026 22:00:55 +0000
Manifest this update:     Sat 20 Jun 2026 22:00:55 +0000
Manifest next update:     Sun 21 Jun 2026 22:00:55 +0000
Files and hashes:         1: OHcGQbUAqdSq6mt4_3eyTZJR1XA.roa (hash: O7C2wF+M5BpxMvsOFLPpquh+G4qmdUXld04pX58Ae9M=)
                          2: OZM-Dw3YxN4NNmcVHOuA1QZj9EI.roa (hash: V384BuzGcR3DrUaN6RcZVJEhoLSK6/AilQbM62FZlXk=)
                          3: QWbAb_SeBTSAniNABbqlzKfhRqg.crl (hash: weZvF+/jW0gVbxDqkEpZT+h2NYqRm4z0MbvVV5nXkWg=)
                          4: VL-lnxlE6fflxqRRlw7b9MCnGvo.roa (hash: GtOH60oIJtJHnm++7YABJtPUhpfnGJz3iJ4jvFL6ZBk=)
                          5: hdOOC1IEysAq-Z-Tmv9_lJQDID4.roa (hash: yt1gpylTF5DwEVRgiWOOxqt2J7YwsxusRFsZDCgtRfE=)
                          6: kjzLCEj1tYw7sDbLWbp9V6YxOOM.roa (hash: qZYqyURYcynOIWE252O3MtzO4WaOHKWvGwoZG8pxdGk=)
                          7: sJ4fBRlYkaW2DfbwT41aefbNZtc.asa (hash: KPvz8H9YcmTAaol7AmPzK6hmkkiOVVm9HlZufolZpd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 21:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e7:0d:19:cd:97:0c:5b:a4:bd:50:fa:96:8d:43:ce:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
        Validity
            Not Before: Jun 20 22:00:55 2026 GMT
            Not After : Jun 21 22:00:55 2026 GMT
        Subject: CN=c588369b3633230144fea61def0690a4aaa59927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:cf:13:05:f3:4a:59:2b:dd:be:4d:03:7c:
                    ef:d1:32:0b:73:94:25:5c:a0:c6:24:7c:b9:18:b4:
                    59:c2:9b:f8:31:77:c5:55:64:9f:76:ec:33:18:e0:
                    53:8e:4a:98:55:4e:f4:25:ae:27:a2:ea:57:73:60:
                    cd:ee:56:22:3e:4d:e7:b0:61:b3:18:b1:7d:30:c1:
                    13:87:ae:5d:01:51:eb:26:3f:95:93:4e:bb:38:24:
                    eb:d5:cc:03:cd:1f:a7:e0:7c:67:b0:9b:e9:80:b5:
                    0c:5d:5c:ea:be:f4:d7:20:e8:d2:8b:59:ef:06:61:
                    1c:d5:41:77:55:63:ad:3b:a3:13:a9:43:00:65:a8:
                    71:f2:10:12:34:e5:f8:94:9b:d4:7d:e1:71:6b:11:
                    f3:e5:70:f3:9e:06:2c:de:84:54:49:a5:42:b3:f5:
                    d9:7a:e0:af:86:fc:84:5a:66:36:0e:ad:b5:06:47:
                    42:b5:ab:70:c4:5d:37:a1:0d:1a:c9:22:d0:18:34:
                    d6:f9:b5:36:37:7d:e5:c1:1a:5d:18:a0:10:ba:d1:
                    1c:c9:58:58:02:90:0c:a4:85:8e:a4:d1:07:8c:62:
                    cc:00:95:4e:e5:20:f9:be:8c:dd:ed:62:c7:46:ef:
                    4f:c3:82:45:83:84:a7:48:8b:0f:80:ee:db:1c:0c:
                    82:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:88:36:9B:36:33:23:01:44:FE:A6:1D:EF:06:90:A4:AA:A5:99:27
            X509v3 Authority Key Identifier:
                keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ad:23:61:05:34:ee:c3:dc:1e:7f:d0:1f:82:23:af:d4:15:
         5c:cb:c2:5f:78:31:e2:60:8c:93:e3:c9:80:a1:7a:c6:48:52:
         3a:48:6c:1d:eb:32:cc:e3:47:93:8b:c8:e7:81:f7:c6:71:2f:
         01:f8:07:6d:a5:7c:f5:c8:8b:ab:da:b1:d8:6d:89:c9:7d:31:
         35:98:4a:b6:9a:fe:90:e1:67:b2:26:c1:77:58:75:53:26:a3:
         0b:50:19:21:02:55:51:01:9e:dd:b1:65:80:ec:9c:ed:31:be:
         bd:81:d0:92:52:75:d5:64:f3:37:d9:fb:92:e9:1f:89:89:00:
         f3:9f:db:55:90:c3:c8:8a:ec:5b:80:52:5a:93:11:1b:76:06:
         3c:f2:16:26:7c:13:4d:a6:19:a4:e0:ad:b5:dd:0e:02:de:0e:
         51:e3:af:85:da:56:c7:a0:7a:aa:0e:a3:39:4a:8f:b7:f0:5a:
         bb:22:71:d8:e6:0b:88:25:d7:b2:f9:31:79:fd:fb:c7:94:7b:
         b8:13:87:35:0d:93:88:30:0f:02:a6:61:62:56:b8:98:45:5a:
         9a:bb:c1:6a:c8:0b:b6:7f:a7:d2:41:4b:31:74:43:ff:40:43:
         7b:9d:a4:aa:6f:36:47:e7:f6:78:5a:7c:d7:f5:81:bf:d5:7d:
         d6:b7:b6:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7nDRnNlwxbpL1Q+paNQ85lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNjZjMDZmZjQ5ZTA1MzQ4MDllMjM0MDA1YmFhNWNjYTdl
MTQ2YTgwHhcNMjYwNjIwMjIwMDU1WhcNMjYwNjIxMjIwMDU1WjAzMTEwLwYDVQQD
EyhjNTg4MzY5YjM2MzMyMzAxNDRmZWE2MWRlZjA2OTBhNGFhYTU5OTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4LPEwXzSlkr3b5NA3zv0TILc5Ql
XKDGJHy5GLRZwpv4MXfFVWSfduwzGOBTjkqYVU70Ja4noupXc2DN7lYiPk3nsGGz
GLF9MMETh65dAVHrJj+Vk067OCTr1cwDzR+n4HxnsJvpgLUMXVzqvvTXIOjSi1nv
BmEc1UF3VWOtO6MTqUMAZahx8hASNOX4lJvUfeFxaxHz5XDzngYs3oRUSaVCs/XZ
euCvhvyEWmY2Dq21BkdCtatwxF03oQ0aySLQGDTW+bU2N33lwRpdGKAQutEcyVhY
ApAMpIWOpNEHjGLMAJVO5SD5vozd7WLHRu9Pw4JFg4SnSIsPgO7bHAyClQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWINps2MyMBRP6mHe8GkKSqpZknMB8GA1UdIwQY
MBaAFEFmwG/0ngU0gJ4jQAW6pcyn4UaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUt
ODgyNmU4NzdkMTQzLzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUtODgyNmU4NzdkMTQz
LzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaK0jYQU0
7sPcHn/QH4Ijr9QVXMvCX3gx4mCMk+PJgKF6xkhSOkhsHesyzONHk4vI54H3xnEv
AfgHbaV89ciLq9qx2G2JyX0xNZhKtpr+kOFnsibBd1h1UyajC1AZIQJVUQGe3bFl
gOyc7TG+vYHQklJ11WTzN9n7kukfiYkA85/bVZDDyIrsW4BSWpMRG3YGPPIWJnwT
TaYZpOCttd0OAt4OUeOvhdpWx6B6qg6jOUqPt/BauyJx2OYLiCXXsvkxef37x5R7
uBOHNQ2TiDAPAqZhYla4mEVamrvBasgLtn+n0kFLMXRD/0BDe52kqm82R+f2eFp8
1/WBv9V91re2oQ==
-----END CERTIFICATE-----
Generated at Sun Jun 21 05:13:48 2026 by rpki-client