Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
File:                     qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft (raw, json)
Hash identifier:          bE0Jf17FDqobUI5UEDky54q/JNOH1y0AzHN71eWgPko=
Subject key identifier:   F4:7D:9A:58:5E:ED:B7:7E:AF:0A:83:C1:9E:B7:A3:AE:23:8C:D9:1A
Authority key identifier: A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
Certificate issuer:       /CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Certificate serial:       019E1D90AA90936345687783FF1455AAC010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
Manifest number:          0E0A
Signing time:             Tue 12 May 2026 19:01:20 +0000
Manifest this update:     Tue 12 May 2026 19:01:20 +0000
Manifest next update:     Wed 13 May 2026 19:01:20 +0000
Files and hashes:         1: gsGddDzj7ZMWFldWvISby9K5Dlg.roa (hash: bo8ZwXWO+41WjnaheexxyDc0uSwcDET97lejnD10FTk=)
                          2: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl (hash: ubTfSQLyzZ+pmMvW5CgH8cQxjd8xSv8hT1VW6zC14iQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:aa:90:93:63:45:68:77:83:ff:14:55:aa:c0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
        Validity
            Not Before: May 12 19:01:20 2026 GMT
            Not After : May 13 19:01:20 2026 GMT
        Subject: CN=f47d9a585eedb77eaf0a83c19eb7a3ae238cd91a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a9:64:10:49:25:2c:f1:bd:04:d0:d6:40:93:
                    92:41:07:f5:78:17:a1:f4:fa:74:09:47:e9:37:27:
                    65:00:50:77:10:df:19:8a:14:9c:9b:03:09:ce:11:
                    32:b0:96:b2:43:66:3d:03:01:e7:9c:2e:d9:2d:f5:
                    24:d9:8a:72:53:7b:3f:2c:95:ea:88:d0:69:5f:19:
                    5b:b5:3a:16:d8:5d:8b:23:b8:26:5a:08:86:d0:4d:
                    e5:60:42:27:30:ba:95:a0:2c:49:92:b3:bc:6d:40:
                    3a:6a:5f:06:38:a3:3f:c0:30:45:a9:5c:87:6d:b7:
                    e4:34:6e:e4:a9:62:1f:5d:bd:ef:99:d6:f2:e2:fe:
                    8a:af:b8:51:79:4a:8c:bf:5f:56:19:a6:5d:48:d6:
                    66:50:0f:28:a9:8b:0b:8a:84:c1:81:95:c5:f5:e3:
                    0b:71:89:c6:6a:6d:bb:14:da:3f:fc:b4:0a:00:bc:
                    bb:ad:68:6b:80:62:75:64:31:e3:46:03:10:5a:15:
                    00:8a:7f:0a:77:6e:30:5a:3a:4b:d8:47:8a:b3:c0:
                    aa:78:04:a6:29:ad:2a:79:97:2d:7c:af:57:bc:77:
                    c3:67:4f:95:a2:2c:97:f9:e3:b4:84:82:63:44:b7:
                    95:86:98:8d:c8:c9:43:8d:53:4a:ca:aa:0f:a3:c0:
                    8b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7D:9A:58:5E:ED:B7:7E:AF:0A:83:C1:9E:B7:A3:AE:23:8C:D9:1A
            X509v3 Authority Key Identifier:
                keyid:A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:da:0c:48:3b:98:25:83:9f:86:88:7f:86:92:67:b0:54:53:
         65:14:6e:29:ce:61:ee:2e:12:4d:cd:c9:36:91:ba:1c:13:b6:
         41:c0:89:0b:54:72:34:2c:07:be:06:b0:3a:ea:c0:b4:a2:89:
         f9:91:bc:74:de:08:d9:c6:9e:98:c6:b3:76:4e:56:e2:13:aa:
         0d:f1:82:a4:a2:ac:52:35:2a:3f:fc:e9:af:92:b3:f7:77:b3:
         33:4a:d7:df:5e:17:52:26:b3:57:a4:02:47:74:96:5d:c4:46:
         d4:a1:51:e4:45:3e:c1:23:7d:78:80:c8:40:03:ab:b5:f6:fb:
         f9:20:65:51:0e:93:a7:72:bd:94:82:cc:a6:77:4b:5d:76:f4:
         07:eb:0f:3f:23:c1:ad:1a:30:39:4a:31:98:07:57:4e:20:41:
         2a:7e:e4:5f:f0:f1:ae:2d:fd:5f:97:65:81:3d:8b:4d:5e:17:
         ce:e9:ea:11:5b:dd:66:61:42:e8:29:bc:eb:34:0c:73:7f:3e:
         2f:b8:4f:3e:c5:37:06:44:31:af:19:e5:30:0f:e1:f5:26:2c:
         15:66:5f:5a:aa:f8:5d:05:ca:9f:f9:9f:9e:a8:03:27:39:26:
         85:c2:9a:ea:a1:d3:b6:8f:e4:ee:53:29:3e:13:cb:ed:15:99:
         34:ba:ed:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkKqQk2NFaHeD/xRVqsAQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Yjc5MjQzZmRiZjdiMzY1YzFkYmMyM2M5MGE4YmNjYjNj
Mzk3NTEwHhcNMjYwNTEyMTkwMTIwWhcNMjYwNTEzMTkwMTIwWjAzMTEwLwYDVQQD
EyhmNDdkOWE1ODVlZWRiNzdlYWYwYTgzYzE5ZWI3YTNhZTIzOGNkOTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqlkEEklLPG9BNDWQJOSQQf1eBeh
9Pp0CUfpNydlAFB3EN8ZihScmwMJzhEysJayQ2Y9AwHnnC7ZLfUk2YpyU3s/LJXq
iNBpXxlbtToW2F2LI7gmWgiG0E3lYEInMLqVoCxJkrO8bUA6al8GOKM/wDBFqVyH
bbfkNG7kqWIfXb3vmdby4v6Kr7hReUqMv19WGaZdSNZmUA8oqYsLioTBgZXF9eML
cYnGam27FNo//LQKALy7rWhrgGJ1ZDHjRgMQWhUAin8Kd24wWjpL2EeKs8CqeASm
Ka0qeZctfK9XvHfDZ0+VoiyX+eO0hIJjRLeVhpiNyMlDjVNKyqoPo8CLEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPR9mlhe7bd+rwqDwZ63o64jjNkaMB8GA1UdIwQY
MBaAFKm3kkP9v3s2XB28I8kKi8yzw5dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWJlU1FfMl9lelpjSGJ3anlRcUx6TFBEbDFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82YTY4NDItY2IzZi00ZmIxLTkwNjkt
Nzg2MTFlYzk0YjQ0LzEvcWJlU1FfMl9lelpjSGJ3anlRcUx6TFBEbDFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82YTY4NDItY2IzZi00ZmIxLTkwNjktNzg2MTFlYzk0YjQ0
LzEvcWJlU1FfMl9lelpjSGJ3anlRcUx6TFBEbDFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq9oMSDuY
JYOfhoh/hpJnsFRTZRRuKc5h7i4STc3JNpG6HBO2QcCJC1RyNCwHvgawOurAtKKJ
+ZG8dN4I2caemMazdk5W4hOqDfGCpKKsUjUqP/zpr5Kz93ezM0rX314XUiazV6QC
R3SWXcRG1KFR5EU+wSN9eIDIQAOrtfb7+SBlUQ6Tp3K9lILMpndLXXb0B+sPPyPB
rRowOUoxmAdXTiBBKn7kX/Dxri39X5dlgT2LTV4XzunqEVvdZmFC6Cm86zQMc38+
L7hPPsU3BkQxrxnlMA/h9SYsFWZfWqr4XQXKn/mfnqgDJzkmhcKa6qHTto/k7lMp
PhPL7RWZNLrt3g==
-----END CERTIFICATE-----
Generated at Wed May 13 06:14:19 2026 by rpki-client