Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File:                     qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier:          fFZ3D0wMz/xE+aOyM5YZ9CV4FN0wabCYKVOrLoKAPGw=
Subject key identifier:   02:93:39:37:93:0C:67:79:8E:CE:B2:54:46:D7:A3:9D:5A:C3:5D:3D
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer:       /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial:       01A13DB7EA7DC564B310EB984E46E0D9E332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number:          0B30
Signing time:             Thu 15 Oct 2026 04:00:25 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:25 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:25 +0000
Files and hashes:         1: FVti0CnJBxW_ujwVe576uT5sBZY.roa (hash: wKPtK/uPr/cpuHyaQuhDbiv2SdMMAyJiY4SSf65iULo=)
                          2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: YdrbAJy8UQV72jlWFeONjHzCCBo7wu0e4yFtxQG0xS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b7:ea:7d:c5:64:b3:10:eb:98:4e:46:e0:d9:e3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
        Validity
            Not Before: Oct 15 04:00:25 2026 GMT
            Not After : Oct 16 04:00:25 2026 GMT
        Subject: CN=02933937930c67798eceb25446d7a39d5ac35d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:54:a0:a6:3f:ba:9a:5c:e4:28:98:4f:4a:
                    4a:ba:bd:67:5c:18:79:78:98:21:c7:c8:f7:21:17:
                    16:9c:4b:ea:6c:12:91:29:2a:e5:ab:81:f9:02:e5:
                    71:f3:d1:20:d0:9f:6b:94:41:d7:91:06:f1:30:b2:
                    f8:43:94:2c:59:78:fb:10:54:d4:b0:e9:8c:7a:0e:
                    d8:23:d0:5f:c8:63:81:e1:b3:1c:6a:0a:8d:ce:10:
                    54:d8:3a:af:f7:16:ba:0e:90:bc:ba:ec:59:35:32:
                    ce:06:6f:d1:8d:ea:4e:eb:27:86:cb:7e:b8:ae:e8:
                    ef:5e:5a:51:16:f5:03:58:e0:9c:10:8c:4d:89:f1:
                    e8:4c:45:f1:91:67:b6:06:58:5c:a2:6c:d1:07:09:
                    30:a6:78:05:96:67:7f:50:15:21:4e:54:25:d1:20:
                    75:fa:67:8e:4d:54:9b:26:ab:02:0e:25:22:87:d3:
                    81:6e:27:84:62:27:16:c6:aa:cc:42:91:54:0c:e7:
                    06:9c:d6:0a:27:33:4b:6c:0e:5a:c0:da:6d:67:1c:
                    44:51:06:f2:2a:cf:81:5c:31:b5:46:bd:1c:5e:d3:
                    ac:46:6e:e5:f6:06:d1:f6:7b:16:45:38:af:29:20:
                    17:6e:54:2b:ec:76:b9:28:01:8e:90:6d:fa:03:d6:
                    f9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:93:39:37:93:0C:67:79:8E:CE:B2:54:46:D7:A3:9D:5A:C3:5D:3D
            X509v3 Authority Key Identifier:
                keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:2c:e8:6c:f2:a1:2a:3a:90:d9:ff:f3:85:ae:9c:3e:26:e3:
         35:86:7d:66:a8:c4:bf:69:78:ee:82:f9:53:68:d2:24:e2:01:
         b5:cb:e1:40:21:07:4a:01:fb:ef:32:fa:35:65:a3:4c:af:ed:
         14:65:da:bc:79:f9:32:1b:f8:1e:c7:53:36:bc:0f:ed:26:6a:
         d4:0d:8c:7f:e4:64:ad:49:67:ce:5f:9c:63:d5:05:f6:16:80:
         91:e3:71:cd:a7:de:e0:29:06:9e:63:18:b9:61:72:36:14:a5:
         c5:4e:35:cd:78:f1:03:76:b2:77:7f:fb:0d:6b:70:40:81:80:
         f5:d0:40:6a:b8:fd:1b:db:c8:96:68:5b:ab:15:e0:e4:5f:5f:
         cb:56:8d:a0:86:cf:f0:7f:28:9c:f5:0f:91:13:3a:18:da:1e:
         ec:b0:47:bd:44:44:29:88:0d:84:bf:1f:e1:83:c5:24:89:2d:
         a6:f6:87:a1:13:89:f7:b3:a8:a2:22:ab:77:51:57:67:82:29:
         d3:68:f7:bc:ab:59:eb:66:76:8c:47:a6:f7:f2:f5:93:44:78:
         20:fb:af:9d:3c:e1:2a:fb:db:5a:51:1e:fa:18:c7:12:75:0d:
         c7:c8:f9:5e:d3:7d:ec:76:bd:20:24:07:c3:be:9d:fb:39:8c:
         4c:0f:e0:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9t+p9xWSzEOuYTkbg2eMyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YWJhNjNlODA2YTIxZDQ2MDM1Y2E2ZTlkMzQ1YjAzZGJj
OGU1NTMwHhcNMjYxMDE1MDQwMDI1WhcNMjYxMDE2MDQwMDI1WjAzMTEwLwYDVQQD
EygwMjkzMzkzNzkzMGM2Nzc5OGVjZWIyNTQ0NmQ3YTM5ZDVhYzM1ZDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHlUoKY/uppc5CiYT0pKur1nXBh5
eJghx8j3IRcWnEvqbBKRKSrlq4H5AuVx89Eg0J9rlEHXkQbxMLL4Q5QsWXj7EFTU
sOmMeg7YI9BfyGOB4bMcagqNzhBU2Dqv9xa6DpC8uuxZNTLOBm/RjepO6yeGy364
rujvXlpRFvUDWOCcEIxNifHoTEXxkWe2BlhcomzRBwkwpngFlmd/UBUhTlQl0SB1
+meOTVSbJqsCDiUih9OBbieEYicWxqrMQpFUDOcGnNYKJzNLbA5awNptZxxEUQby
Ks+BXDG1Rr0cXtOsRm7l9gbR9nsWRTivKSAXblQr7Ha5KAGOkG36A9b5kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKTOTeTDGd5js6yVEbXo51aw109MB8GA1UdIwQY
MBaAFKirpj6AaiHUYDXKbp00WwPbyOVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1Zjkt
ZjRhMzllMThjZmI0LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1ZjktZjRhMzllMThjZmI0
LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJizobPKh
KjqQ2f/zha6cPibjNYZ9ZqjEv2l47oL5U2jSJOIBtcvhQCEHSgH77zL6NWWjTK/t
FGXavHn5Mhv4HsdTNrwP7SZq1A2Mf+RkrUlnzl+cY9UF9haAkeNxzafe4CkGnmMY
uWFyNhSlxU41zXjxA3ayd3/7DWtwQIGA9dBAarj9G9vIlmhbqxXg5F9fy1aNoIbP
8H8onPUPkRM6GNoe7LBHvUREKYgNhL8f4YPFJIktpvaHoROJ97OooiKrd1FXZ4Ip
02j3vKtZ62Z2jEem9/L1k0R4IPuvnTzhKvvbWlEe+hjHEnUNx8j5XtN97Ha9ICQH
w76d+zmMTA/g8A==
-----END CERTIFICATE-----
Generated at Thu Oct 15 13:29:01 2026 by rpki-client