Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File:                     QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier:          mc7esHEVtwFidMecNcOEG+C6GWW+3GsY3ZGzvEGdVhk=
Subject key identifier:   E9:AC:FA:1B:47:72:3C:C9:90:BF:82:66:88:30:1D:26:B2:F5:D1:DB
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer:       /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial:       019EC25C8604FFBA9CD483CDA0C6341DD859
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number:          05B8
Signing time:             Sat 13 Jun 2026 19:01:43 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:43 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:43 +0000
Files and hashes:         1: 2XIrFY7sSUmf0ZXtm7NFV38W-DM.roa (hash: VPm4JxETY4pUG2qbLQfLY9WMJOpVuE0GwkXWlkKqHlA=)
                          2: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: Qgggm0nPq7WOjpxWEjrlNtvJos+Sf38vWOWek4NUTeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:86:04:ff:ba:9c:d4:83:cd:a0:c6:34:1d:d8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
        Validity
            Not Before: Jun 13 19:01:43 2026 GMT
            Not After : Jun 14 19:01:43 2026 GMT
        Subject: CN=e9acfa1b47723cc990bf826688301d26b2f5d1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b5:74:7a:b8:be:20:c5:ea:40:78:cf:5d:5f:
                    c7:f7:74:76:46:84:f8:4b:69:e6:74:d6:bc:52:be:
                    c3:82:7d:75:fd:35:1b:17:88:cb:1f:6a:6a:68:b7:
                    8c:ec:ba:d8:97:60:91:38:12:f8:d6:cb:d9:1b:d6:
                    17:b2:8a:cd:05:47:33:7c:ad:dd:8a:ae:73:fc:c8:
                    e7:41:2c:8f:e4:fd:9c:06:ed:27:b1:04:78:cc:43:
                    f4:37:35:64:b8:34:4d:06:5e:dc:e2:29:20:f8:ec:
                    4a:dc:f5:09:43:1e:da:ba:24:69:b1:06:f1:79:d2:
                    bd:19:42:76:fc:44:22:32:cd:54:21:ea:d9:13:16:
                    5a:5e:71:19:9d:d9:bc:ad:a5:da:ad:cb:b4:2b:c6:
                    1b:fe:56:db:2a:a8:a8:55:2c:b6:12:11:65:a7:33:
                    44:f9:7c:ac:af:39:5e:1c:f8:0c:17:8c:98:76:7c:
                    1b:88:e7:8d:cd:c9:81:da:5d:1b:e0:fe:0e:e5:4e:
                    cf:c6:34:95:be:a5:5f:2f:d1:ca:57:fb:53:d0:63:
                    53:4c:b9:39:ea:c4:c4:4f:b0:12:ae:b4:a8:fb:3f:
                    e4:6e:07:72:1d:19:54:9a:5d:02:bb:32:a8:41:ea:
                    0e:35:6b:0c:0d:53:ea:b4:15:b5:88:5c:6c:87:fd:
                    3f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AC:FA:1B:47:72:3C:C9:90:BF:82:66:88:30:1D:26:B2:F5:D1:DB
            X509v3 Authority Key Identifier:
                keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:33:e2:ed:44:59:16:2e:e0:79:01:05:f5:ce:ed:f0:0e:f8:
         72:b4:7e:79:bd:37:30:c9:83:f9:b0:5e:71:2b:b9:cb:24:c4:
         5b:60:58:de:78:4c:43:c8:2b:09:73:58:ab:9f:04:2e:fd:74:
         cf:88:10:f5:58:1f:15:19:dc:83:90:6d:53:db:08:8e:22:32:
         32:75:b8:4d:48:59:77:f2:40:f8:71:9b:98:8f:eb:12:9f:06:
         f4:63:af:77:0a:71:87:3c:92:93:7c:d3:9d:1e:7c:97:79:e6:
         2d:e5:4b:18:1d:50:0c:49:dc:c9:32:c0:09:82:a6:c5:58:0d:
         8e:d7:9d:eb:fd:af:64:83:08:0d:d3:e5:df:f8:6a:b6:f7:d5:
         40:23:67:ef:2a:18:5e:1f:7a:62:37:69:4c:83:91:59:59:a1:
         4f:bf:3f:e9:0f:ba:1e:4e:19:f2:e5:db:fb:26:ec:00:db:ac:
         8e:a8:53:96:63:bf:70:45:d6:c6:ed:ba:1a:12:b4:89:f6:23:
         5d:0c:97:0a:29:6f:41:48:af:84:cf:05:c6:2a:d0:5a:1a:49:
         f3:a0:47:87:6e:64:18:d3:23:e6:a4:f0:78:a8:aa:6a:0e:a8:
         3d:6b:f2:75:b5:64:12:60:07:b4:bd:40:47:af:3a:df:cc:22:
         1c:c3:c7:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CXIYE/7qc1IPNoMY0HdhZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMGNjM2YzNGJmZDQzYWM1Y2RmNjEwMzdiM2QxNmM5Njdk
NzMyMzcwHhcNMjYwNjEzMTkwMTQzWhcNMjYwNjE0MTkwMTQzWjAzMTEwLwYDVQQD
EyhlOWFjZmExYjQ3NzIzY2M5OTBiZjgyNjY4ODMwMWQyNmIyZjVkMWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbV0eri+IMXqQHjPXV/H93R2RoT4
S2nmdNa8Ur7Dgn11/TUbF4jLH2pqaLeM7LrYl2CROBL41svZG9YXsorNBUczfK3d
iq5z/MjnQSyP5P2cBu0nsQR4zEP0NzVkuDRNBl7c4ikg+OxK3PUJQx7auiRpsQbx
edK9GUJ2/EQiMs1UIerZExZaXnEZndm8raXarcu0K8Yb/lbbKqioVSy2EhFlpzNE
+XysrzleHPgMF4yYdnwbiOeNzcmB2l0b4P4O5U7PxjSVvqVfL9HKV/tT0GNTTLk5
6sTET7ASrrSo+z/kbgdyHRlUml0CuzKoQeoONWsMDVPqtBW1iFxsh/0/OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOms+htHcjzJkL+CZogwHSay9dHbMB8GA1UdIwQY
MBaAFEIMw/NL/UOsXN9hA3s9Fsln1zI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81NmMxMTYtOWI3Yy00YTNhLTkxZjYt
NTkzZDBiYjc4YmU2LzEvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC81NmMxMTYtOWI3Yy00YTNhLTkxZjYtNTkzZDBiYjc4YmU2
LzEvUWd6RDgwdjlRNnhjMzJFRGV6MFd5V2ZYTWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDPi7URZ
Fi7geQEF9c7t8A74crR+eb03MMmD+bBecSu5yyTEW2BY3nhMQ8grCXNYq58ELv10
z4gQ9VgfFRncg5BtU9sIjiIyMnW4TUhZd/JA+HGbmI/rEp8G9GOvdwpxhzySk3zT
nR58l3nmLeVLGB1QDEncyTLACYKmxVgNjted6/2vZIMIDdPl3/hqtvfVQCNn7yoY
Xh96YjdpTIORWVmhT78/6Q+6Hk4Z8uXb+ybsANusjqhTlmO/cEXWxu26GhK0ifYj
XQyXCilvQUivhM8FxirQWhpJ86BHh25kGNMj5qTweKiqag6oPWvydbVkEmAHtL1A
R68638wiHMPH1w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:58:48 2026 by rpki-client