Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File:                     QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier:          y7QDaRG4AUBgRB/p5z12ga1ERPmMmjREEhsexSvSekU=
Subject key identifier:   F2:00:D6:F1:87:AF:97:47:E8:30:38:81:41:1B:83:2F:0B:02:5C:CF
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer:       /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial:       019FA899509C37C32A4132BD1EDD21270156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number:          0E65
Signing time:             Tue 28 Jul 2026 12:00:47 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:47 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:47 +0000
Files and hashes:         1: O8zrLW8AWIVEs9iiDW4s5TO_x9A.roa (hash: x7HRiC6WoAyrY0ICRLQbw3hJY8kiQ6r/ahn5rm3lXqw=)
                          2: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: XFr2OXnXV9kL6hxs2Co/jT9GCYxEDw2QSj4FI80J+KI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:50:9c:37:c3:2a:41:32:bd:1e:dd:21:27:01:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
        Validity
            Not Before: Jul 28 12:00:47 2026 GMT
            Not After : Jul 29 12:00:47 2026 GMT
        Subject: CN=f200d6f187af9747e8303881411b832f0b025ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:f8:79:99:b6:14:cf:d9:4d:f5:9a:a4:ed:
                    05:c1:21:85:7b:3e:39:d6:9c:12:c8:1b:11:ff:d7:
                    01:45:02:0f:40:04:eb:3b:44:05:de:fd:c1:0e:db:
                    78:39:ff:18:54:b7:98:1a:a3:c7:a8:5c:62:08:d8:
                    ed:de:80:ed:be:5d:ba:b2:b5:fb:11:32:4b:6a:cf:
                    3a:71:06:4f:c0:e0:f9:c0:ee:7c:02:1d:8b:f3:72:
                    b9:6b:51:4d:37:30:0b:f5:04:7b:f8:6f:22:d7:20:
                    d7:59:44:8b:f1:24:1b:65:44:d6:4c:37:ca:92:06:
                    f4:79:82:a8:44:98:c1:b1:77:34:8b:ae:9d:b5:20:
                    45:83:c9:ea:72:69:45:05:aa:e3:cf:22:cb:53:1e:
                    fb:bd:0c:09:d9:70:f2:9b:1f:8d:1c:36:fe:44:59:
                    bd:1d:3c:38:43:c3:af:a6:9c:c6:e4:b6:83:bf:8b:
                    d2:69:b7:ec:7b:53:cb:1f:bd:b8:4c:ce:30:6c:20:
                    5a:8d:dc:c4:29:cc:a4:ff:d8:d9:48:d6:5f:10:cf:
                    65:28:ea:c6:31:70:b8:3c:b3:ae:0a:3c:6f:e4:8b:
                    3b:11:2d:ad:9a:77:6e:c3:5f:8d:9c:ac:5f:67:d4:
                    63:2a:90:66:82:ca:4a:6f:22:a5:a2:65:3b:4f:ce:
                    b6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:00:D6:F1:87:AF:97:47:E8:30:38:81:41:1B:83:2F:0B:02:5C:CF
            X509v3 Authority Key Identifier:
                keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f1:b9:e2:72:a8:65:2d:64:42:bf:58:4c:b0:cb:90:47:ff:
         54:d2:fb:17:3b:7f:80:42:8a:1e:e0:dd:65:50:02:89:b5:4c:
         16:56:c1:9b:93:ff:6f:ba:47:23:17:4d:cd:c4:d9:72:cd:a1:
         0b:d3:47:8c:6b:15:f0:d8:9c:28:0b:a5:b1:39:cf:7f:30:ce:
         80:7d:b3:23:a1:96:12:9e:aa:48:64:9b:8f:07:19:54:72:e9:
         b9:8e:81:5c:0e:a9:91:76:e2:c0:09:f9:5b:76:2b:e7:a5:03:
         8c:f2:45:b5:e4:07:f6:d6:a5:be:1b:01:8a:61:33:e6:bb:a9:
         a2:ea:10:e8:ef:56:3b:20:25:d2:0a:0c:de:0a:cd:44:8a:fd:
         85:c6:1f:ce:30:0d:0d:33:8b:d5:6c:19:97:60:3c:a3:e3:fd:
         5f:11:c6:25:a4:fa:50:a4:ed:d6:8e:31:3a:b2:37:a4:a9:87:
         24:24:4e:d0:4f:cf:8f:db:84:67:e7:14:4f:8e:89:ad:5a:c6:
         83:ff:89:70:60:df:90:83:9c:56:3a:1f:18:3a:75:ca:d1:53:
         b7:6f:25:4d:29:ae:cf:73:8e:eb:b2:18:79:a6:cc:84:b6:eb:
         df:8e:a6:c1:2c:98:32:ee:7a:50:f8:00:44:29:77:2a:6b:a3:
         17:81:fe:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:20 2026 by rpki-client