Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File:                     QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier:          e3hL2jdN8LR2sjwfSRrhTgHSd3Qvhnkc5p4aCFY78Xw=
Subject key identifier:   6B:1D:DA:0B:08:04:88:40:05:36:32:F1:DD:44:8E:72:BD:6C:51:02
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer:       /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial:       01A0C28DC8DA804B884FF76E2D41AB5618F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number:          0EF7
Signing time:             Mon 21 Sep 2026 06:01:06 +0000
Manifest this update:     Mon 21 Sep 2026 06:01:06 +0000
Manifest next update:     Tue 22 Sep 2026 06:01:06 +0000
Files and hashes:         1: O8zrLW8AWIVEs9iiDW4s5TO_x9A.roa (hash: x7HRiC6WoAyrY0ICRLQbw3hJY8kiQ6r/ahn5rm3lXqw=)
                          2: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: 2Vqn9AmNlelCHeJmkXfGwZ5lZPw28zYt4mDIag4nDSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8d:c8:da:80:4b:88:4f:f7:6e:2d:41:ab:56:18:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
        Validity
            Not Before: Sep 21 06:01:06 2026 GMT
            Not After : Sep 22 06:01:06 2026 GMT
        Subject: CN=6b1dda0b08048840053632f1dd448e72bd6c5102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:de:6f:42:88:b3:aa:3c:bb:8e:09:9a:76:a2:
                    dc:21:49:71:92:c8:25:9c:75:cf:d0:be:21:c5:cd:
                    a0:3d:04:8a:5f:10:06:12:0b:02:27:6f:5c:6d:ee:
                    5b:6f:5f:85:89:b7:58:bf:f1:4d:06:1d:d4:80:6d:
                    f5:e4:f5:c9:4b:89:ae:9d:01:9c:26:7d:30:c0:50:
                    de:87:e0:c0:bc:68:dd:50:6e:cc:85:0f:9f:fd:fb:
                    d4:8d:46:4b:ba:58:2d:44:5e:37:36:95:33:3d:80:
                    b5:5f:e2:7b:bf:6b:4c:8c:36:65:bb:ab:0d:84:b2:
                    22:9d:a8:b8:b8:8e:93:50:da:11:9f:c8:7b:55:63:
                    14:39:bb:48:57:6d:35:ba:e8:de:d8:c6:ac:e6:89:
                    a2:93:8d:83:8a:03:10:f1:10:e0:b8:99:5f:52:da:
                    31:08:57:d8:05:f2:96:79:33:bc:38:0c:83:6c:cb:
                    e8:1a:2f:09:15:84:84:77:38:db:25:1b:ea:ee:5f:
                    32:c5:f3:aa:14:ed:f1:1b:86:ed:28:a6:42:b3:59:
                    57:97:5f:88:24:35:b7:4a:8e:fd:79:63:5c:1f:a3:
                    b9:90:58:99:80:4f:5b:24:26:74:60:23:ca:63:d0:
                    a0:3d:95:80:89:67:ca:bc:e3:78:fb:7a:06:90:3c:
                    6e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1D:DA:0B:08:04:88:40:05:36:32:F1:DD:44:8E:72:BD:6C:51:02
            X509v3 Authority Key Identifier:
                keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:12:49:c1:31:ec:54:e5:50:1c:c6:15:82:2b:8a:cb:df:5a:
         c9:ba:31:06:1d:c3:b3:74:cd:b6:6e:b1:a1:86:4c:5e:4f:b6:
         80:d6:af:a6:42:a6:43:18:c3:c4:b8:66:52:bf:62:a5:80:4f:
         52:50:21:18:33:9d:77:6b:a1:1e:ee:70:4d:64:4c:a7:47:f4:
         e3:62:7b:00:f1:a3:38:b4:5b:4e:cf:c0:7d:04:de:1e:56:56:
         a7:16:a7:5c:69:c4:d2:1b:32:91:31:b2:80:a1:12:c9:51:80:
         c5:e1:db:9c:2e:e0:ee:cb:5f:21:c7:a7:d9:cc:5d:38:83:05:
         d1:a5:17:9a:b0:6f:dc:f0:8a:5e:9f:75:62:8b:00:63:68:bf:
         b8:d6:ad:3f:bd:ca:eb:11:ed:54:11:87:7c:55:62:83:7e:2a:
         91:9a:19:1c:af:14:09:ef:9e:ae:5b:17:4f:d2:99:28:cd:5a:
         0b:a4:05:7f:be:23:77:db:0a:21:db:3c:03:5c:b9:90:ea:17:
         b9:30:21:52:05:32:8c:eb:4e:7a:b5:dc:ad:1f:2f:04:79:84:
         5a:6c:35:3c:be:b0:de:c1:0c:9f:34:8c:a0:ec:0e:b1:19:d2:
         38:c4:31:00:a7:0d:c2:6e:5d:30:45:61:ad:da:01:65:4b:1d:
         b2:ed:e8:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCjcjagEuIT/duLUGrVhjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjY3ZjVhNmNmNDliYzQzZjIzMDRkZTAwZjc3MDVlYzVi
NzlmY2EwHhcNMjYwOTIxMDYwMTA2WhcNMjYwOTIyMDYwMTA2WjAzMTEwLwYDVQQD
Eyg2YjFkZGEwYjA4MDQ4ODQwMDUzNjMyZjFkZDQ0OGU3MmJkNmM1MTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d5vQoizqjy7jgmadqLcIUlxksgl
nHXP0L4hxc2gPQSKXxAGEgsCJ29cbe5bb1+FibdYv/FNBh3UgG315PXJS4munQGc
Jn0wwFDeh+DAvGjdUG7MhQ+f/fvUjUZLulgtRF43NpUzPYC1X+J7v2tMjDZlu6sN
hLIinai4uI6TUNoRn8h7VWMUObtIV201uuje2Mas5omik42DigMQ8RDguJlfUtox
CFfYBfKWeTO8OAyDbMvoGi8JFYSEdzjbJRvq7l8yxfOqFO3xG4btKKZCs1lXl1+I
JDW3So79eWNcH6O5kFiZgE9bJCZ0YCPKY9CgPZWAiWfKvON4+3oGkDxu4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsd2gsIBIhABTYy8d1EjnK9bFECMB8GA1UdIwQY
MBaAFEImf1ps9JvEPyME3gD3cF7Ft5/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYt
YjIyNjk1YzcwM2E5LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYtYjIyNjk1YzcwM2E5
LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhJJwTHs
VOVQHMYVgiuKy99ayboxBh3Ds3TNtm6xoYZMXk+2gNavpkKmQxjDxLhmUr9ipYBP
UlAhGDOdd2uhHu5wTWRMp0f042J7APGjOLRbTs/AfQTeHlZWpxanXGnE0hsykTGy
gKESyVGAxeHbnC7g7stfIcen2cxdOIMF0aUXmrBv3PCKXp91YosAY2i/uNatP73K
6xHtVBGHfFVig34qkZoZHK8UCe+erlsXT9KZKM1aC6QFf74jd9sKIds8A1y5kOoX
uTAhUgUyjOtOerXcrR8vBHmEWmw1PL6w3sEMnzSMoOwOsRnSOMQxAKcNwm5dMEVh
rdoBZUsdsu3oRw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:12:38 2026 by rpki-client