Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
File:                     qEkgTKTw605W4I4Jn-N4XOBv_qo.mft (raw, json)
Hash identifier:          18GaW2N96m5oLPyabPpbLeTxxtHK0XhtioRYxtSTgBc=
Subject key identifier:   15:EB:D4:7D:B0:A9:F9:23:A3:41:8C:BE:7E:9D:81:BB:AC:33:EA:E5
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Certificate issuer:       /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial:       01A132FE2EC44A504649B7BA614ACB633EDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
Manifest number:          1AD0
Signing time:             Tue 13 Oct 2026 02:01:21 +0000
Manifest this update:     Tue 13 Oct 2026 02:01:21 +0000
Manifest next update:     Wed 14 Oct 2026 02:01:21 +0000
Files and hashes:         1: A7_y22PIg0hPAMpCsH_sCKGtyg8.roa (hash: jYk6V/JIFZujPYouL6dTCjVEwQr4OkGYQk0D5ScRZVo=)
                          2: Ksd3OiB_AIxcmUtGOKUPQuXbBbs.roa (hash: mbt2rFbow8jwUY5FOtfvQrtCibBO+H5M+VNJrWE5hUY=)
                          3: bqSNo5kxYa13DI8C9QCpy4nV7Mk.roa (hash: BubMw86WqvaBOSfoNUBrIVcL+fL5Ns64cLxY/APuJ7E=)
                          4: f0zEf8nFWQUwH5RG5N9p8rgTwN0.roa (hash: PDGWp7iUzyz4cXF2Z4OAk/knVLv4u1kvbR76Ezmz3vs=)
                          5: j4Ert-J3RYXgEKpLcLx5_T9dxS8.roa (hash: keE/Qns0D+PUwgQtZ9LOIqamoxuah8ZLWQxn+5RiOWw=)
                          6: qEkgTKTw605W4I4Jn-N4XOBv_qo.crl (hash: d4rjKzn/AYJ/fjHCLWjowFzQSryD0reNgD20S+JImBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:fe:2e:c4:4a:50:46:49:b7:ba:61:4a:cb:63:3e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
        Validity
            Not Before: Oct 13 02:01:21 2026 GMT
            Not After : Oct 14 02:01:21 2026 GMT
        Subject: CN=15ebd47db0a9f923a3418cbe7e9d81bbac33eae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:a4:1d:eb:01:ca:db:25:a9:7a:1c:e3:cc:
                    e6:05:60:9f:9a:f3:a9:68:87:cc:5e:76:d5:f1:19:
                    b0:7d:4e:11:64:9f:00:28:03:30:14:ce:70:2c:7e:
                    ff:c1:c3:73:0e:ce:02:41:d7:92:45:c3:51:48:57:
                    ae:6e:5f:cf:c3:19:3a:fc:1c:7f:4f:5f:a4:07:d8:
                    cf:58:da:fa:80:ed:aa:86:e0:d5:35:f3:f9:5e:6e:
                    10:8e:81:f2:40:c7:67:a2:d7:2e:0e:e6:02:f0:59:
                    ce:63:f7:19:d8:01:fc:cc:93:18:3c:0d:94:6d:aa:
                    6a:2d:ed:c8:1d:7d:44:98:7f:2c:d5:81:3c:91:58:
                    21:ab:57:f6:46:25:ab:35:16:ce:44:37:5d:9a:4b:
                    a7:b3:8a:6e:61:0e:a0:ae:52:d4:ce:3b:44:9c:ee:
                    bb:8e:0a:c9:4d:39:15:71:71:87:84:f8:56:1c:fd:
                    1e:71:b1:3a:f2:34:d6:47:36:24:88:4d:fc:0c:98:
                    a2:38:2f:fa:45:ad:b3:07:5f:bf:a6:90:a5:26:db:
                    60:0c:79:67:6b:8f:1b:7e:25:0f:53:cf:35:3e:a1:
                    a0:f6:92:52:f4:c3:75:d2:e3:58:53:3f:26:aa:fa:
                    9a:49:a3:08:67:af:78:78:78:aa:54:95:49:93:0f:
                    91:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EB:D4:7D:B0:A9:F9:23:A3:41:8C:BE:7E:9D:81:BB:AC:33:EA:E5
            X509v3 Authority Key Identifier:
                keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ed:83:04:fc:31:b8:aa:58:70:cf:8c:38:94:dd:12:82:f4:
         4b:9f:ad:c8:cd:ad:bb:c0:fe:2c:01:3b:24:1c:54:50:7d:14:
         a3:2b:0a:24:05:22:90:6d:b6:7e:71:3c:2b:50:59:f6:27:5b:
         74:d0:e4:1a:bb:7b:f4:61:c4:2c:cb:b7:25:02:df:55:ef:3d:
         97:05:23:db:d8:b0:92:26:62:29:d7:76:c0:dd:38:db:d0:38:
         4f:12:79:94:06:f5:9f:23:64:89:f8:29:ff:ea:d5:72:ef:d8:
         aa:42:2c:dd:60:a4:bc:ef:40:56:81:85:04:ca:38:aa:aa:2b:
         ac:81:21:b9:c4:5a:ca:02:70:e2:c7:fc:3a:36:ee:2c:7f:80:
         55:e5:42:b2:d2:24:a9:51:e8:2b:ca:06:18:40:39:9a:fa:d2:
         e1:bd:c3:4d:c6:0f:89:01:c4:51:21:f4:bc:3f:36:93:29:74:
         88:0d:05:3e:d3:62:9e:c8:2a:38:c5:ed:fc:3a:d0:c3:bb:98:
         b4:b8:9c:b1:3f:08:49:00:c2:ab:a0:d4:7f:a3:47:d5:71:31:
         21:2c:8f:9e:66:f1:ad:c2:2d:e6:ab:a6:ac:13:78:58:ac:39:
         a5:67:7b:b4:9f:fb:9e:ed:4e:cf:56:ad:1f:c7:3a:e3:7f:56:
         40:4e:c7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 07:44:51 2026 by rpki-client