Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
File:                     QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft (raw, json)
Hash identifier:          bjy5+EMZdX/+OjQc+Ks3RkyyGHvPDlONM3A1mRZdfMM=
Subject key identifier:   EE:4E:06:78:FE:9B:B0:5E:54:B0:75:31:9D:6E:98:6D:E7:62:85:6E
Authority key identifier: 41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
Certificate issuer:       /CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Certificate serial:       019CAD5A37B508265FE95E98C4FAEA648DC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
Manifest number:          0E56
Signing time:             Mon 02 Mar 2026 07:01:36 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:36 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:36 +0000
Files and hashes:         1: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl (hash: wPUjIkUvVhjviMOjQRTu1a9jnIkBqw1UffKcK1ND7+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:37:b5:08:26:5f:e9:5e:98:c4:fa:ea:64:8d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41165204cfe47073cc86d6de43c41d8817e2e42e
        Validity
            Not Before: Mar  2 07:01:36 2026 GMT
            Not After : Mar  3 07:01:36 2026 GMT
        Subject: CN=ee4e0678fe9bb05e54b075319d6e986de762856e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:83:be:de:75:52:a9:b1:5d:79:4a:e7:88:50:
                    0c:a6:31:2a:ac:dc:eb:67:55:ce:36:d7:b4:5e:27:
                    be:bc:bf:ef:90:92:0d:a9:9c:a6:0f:6f:e9:36:27:
                    f1:48:ca:0e:f1:45:5c:04:99:5c:0c:12:60:dc:6e:
                    55:ca:d1:3a:87:b3:48:e9:44:e3:28:ea:a0:a8:7a:
                    96:f2:ac:1d:74:1d:62:90:23:c7:e5:f9:17:dd:c2:
                    dd:0e:96:47:d4:5d:5d:42:d2:80:af:c7:74:7b:2c:
                    24:ae:13:86:ad:e9:77:bd:01:3b:0c:cf:66:20:ed:
                    39:19:5e:2a:19:bc:5f:48:84:96:cc:55:0b:84:11:
                    a6:81:dc:ee:09:42:11:58:8d:da:37:1b:bc:b5:c1:
                    b1:6a:0e:62:7f:93:04:74:d7:9d:5e:c3:00:bc:df:
                    d7:69:54:51:99:08:3d:01:af:36:41:c2:e4:a0:7d:
                    28:4b:33:a2:d5:68:a7:db:8f:d4:dc:13:82:b4:8a:
                    10:b8:17:c8:7b:49:b7:d6:74:e8:e2:6f:5a:8e:63:
                    26:fb:a0:2a:76:b3:6b:8f:b3:eb:84:99:3d:90:8a:
                    20:3b:b8:e6:83:7f:f3:4e:ab:e1:35:b6:5a:40:42:
                    e0:6f:62:d8:eb:90:a9:1c:b4:07:82:0f:d8:95:81:
                    c9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4E:06:78:FE:9B:B0:5E:54:B0:75:31:9D:6E:98:6D:E7:62:85:6E
            X509v3 Authority Key Identifier:
                keyid:41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:7b:f6:9f:d1:79:b3:c3:e0:ca:4b:dd:9b:09:aa:00:b7:7a:
         21:01:3b:6d:cf:a1:c4:e8:03:53:98:28:27:28:41:87:28:f5:
         32:c2:bc:e8:a4:29:47:81:f4:52:1c:39:6b:ab:4a:46:b8:5a:
         f5:05:0e:6b:8b:2e:6a:d3:44:28:d3:31:54:76:70:12:96:27:
         e7:37:24:95:d3:70:cd:46:f0:e4:c7:14:0c:a5:fe:43:ed:89:
         56:da:65:9d:85:b5:4c:97:71:a5:7a:57:3b:c9:81:63:55:af:
         96:c5:2a:75:bf:81:7b:87:f9:0b:fc:32:8f:b0:11:e5:80:9b:
         18:ba:72:9a:09:95:31:8d:14:61:86:35:6f:fc:ed:e9:4d:10:
         81:c9:02:fc:68:8e:d9:89:df:49:dd:d7:ba:86:60:ab:6f:f4:
         54:06:ed:41:df:db:51:11:8e:a2:88:0f:b9:ad:50:f3:87:fd:
         aa:a9:91:91:08:d4:a1:17:69:51:20:7c:90:42:72:9e:3e:28:
         44:cf:9b:9e:c0:86:3e:c9:73:c8:8f:c0:31:ea:15:35:73:c1:
         0a:22:21:78:3a:90:96:76:8b:18:e7:1a:8c:bc:8f:b4:79:e3:
         af:d3:8a:69:00:47:ff:58:3c:c8:b9:25:89:78:d6:1b:8b:b1:
         77:34:ac:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:28 2026 by rpki-client