Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File:                     NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier:          PCzREbWM0UJHJoFOuGvRzaYQgiHbNlyc4bpR5zcTye4=
Subject key identifier:   69:0B:E5:92:7C:28:0C:D4:CE:BB:B3:FE:EB:E7:A0:A7:11:F3:8B:84
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer:       /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial:       01A0DF857847C3327EE41CD0D039B0AB5308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number:          193C
Signing time:             Sat 26 Sep 2026 21:01:01 +0000
Manifest this update:     Sat 26 Sep 2026 21:01:01 +0000
Manifest next update:     Sun 27 Sep 2026 21:01:01 +0000
Files and hashes:         1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: fQ+KuiXz2cw0iiVZOcxoZcrJul5DjJj2Oz5RiJyzyFA=)
                          2: cl6lci4JzB4m70ik3dAlKuTRGek.roa (hash: UR1yaGuf+Gktwnz/SkjvRQshLYqjDpB+pPtn2/1jM2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:85:78:47:c3:32:7e:e4:1c:d0:d0:39:b0:ab:53:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
        Validity
            Not Before: Sep 26 21:01:01 2026 GMT
            Not After : Sep 27 21:01:01 2026 GMT
        Subject: CN=690be5927c280cd4cebbb3feebe7a0a711f38b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d6:63:b2:f0:69:f7:6c:47:1f:54:10:21:61:
                    83:56:39:37:b2:6c:4b:f2:03:9f:c9:a3:45:65:bd:
                    b6:62:b8:e6:d7:0b:ac:82:9e:77:d1:62:8e:71:28:
                    b8:79:07:b5:3f:b4:32:dd:e6:dc:68:bc:f2:b4:a4:
                    ac:82:93:b8:07:56:25:40:c2:d9:40:4c:c9:5f:d2:
                    bc:af:4b:22:b2:fd:b9:4d:a8:32:1b:f2:da:c5:24:
                    78:b2:d3:a1:1b:7d:ed:76:88:b4:dc:55:a1:35:8d:
                    a2:b1:a8:b8:0a:1a:05:f7:9d:bd:7c:2d:23:84:94:
                    80:b8:54:da:bf:e2:0d:8c:e3:42:7e:90:68:cb:f3:
                    22:e1:7c:71:8e:dd:72:2f:73:bc:74:8a:53:bd:c8:
                    06:48:88:0d:3d:ac:63:2a:70:f1:37:b5:76:6c:68:
                    dd:88:c1:43:30:28:dd:c2:39:4c:31:4d:5a:bb:52:
                    03:37:6e:39:44:18:b7:3f:9a:8b:8e:2c:9b:e5:3d:
                    c8:a3:09:87:bf:49:71:95:9a:61:c2:a6:d1:30:19:
                    dc:c7:4e:ce:5f:78:34:e1:de:80:f0:79:d4:3d:33:
                    44:6b:67:00:2b:80:6c:5f:99:40:e9:62:66:04:f6:
                    6f:8c:d7:a9:65:5a:d4:9d:46:f1:20:0f:cd:54:57:
                    36:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0B:E5:92:7C:28:0C:D4:CE:BB:B3:FE:EB:E7:A0:A7:11:F3:8B:84
            X509v3 Authority Key Identifier:
                keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:9e:80:b3:00:a9:64:e0:17:5a:0c:56:0e:91:1d:bf:df:bb:
         8c:d9:7c:74:12:0b:29:7f:1e:10:df:e6:f9:0b:c3:de:13:dc:
         41:c2:a9:94:d0:5e:87:63:bc:67:08:08:3e:a4:7c:7b:8a:d1:
         d1:a8:ad:96:89:85:17:80:7c:c5:2e:a3:f4:37:a4:63:21:1a:
         4d:d0:1c:d8:b8:2c:bb:22:20:7c:ec:1f:29:b4:35:5f:dc:da:
         bd:85:4a:cc:e0:d6:29:88:82:e1:85:cd:ef:5a:af:75:2d:c8:
         7d:89:0a:bd:76:1e:af:c2:ab:24:f4:dd:2c:8b:2f:d2:43:d0:
         80:e5:d6:d3:d6:b0:de:f0:0d:aa:a3:1b:f8:f7:84:97:f6:8e:
         7c:73:3c:4a:5f:ce:1e:45:8c:41:ee:56:18:39:28:9e:ac:a3:
         9f:6d:2a:ba:4b:d0:4a:d4:66:e8:9a:3a:11:a7:ec:ef:bc:1b:
         f2:ea:55:b8:bd:0b:ac:1d:f9:1e:e9:f1:2f:0d:ad:16:84:45:
         b6:48:26:a1:d4:50:ec:cb:89:9e:10:40:6d:ba:03:17:3b:c4:
         bd:b1:d7:71:ee:2f:3d:6d:c2:39:62:c4:6a:ca:18:a7:ca:25:
         c8:f9:b3:b4:54:97:1f:20:a1:ec:4d:96:9d:77:e2:35:2f:a0:
         e8:3f:12:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfhXhHwzJ+5BzQ0Dmwq1MIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MDA0NWY3ZDgzY2ViMTMwZDhkNjk1ZmZlN2Q0M2RiMzgx
OWRlNTUwHhcNMjYwOTI2MjEwMTAxWhcNMjYwOTI3MjEwMTAxWjAzMTEwLwYDVQQD
Eyg2OTBiZTU5MjdjMjgwY2Q0Y2ViYmIzZmVlYmU3YTBhNzExZjM4Yjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNZjsvBp92xHH1QQIWGDVjk3smxL
8gOfyaNFZb22Yrjm1wusgp530WKOcSi4eQe1P7Qy3ebcaLzytKSsgpO4B1YlQMLZ
QEzJX9K8r0sisv25TagyG/LaxSR4stOhG33tdoi03FWhNY2isai4ChoF9529fC0j
hJSAuFTav+INjONCfpBoy/Mi4Xxxjt1yL3O8dIpTvcgGSIgNPaxjKnDxN7V2bGjd
iMFDMCjdwjlMMU1au1IDN245RBi3P5qLjiyb5T3IowmHv0lxlZphwqbRMBncx07O
X3g04d6A8HnUPTNEa2cAK4BsX5lA6WJmBPZvjNepZVrUnUbxIA/NVFc2pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkL5ZJ8KAzUzruz/uvnoKcR84uEMB8GA1UdIwQY
MBaAFDUARffYPOsTDY1pX/59Q9s4Gd5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81MDQzZmItY2NhYy00ZmI2LTg2OWQt
NDhlMzBlMmY3YzM2LzEvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81MDQzZmItY2NhYy00ZmI2LTg2OWQtNDhlMzBlMmY3YzM2
LzEvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZ6AswCp
ZOAXWgxWDpEdv9+7jNl8dBILKX8eEN/m+QvD3hPcQcKplNBeh2O8ZwgIPqR8e4rR
0aitlomFF4B8xS6j9DekYyEaTdAc2LgsuyIgfOwfKbQ1X9zavYVKzODWKYiC4YXN
71qvdS3IfYkKvXYer8KrJPTdLIsv0kPQgOXW09aw3vANqqMb+PeEl/aOfHM8Sl/O
HkWMQe5WGDkonqyjn20qukvQStRm6Jo6Eafs77wb8upVuL0LrB35HunxLw2tFoRF
tkgmodRQ7MuJnhBAbboDFzvEvbHXce4vPW3COWLEasoYp8olyPmztFSXHyCh7E2W
nXfiNS+g6D8S3A==
-----END CERTIFICATE-----
Generated at Sun Sep 27 07:20:55 2026 by rpki-client