Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File:                     QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier:          b9wrjENP6HSQqeTP2ERtzOY0S9lyqDxejsTR1fY7F08=
Subject key identifier:   02:E9:68:A8:F8:92:D1:39:D1:30:23:21:DA:23:06:06:33:A1:21:56
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer:       /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial:       019E1EA3C639D4A9CD636FF83963A806A538
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number:          0D99
Signing time:             Wed 13 May 2026 00:01:49 +0000
Manifest this update:     Wed 13 May 2026 00:01:49 +0000
Manifest next update:     Thu 14 May 2026 00:01:49 +0000
Files and hashes:         1: O8zrLW8AWIVEs9iiDW4s5TO_x9A.roa (hash: x7HRiC6WoAyrY0ICRLQbw3hJY8kiQ6r/ahn5rm3lXqw=)
                          2: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: ArRg9CrBzfhqdG3VsrUre2/Th1t8xjhshi/pjKnkYJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:c6:39:d4:a9:cd:63:6f:f8:39:63:a8:06:a5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
        Validity
            Not Before: May 13 00:01:49 2026 GMT
            Not After : May 14 00:01:49 2026 GMT
        Subject: CN=02e968a8f892d139d1302321da23060633a12156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:35:83:9e:34:8f:e6:99:4b:3f:c2:2a:97:31:
                    90:3e:54:9a:ef:d2:f8:71:81:9c:9b:e1:f5:54:b1:
                    c1:cd:69:d2:4c:57:59:f9:8d:1a:e1:b8:fc:34:f4:
                    97:98:4e:8d:07:b6:8e:f8:22:d1:72:4b:15:05:79:
                    b7:e5:d8:b0:b3:a0:b4:1d:72:6f:39:00:20:80:f4:
                    c1:9c:85:b6:15:e7:35:79:46:8e:2b:9d:05:aa:8d:
                    3c:81:b3:55:94:93:48:d7:a4:fb:58:51:ca:30:99:
                    aa:3b:3c:ec:85:b3:3c:0c:9d:cc:4b:87:d3:52:77:
                    1a:53:a6:d9:1b:38:5d:c3:62:2d:61:79:e7:26:a6:
                    18:6a:7a:10:81:17:9b:2e:36:50:e9:3b:d3:94:96:
                    f5:2c:35:9b:fd:5c:4e:f5:6d:74:27:5b:a4:ee:83:
                    c9:50:8b:e5:80:c9:cb:3c:0f:f7:2a:9b:02:eb:06:
                    b2:c4:72:cb:80:89:8a:f1:42:ba:32:fb:0a:bc:a4:
                    7b:d2:48:fb:11:7a:6b:83:05:ba:51:7e:bd:74:0d:
                    95:03:6d:8e:31:b6:d5:e7:e2:ec:8b:91:69:ba:79:
                    91:64:f8:93:0d:25:60:f1:8d:9c:14:3b:c3:9d:cb:
                    31:82:f8:28:9b:5e:06:3b:b2:50:35:f4:79:36:4f:
                    58:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E9:68:A8:F8:92:D1:39:D1:30:23:21:DA:23:06:06:33:A1:21:56
            X509v3 Authority Key Identifier:
                keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ca:49:d1:da:c8:ed:1d:cf:3e:69:c5:46:77:a0:c3:2c:d5:
         b4:30:a9:aa:b8:3b:b8:48:24:f8:1f:17:d4:5c:3f:79:f4:5a:
         5d:bf:49:fd:d1:4f:16:e7:27:ff:32:a3:e8:03:18:be:58:ea:
         51:fa:85:02:a0:df:37:23:b0:d1:70:24:07:43:e8:c5:f3:a7:
         c8:6e:17:c7:45:81:47:c9:58:a2:c6:ae:72:66:e7:35:c6:0d:
         54:47:d2:0d:a8:83:10:37:3a:69:eb:ae:50:57:f3:8e:30:de:
         bb:52:5b:86:dc:6b:f8:ee:fa:99:ff:b1:14:58:bf:19:4b:b8:
         24:b8:be:d0:45:30:df:90:4d:01:da:ea:8e:98:18:d0:4a:57:
         12:34:9b:05:9d:64:6a:66:e1:39:9a:97:93:35:fc:e9:0d:6f:
         29:ae:2e:2e:16:08:7f:09:42:c4:08:09:26:38:1c:bc:40:5d:
         54:d6:61:49:fc:ec:6b:99:81:93:0c:9f:f4:d1:14:b7:ba:8a:
         a9:81:64:7d:17:f1:93:65:97:c4:d3:f8:4a:33:d5:16:84:4f:
         e1:16:b5:fe:87:a8:fb:3d:e9:8d:dc:a7:91:ce:95:d0:61:76:
         a1:32:b0:1d:6d:52:6b:52:f6:1f:30:8b:f6:c3:89:16:d7:9a:
         72:29:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:00 2026 by rpki-client