Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
File:                     Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft (raw, json)
Hash identifier:          MIodmKqKanOIUEYzTPCdsbDq0SPOo0EDReA7kSnnFfI=
Subject key identifier:   72:51:03:6C:A6:7C:3A:DB:E3:5D:CB:6F:E2:2B:9F:FF:E2:6C:D4:E2
Authority key identifier: 42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC
Certificate issuer:       /CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc
Certificate serial:       019D2884C79B320BD45AB4954612898E3212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
Manifest number:          0BD3
Signing time:             Thu 26 Mar 2026 05:01:23 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:23 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:23 +0000
Files and hashes:         1: Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl (hash: RVcVIyJ4aYCJ+tSm5l2k+J23gUOYyN0JBGCQteBGym0=)
                          2: Zv3FIbxrHUDa_eVep4PasKjQU6o.roa (hash: JKEF8YhZitQIVgkT+7vZT9WWbZK9Q/6ak4c105Exh3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:c7:9b:32:0b:d4:5a:b4:95:46:12:89:8e:32:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42fe55e6288a1b4702f9ebe7f8c6060b6cfbb1bc
        Validity
            Not Before: Mar 26 05:01:23 2026 GMT
            Not After : Mar 27 05:01:23 2026 GMT
        Subject: CN=7251036ca67c3adbe35dcb6fe22b9fffe26cd4e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2d:d1:66:24:b9:ef:2c:48:dc:16:48:ed:7e:
                    64:b2:37:e0:a7:e8:64:8d:2c:27:47:12:48:14:1e:
                    7f:d6:5a:10:77:ec:d6:4c:5c:f7:91:50:a7:19:8e:
                    f9:a2:18:91:1d:8b:d1:c5:a0:ff:a7:8f:e9:18:3d:
                    2d:60:40:71:6d:a3:38:34:db:f9:00:a8:ff:c4:02:
                    2d:6e:89:b8:87:20:19:b5:d8:34:a8:92:47:d6:22:
                    6b:12:99:fa:80:06:a4:9b:6c:f6:28:8d:b8:14:84:
                    e6:15:69:7b:24:9b:c2:86:e2:0d:2e:c3:ee:6b:96:
                    c6:2c:6b:db:28:50:08:96:d8:62:07:b3:55:dd:0f:
                    21:9c:d4:47:86:8f:94:a0:ef:9f:f6:f4:81:e3:4e:
                    1f:04:04:a9:48:b2:00:8b:24:4e:d9:56:87:d4:f7:
                    84:5d:23:be:39:2a:2c:46:67:0e:0a:05:4b:b1:2a:
                    ec:40:78:e1:fd:07:2d:f7:b9:01:a3:b8:44:e7:65:
                    e4:3b:a0:92:77:d7:ad:ee:ec:8d:1f:42:d2:8d:6b:
                    fb:30:f9:5f:9e:29:68:80:42:89:c7:a4:af:06:53:
                    f1:3c:ed:80:35:49:4a:7f:42:58:ac:43:1a:9f:e7:
                    12:89:cb:4e:99:89:23:a1:14:84:21:ca:25:ea:fb:
                    10:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:51:03:6C:A6:7C:3A:DB:E3:5D:CB:6F:E2:2B:9F:FF:E2:6C:D4:E2
            X509v3 Authority Key Identifier:
                keyid:42:FE:55:E6:28:8A:1B:47:02:F9:EB:E7:F8:C6:06:0B:6C:FB:B1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qv5V5iiKG0cC-evn-MYGC2z7sbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8141dd-449b-4d1f-811a-d6190ccf7857/1/Qv5V5iiKG0cC-evn-MYGC2z7sbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6f:57:09:2a:c9:34:89:01:b2:d3:f6:45:1b:72:88:b6:9b:
         da:ec:91:ee:65:7b:fa:cb:e1:4a:d8:70:ca:95:aa:c6:b2:c8:
         e2:0a:68:55:9a:41:62:b6:56:b1:42:06:fb:75:41:c6:7a:43:
         a7:1c:18:65:ec:6d:f9:ca:b0:bf:f0:21:7d:0c:7f:e5:71:fb:
         4a:cb:ac:6d:50:8c:0b:26:da:05:59:cf:02:ce:e6:64:d2:a9:
         6a:db:9b:53:0c:29:46:48:98:61:af:f6:cc:b7:3d:ef:86:29:
         ce:72:e6:d8:24:f8:05:82:29:6f:a1:bf:bd:c5:aa:eb:4c:b4:
         51:11:30:90:c2:4c:f0:97:43:5a:03:83:69:3f:b6:3d:3f:9f:
         b8:d1:c0:b0:c1:91:14:97:1c:1f:14:f4:ad:e4:a0:9c:dd:0d:
         ad:70:c2:1c:f4:20:cb:0e:94:91:73:aa:3f:a3:31:fd:c4:3f:
         39:68:7d:e7:cf:89:9a:36:5f:25:85:33:cc:38:90:9b:a3:5b:
         61:40:21:45:46:d6:9b:eb:21:f0:2e:b2:52:78:e0:a5:58:3c:
         10:12:5b:85:eb:99:35:64:c4:01:a5:52:c4:e8:93:2f:ac:11:
         b7:2d:f2:2d:44:0a:5f:9e:6c:c2:b9:1d:1d:07:0c:61:41:22:
         28:53:58:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohMebMgvUWrSVRhKJjjISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZmU1NWU2Mjg4YTFiNDcwMmY5ZWJlN2Y4YzYwNjBiNmNm
YmIxYmMwHhcNMjYwMzI2MDUwMTIzWhcNMjYwMzI3MDUwMTIzWjAzMTEwLwYDVQQD
Eyg3MjUxMDM2Y2E2N2MzYWRiZTM1ZGNiNmZlMjJiOWZmZmUyNmNkNGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly3RZiS57yxI3BZI7X5ksjfgp+hk
jSwnRxJIFB5/1loQd+zWTFz3kVCnGY75ohiRHYvRxaD/p4/pGD0tYEBxbaM4NNv5
AKj/xAItbom4hyAZtdg0qJJH1iJrEpn6gAakm2z2KI24FITmFWl7JJvChuINLsPu
a5bGLGvbKFAIlthiB7NV3Q8hnNRHho+UoO+f9vSB404fBASpSLIAiyRO2VaH1PeE
XSO+OSosRmcOCgVLsSrsQHjh/Qct97kBo7hE52XkO6CSd9et7uyNH0LSjWv7MPlf
nilogEKJx6SvBlPxPO2ANUlKf0JYrEMan+cSictOmYkjoRSEIcol6vsQqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJRA2ymfDrb413Lb+Irn//ibNTiMB8GA1UdIwQY
MBaAFEL+VeYoihtHAvnr5/jGBgts+7G8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXY1VjVpaUtHMGNDLWV2bi1NWUdDMno3c2J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84MTQxZGQtNDQ5Yi00ZDFmLTgxMWEt
ZDYxOTBjY2Y3ODU3LzEvUXY1VjVpaUtHMGNDLWV2bi1NWUdDMno3c2J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84MTQxZGQtNDQ5Yi00ZDFmLTgxMWEtZDYxOTBjY2Y3ODU3
LzEvUXY1VjVpaUtHMGNDLWV2bi1NWUdDMno3c2J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC29XCSrJ
NIkBstP2RRtyiLab2uyR7mV7+svhSthwypWqxrLI4gpoVZpBYrZWsUIG+3VBxnpD
pxwYZext+cqwv/AhfQx/5XH7SsusbVCMCybaBVnPAs7mZNKpatubUwwpRkiYYa/2
zLc974YpznLm2CT4BYIpb6G/vcWq60y0UREwkMJM8JdDWgODaT+2PT+fuNHAsMGR
FJccHxT0reSgnN0NrXDCHPQgyw6UkXOqP6Mx/cQ/OWh958+JmjZfJYUzzDiQm6Nb
YUAhRUbWm+sh8C6yUnjgpVg8EBJbheuZNWTEAaVSxOiTL6wRty3yLUQKX55swrkd
HQcMYUEiKFNYKA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:24:03 2026 by rpki-client