Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File:                     QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier:          WgGBFYM//2d/kAbtUsVG8hQFhOJIbdC2jmRFY+aMzgU=
Subject key identifier:   88:45:47:29:EA:8C:0E:09:00:06:DC:4B:A7:32:1E:AF:1C:87:A1:D0
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer:       /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial:       019E1E3572BEDCADE07AD0E71D4B0969C59B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number:          0563
Signing time:             Tue 12 May 2026 22:01:19 +0000
Manifest this update:     Tue 12 May 2026 22:01:19 +0000
Manifest next update:     Wed 13 May 2026 22:01:19 +0000
Files and hashes:         1: 2XIrFY7sSUmf0ZXtm7NFV38W-DM.roa (hash: VPm4JxETY4pUG2qbLQfLY9WMJOpVuE0GwkXWlkKqHlA=)
                          2: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: kkGZQQ9ROh0AEr57cAt7DCcC/QUKoj8JsCfLPr313AQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:72:be:dc:ad:e0:7a:d0:e7:1d:4b:09:69:c5:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
        Validity
            Not Before: May 12 22:01:19 2026 GMT
            Not After : May 13 22:01:19 2026 GMT
        Subject: CN=88454729ea8c0e090006dc4ba7321eaf1c87a1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5c:15:4d:ba:3e:f1:0e:db:52:0d:c3:b9:22:
                    e5:31:99:28:3d:0d:72:8f:8f:51:93:a6:87:fe:74:
                    b2:93:ee:66:c4:af:56:69:c2:cd:68:fe:f4:19:5f:
                    17:e7:72:52:67:66:27:7a:13:0d:38:f9:b5:9c:19:
                    ed:80:1c:9d:78:62:f5:25:57:30:f1:43:29:98:4a:
                    92:22:be:f4:b5:97:a2:6e:f1:a6:a2:bf:95:8d:b9:
                    5d:18:a3:d0:d0:2b:23:9e:e4:98:25:ec:c3:0f:d1:
                    75:3a:4c:bd:8d:b5:36:b4:6a:4a:f7:e0:25:58:f6:
                    ca:5f:70:43:57:be:5f:af:aa:fe:60:65:83:60:ab:
                    51:27:e0:cf:79:40:53:84:2e:ea:e1:28:17:3c:b2:
                    d1:c1:1a:59:b1:39:e9:51:fb:55:76:26:90:92:71:
                    32:3b:10:24:79:d1:2e:ba:7e:50:25:af:bc:95:bd:
                    66:53:c5:4a:96:5b:92:64:cc:3a:ab:c5:d9:1d:65:
                    47:a6:bf:a4:79:56:c7:12:a0:88:33:7b:a3:1d:4c:
                    d0:d3:9c:b3:f3:34:a0:10:4f:f8:70:c4:68:cb:af:
                    8a:a0:a9:d3:d9:72:61:81:12:3f:77:30:f7:d6:e8:
                    55:0b:2a:5c:d0:26:42:55:c3:75:ad:99:d0:25:5d:
                    e8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:45:47:29:EA:8C:0E:09:00:06:DC:4B:A7:32:1E:AF:1C:87:A1:D0
            X509v3 Authority Key Identifier:
                keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d9:ec:3b:09:8b:e2:a2:09:94:99:da:50:63:b6:e1:8d:51:
         0b:75:d4:cb:17:3c:93:27:19:0a:a9:21:15:62:aa:26:29:16:
         9a:e5:25:30:23:17:33:e2:96:30:1c:50:b7:8a:1a:db:fa:1a:
         1e:63:b5:5b:9e:86:e9:82:5c:60:cd:3f:97:ba:7f:25:f3:4a:
         ba:74:a9:4b:c2:58:85:ed:ff:8a:7b:13:6a:4d:01:09:2d:6a:
         42:16:c3:89:da:db:8f:e0:16:6b:82:2f:a9:02:4f:a8:a1:04:
         74:ac:c7:34:32:98:69:f8:d2:db:2b:a0:c8:0d:8d:42:3a:3c:
         0d:70:d6:36:1a:96:c2:d5:b7:7f:f2:13:8e:a6:6d:21:2c:53:
         da:96:7c:08:71:3e:bb:37:2d:5d:16:af:b7:ad:c8:26:8a:78:
         e2:d2:67:c1:01:52:63:31:20:0e:55:a9:d9:d1:0d:09:5b:f7:
         e7:0d:fb:16:17:f5:c3:a1:9f:bf:ab:c1:9e:c9:32:a5:8c:bf:
         31:bc:ff:f7:55:71:99:47:80:19:c3:ce:81:98:fd:6b:3b:fd:
         90:48:7f:fa:7c:61:cf:39:1c:1f:ed:be:16:d9:6b:47:65:d1:
         58:36:b6:e7:37:e4:1b:e5:7d:ab:1b:77:56:fc:a9:f2:1e:97:
         f5:a5:c6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:39 2026 by rpki-client