Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
File:                     QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json)
Hash identifier:          MkO69vyMUXJr3oFXrYYXGTw5HiKHYEX3NHSA20/SGDk=
Subject key identifier:   92:A0:D0:CA:A1:ED:74:3B:0E:EA:7B:02:F8:49:23:54:ED:EE:D3:D0
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Certificate issuer:       /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial:       01A1E027B8712B4D8D04672E4F6722A8BEFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
Manifest number:          11A4
Signing time:             Sun 15 Nov 2026 17:01:01 +0000
Manifest this update:     Sun 15 Nov 2026 17:01:01 +0000
Manifest next update:     Mon 16 Nov 2026 17:01:01 +0000
Files and hashes:         1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=)
                          2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=)
                          3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=)
                          4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=)
                          5: FXoEQXQ1y_sgLaeu2GI514jSQq4.roa (hash: cMLduCCScD6l8ZmN8/0hmU4GsPGIiE1HYswdwXlFY38=)
                          6: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: qMV0RGYECPiajZLsSRe0SAdjQeWCrzi7TmpTr8IHzmw=)
                          7: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=)
                          8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=)
                          9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=)
                          10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=)
                          11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=)
                          12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:e0:27:b8:71:2b:4d:8d:04:67:2e:4f:67:22:a8:be:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
        Validity
            Not Before: Nov 15 17:01:01 2026 GMT
            Not After : Nov 16 17:01:01 2026 GMT
        Subject: CN=92a0d0caa1ed743b0eea7b02f8492354edeed3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ec:23:07:3a:57:7d:b0:6a:41:bf:d6:17:2c:
                    fd:57:34:ec:b5:9b:ae:3b:e6:a8:9d:81:c1:e6:b8:
                    8a:b0:65:31:ca:1d:ef:f0:5c:d9:0b:6c:8f:c3:8d:
                    ae:82:8a:dc:b6:0e:ee:95:a3:19:7d:a3:8d:02:6b:
                    17:ac:d6:88:08:b3:8c:f4:08:98:e6:b8:ca:bc:6b:
                    e2:9c:e9:17:4f:47:2e:bf:df:5a:4a:f3:2e:49:69:
                    d7:22:5b:2f:10:f1:60:03:e0:f7:a0:83:f2:f6:f7:
                    36:3c:bb:fc:ef:65:f8:49:b7:1a:19:d6:6b:2e:45:
                    b0:56:1d:e5:7d:a9:12:d9:6b:b5:68:5e:3c:03:62:
                    6b:a5:d9:dd:16:5f:4c:a6:a1:81:b7:bc:ed:b6:09:
                    6f:72:fd:c5:d9:d1:7f:10:a9:4c:3a:93:3f:60:9f:
                    ba:d9:55:79:0b:d0:bc:1b:ba:74:12:df:1b:03:75:
                    30:18:1a:be:d9:b1:72:de:4e:be:bf:1c:63:d6:1c:
                    88:2a:cf:78:b5:1d:ac:3d:f5:5b:3d:29:e3:92:14:
                    73:2a:3b:42:e8:b7:72:9b:1c:79:77:0a:7d:1b:c8:
                    52:12:37:d1:f2:69:8f:07:8b:0c:5b:7d:7e:77:7c:
                    2a:71:43:9f:9c:f0:aa:64:6b:16:62:80:bf:aa:d7:
                    c1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A0:D0:CA:A1:ED:74:3B:0E:EA:7B:02:F8:49:23:54:ED:EE:D3:D0
            X509v3 Authority Key Identifier:
                keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b3:d0:6c:76:61:1c:96:af:11:97:77:06:c7:4d:da:b7:c8:
         ac:b7:a7:bd:2c:c2:dd:ac:37:e8:2d:36:4c:59:d9:d0:d2:19:
         95:dd:70:c8:c3:d9:a3:a0:0c:f3:89:bc:6b:67:b1:84:f9:2d:
         8d:4d:ef:b7:b8:f6:10:dc:a7:93:70:9f:81:a1:49:70:60:05:
         94:cd:2a:dd:79:d7:4c:8f:92:e9:f2:e3:01:21:1e:d6:a1:da:
         ec:7d:bd:5c:1b:dc:d2:ea:93:ed:0f:4c:8e:12:02:b8:8c:17:
         fe:68:64:7e:1e:e3:6d:93:cb:96:e9:cf:cd:2b:80:39:b0:cf:
         0e:41:99:0d:69:15:1e:90:57:b6:68:12:67:29:7f:33:da:f7:
         82:c5:4d:c0:ca:3f:01:38:40:5d:a7:a4:15:35:cb:4b:57:d1:
         e2:b5:5a:e7:09:28:a5:64:26:d8:57:df:e4:a5:a1:2c:07:ac:
         f5:cb:90:66:13:cb:a4:c3:8f:dd:3f:ab:42:fe:56:cd:40:de:
         1b:c4:13:ce:7a:88:68:7e:03:db:69:ac:9b:33:d7:b6:05:35:
         90:c8:ed:c4:a8:15:51:54:40:3b:8c:63:82:fe:8f:a4:9c:c2:
         63:58:94:c6:d6:64:b3:c0:9d:45:68:e7:5e:f7:ea:29:e2:bf:
         c4:4f:04:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:03:39 2026 by rpki-client