Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
File:                     qLMQBN8TWqGouUMDPbFGkbEaY90.mft (raw, json)
Hash identifier:          DVSowaZsQMVn6FKCV2RBWSNDohqSaNHr4SRewSH8PvY=
Subject key identifier:   AD:65:AF:F7:F1:5F:8D:48:DA:E8:F0:C7:68:6E:76:EF:9C:4A:2F:71
Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
Certificate issuer:       /CN=a8b31004df135aa1a8b943033db14691b11a63dd
Certificate serial:       01A1306AE67AB36ABA73E6A6690AB726B21F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
Manifest number:          1AA6
Signing time:             Mon 12 Oct 2026 14:01:14 +0000
Manifest this update:     Mon 12 Oct 2026 14:01:14 +0000
Manifest next update:     Tue 13 Oct 2026 14:01:14 +0000
Files and hashes:         1: O7qjLnP-Av_AUI_nXwDm6aTNtiM.roa (hash: b0YiOln+6ee3N+tmIgf41n0TuffzExlmKLzTRwsvrs4=)
                          2: Ttr7foitcHqzKL5tFDo4aAXiRHs.roa (hash: l+KPWtcu5vk+NW1gY++Z3UuQD8IwIIkC3ZQ3BVE/Egc=)
                          3: mKX9BGqDk4WQ_J6ZL5Ph-ThXhs0.roa (hash: Rbsj8UMzARveBm41gVgcHiWZPkc8tCzAKZEps1XxJPs=)
                          4: qLMQBN8TWqGouUMDPbFGkbEaY90.crl (hash: CfLSGec429QBq8WmGsrgdwzG7YxkEhSdOhmWT3mGWZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:6a:e6:7a:b3:6a:ba:73:e6:a6:69:0a:b7:26:b2:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd
        Validity
            Not Before: Oct 12 14:01:14 2026 GMT
            Not After : Oct 13 14:01:14 2026 GMT
        Subject: CN=ad65aff7f15f8d48dae8f0c7686e76ef9c4a2f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:1d:c6:67:a3:4b:18:0a:bd:cf:d7:8d:47:
                    6b:00:5e:9d:f2:30:70:35:57:f5:79:32:32:55:c6:
                    cc:bc:b5:5f:f7:ed:a1:31:b2:3a:e3:71:ef:16:ba:
                    b3:fc:15:90:9d:ac:f0:13:2f:ab:07:97:74:35:e8:
                    00:8b:ab:a8:44:26:a7:a4:8a:6e:3b:3b:26:d9:5d:
                    ad:03:2e:5a:da:a4:9b:97:49:56:cc:15:30:ca:6a:
                    d1:e3:27:0b:5f:05:98:8a:55:f4:44:a3:08:07:63:
                    74:92:6b:d9:86:30:56:45:e7:f1:6f:a3:5b:26:63:
                    1f:89:27:c8:56:ef:e3:7a:a4:60:0e:0f:b9:1a:b4:
                    b4:17:f4:63:52:6d:3f:97:14:54:a5:88:39:7f:27:
                    ae:38:78:44:47:19:11:20:f3:5f:07:fa:59:15:b2:
                    26:7b:5f:5a:a0:f3:49:b9:96:df:a0:d5:0a:47:26:
                    cd:30:71:1d:83:19:13:ba:32:43:47:5a:8a:d0:f4:
                    51:0a:d8:6a:75:a3:3f:8c:35:b8:7d:3c:5a:07:15:
                    2d:28:51:a6:dc:e1:3a:29:f5:77:12:37:91:92:31:
                    32:87:63:f0:cc:89:79:dc:f2:b1:ee:cf:0d:4d:78:
                    64:65:f1:10:14:a9:f7:c3:44:c2:fd:89:64:be:a9:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:65:AF:F7:F1:5F:8D:48:DA:E8:F0:C7:68:6E:76:EF:9C:4A:2F:71
            X509v3 Authority Key Identifier:
                keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f2:79:d0:04:c6:19:0e:e4:7f:2f:7d:66:8f:a8:24:8d:c4:
         21:1c:7c:dd:b4:df:9f:ce:89:1c:e2:da:0e:b0:af:8f:0a:64:
         b8:d5:28:b1:1d:41:05:85:a1:8b:48:9e:5b:c9:ea:56:c2:ac:
         af:5f:7c:e3:a3:0b:5f:55:36:ad:8b:47:b5:27:17:d3:d7:86:
         d1:82:8f:c9:eb:28:d8:91:83:3c:1b:5e:69:47:97:30:d8:cf:
         e3:ff:d2:ec:60:ea:bd:11:68:66:19:8a:7a:54:da:ed:3b:90:
         ac:9e:0c:a3:c3:f9:51:d9:0b:8b:f2:5c:5c:52:67:8d:ac:00:
         80:61:4e:58:17:4c:73:4f:44:a9:fc:4c:cd:75:b4:03:72:c7:
         e5:53:83:b3:95:7c:ad:c9:ec:fb:dd:9a:f7:f8:ec:ec:0a:99:
         69:a3:bf:2e:19:e0:e5:c9:b5:d0:17:fb:ee:0b:32:0d:7f:c6:
         4d:02:5d:e8:c3:4e:84:d0:09:95:46:b0:65:93:ac:44:00:f2:
         61:b7:0b:e6:a2:d8:be:f4:39:28:b2:64:46:97:4e:52:59:21:
         0a:9e:7b:e7:6d:61:8a:c5:e8:1f:78:46:cb:b9:d7:4d:db:06:
         9c:31:6b:f8:cf:12:5d:85:4f:b4:ec:ec:71:05:e6:f9:8e:69:
         84:cf:bc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:02:26 2026 by rpki-client