Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
File:                     qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft (raw, json)
Hash identifier:          eZkVUIRdM19WR0k9mhs7K1RIpMYOUVIVQClu7HEJk94=
Subject key identifier:   A6:3B:E1:1F:24:75:26:A5:E5:A9:D1:76:F8:D3:F5:AE:2B:77:4F:75
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Certificate issuer:       /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial:       01A0E777C8015705CA45B501531C316610E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
Manifest number:          17C5
Signing time:             Mon 28 Sep 2026 10:03:01 +0000
Manifest this update:     Mon 28 Sep 2026 10:03:01 +0000
Manifest next update:     Tue 29 Sep 2026 10:03:01 +0000
Files and hashes:         1: SbmHVzvJLZyr_oPkt5P1usWrh6Q.roa (hash: +6pflE25NuOpLZJ9n8zoa9cmzK6oT49Q5ARbBS4vrXQ=)
                          2: qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl (hash: Piyjkm+zZYNPZTJguhkcrBdLTLfiTBiIHT+4i/YbHR4=)
                          3: y1xvK7lHBhE4mJfORtJta3k7QLw.roa (hash: ifW/r0S+8T3HM1pq3eDXlZA/lxPnTJhYCS5bj7w7VBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 10:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:77:c8:01:57:05:ca:45:b5:01:53:1c:31:66:10:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
        Validity
            Not Before: Sep 28 10:03:01 2026 GMT
            Not After : Sep 29 10:03:01 2026 GMT
        Subject: CN=a63be11f247526a5e5a9d176f8d3f5ae2b774f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d5:a9:fb:24:7a:8b:32:a9:2e:56:06:a1:e4:
                    5d:2b:78:2d:4b:d9:2b:56:83:93:9b:06:ca:ca:f5:
                    b6:76:99:8f:08:fe:a0:e8:8d:66:3d:d7:3d:64:6c:
                    77:50:2f:a3:ed:4a:2b:15:fd:14:92:2b:10:a7:b4:
                    9b:fa:67:50:2a:89:31:e5:59:98:2b:b3:ca:3b:d8:
                    3f:2a:a4:7e:59:57:b0:43:c6:10:cf:3c:61:2d:fb:
                    a8:9b:3a:01:91:90:04:44:90:a7:a6:a6:9b:30:e1:
                    4b:d5:f0:24:cb:10:d8:c1:45:45:2c:d8:90:8b:68:
                    26:42:81:dd:7b:2e:14:5f:fc:82:42:ee:ee:1a:c6:
                    fc:e9:ac:79:f5:af:7e:6a:33:58:55:29:ec:35:00:
                    37:1e:4a:97:3c:aa:f7:63:de:27:48:a5:0a:73:c7:
                    97:5d:92:8e:0c:91:4a:82:db:e8:3b:a2:9d:f0:93:
                    ac:da:2a:63:2e:f6:3d:a1:d8:73:1b:90:b6:ee:55:
                    d5:40:c0:c2:90:5d:51:98:f1:c3:24:f3:a4:fd:b8:
                    8f:ea:a9:2d:cb:6e:12:e2:b4:b1:0f:46:2f:62:03:
                    1c:92:9a:04:f7:ec:fc:16:64:51:b3:55:90:e1:d9:
                    f0:22:69:c8:6c:9d:3c:a9:15:75:93:5d:1e:17:9f:
                    19:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3B:E1:1F:24:75:26:A5:E5:A9:D1:76:F8:D3:F5:AE:2B:77:4F:75
            X509v3 Authority Key Identifier:
                keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:87:85:1d:aa:05:6b:0e:10:8b:87:46:b3:40:95:19:81:17:
         32:ef:8e:e0:5b:69:84:94:b5:13:21:45:72:91:2f:2a:6f:62:
         40:0c:ad:e5:f7:e8:9f:8f:f3:aa:ff:fe:12:39:b3:68:c4:ef:
         d3:09:04:f3:20:1d:d0:89:2f:a2:0e:49:50:67:7c:9a:86:22:
         9a:c6:9d:99:2a:32:b3:aa:aa:a5:59:5a:b8:03:2f:a0:b0:a2:
         ab:7d:6b:1c:2c:17:45:42:4a:ab:35:40:74:8f:f3:7a:1e:41:
         ec:85:dd:4a:5e:a2:f5:97:88:46:67:0b:18:5b:a5:1f:2b:bc:
         a4:a1:03:26:2c:c2:ed:5b:53:29:1e:30:72:7b:e3:ec:fb:7e:
         fd:89:96:90:8c:bd:53:18:5f:61:dc:24:2e:5d:ea:72:1c:ed:
         39:75:55:fd:1c:9f:be:2b:3f:85:cc:17:6a:55:5a:5c:58:09:
         cf:ec:2f:55:fc:b0:ee:d4:1e:b4:33:87:9d:12:32:bb:07:95:
         77:5e:f8:64:68:5a:8e:f0:57:4b:6b:c2:82:11:1d:35:a8:70:
         6c:ee:01:a7:ed:8b:76:88:9d:eb:a1:17:80:22:27:68:66:7f:
         93:a8:99:1e:03:f7:96:3a:12:da:92:1e:89:33:43:38:77:91:
         5d:f7:a8:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDnd8gBVwXKRbUBUxwxZhDpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MjNmZTZkYWQ4YWQ0ZmRhZWU2ZGQ2OTgzYzFlNTVjZGU4
NDgyYTIwHhcNMjYwOTI4MTAwMzAxWhcNMjYwOTI5MTAwMzAxWjAzMTEwLwYDVQQD
EyhhNjNiZTExZjI0NzUyNmE1ZTVhOWQxNzZmOGQzZjVhZTJiNzc0Zjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtWp+yR6izKpLlYGoeRdK3gtS9kr
VoOTmwbKyvW2dpmPCP6g6I1mPdc9ZGx3UC+j7UorFf0UkisQp7Sb+mdQKokx5VmY
K7PKO9g/KqR+WVewQ8YQzzxhLfuomzoBkZAERJCnpqabMOFL1fAkyxDYwUVFLNiQ
i2gmQoHdey4UX/yCQu7uGsb86ax59a9+ajNYVSnsNQA3HkqXPKr3Y94nSKUKc8eX
XZKODJFKgtvoO6Kd8JOs2ipjLvY9odhzG5C27lXVQMDCkF1RmPHDJPOk/biP6qkt
y24S4rSxD0YvYgMckpoE9+z8FmRRs1WQ4dnwImnIbJ08qRV1k10eF58Z6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKY74R8kdSal5anRdvjT9a4rd091MB8GA1UdIwQY
MBaAFKgj/m2titT9rubdaYPB5VzehIKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNQLWJhMksxUDJ1NXQxcGc4SGxYTjZFZ3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wMzg1NjAtMjZkNi00NTVkLWE4ZjQt
OWJmZGYyMjUxMjY3LzEvcUNQLWJhMksxUDJ1NXQxcGc4SGxYTjZFZ3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wMzg1NjAtMjZkNi00NTVkLWE4ZjQtOWJmZGYyMjUxMjY3
LzEvcUNQLWJhMksxUDJ1NXQxcGc4SGxYTjZFZ3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4eFHaoF
aw4Qi4dGs0CVGYEXMu+O4FtphJS1EyFFcpEvKm9iQAyt5ffon4/zqv/+EjmzaMTv
0wkE8yAd0Ikvog5JUGd8moYimsadmSoys6qqpVlauAMvoLCiq31rHCwXRUJKqzVA
dI/zeh5B7IXdSl6i9ZeIRmcLGFulHyu8pKEDJizC7VtTKR4wcnvj7Pt+/YmWkIy9
UxhfYdwkLl3qchztOXVV/Ryfvis/hcwXalVaXFgJz+wvVfyw7tQetDOHnRIyuweV
d174ZGhajvBXS2vCghEdNahwbO4Bp+2Ldoid66EXgCInaGZ/k6iZHgP3ljoS2pIe
iTNDOHeRXfeoww==
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:10:26 2026 by rpki-client