Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
File:                     R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft (raw, json)
Hash identifier:          YrtBJhdgosQVpXkTUKUiDVYtEBlrwzFgzzly1vx49K4=
Subject key identifier:   4F:F7:71:B2:95:AA:39:A7:B4:33:8E:86:47:94:A7:5D:6E:A3:1C:54
Authority key identifier: 47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA
Certificate issuer:       /CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
Certificate serial:       01A180741A891DDE84EDD12309D180FD0814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
Manifest number:          1AC7
Signing time:             Wed 28 Oct 2026 03:00:54 +0000
Manifest this update:     Wed 28 Oct 2026 03:00:54 +0000
Manifest next update:     Thu 29 Oct 2026 03:00:54 +0000
Files and hashes:         1: R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl (hash: KkP+vsb7X/GYTCJBBPYGjx04TTDnTdcNnsyifR+2/t8=)
                          2: elreK20YpaSo7u9v55jxGF5rHO4.roa (hash: lrIYGG9SdGCcfazBvX7lzn+XdBdxuXWCr/oHZ+PyxD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:74:1a:89:1d:de:84:ed:d1:23:09:d1:80:fd:08:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
        Validity
            Not Before: Oct 28 03:00:54 2026 GMT
            Not After : Oct 29 03:00:54 2026 GMT
        Subject: CN=4ff771b295aa39a7b4338e864794a75d6ea31c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:9d:78:35:70:42:e0:88:2a:50:99:e1:f4:
                    d3:70:bc:4b:e0:2b:10:a1:65:9e:00:f7:b3:6f:52:
                    fa:2e:90:51:2b:36:0a:3b:28:7a:16:59:0f:63:19:
                    b2:a1:6b:77:29:31:41:c7:8b:fc:6e:be:90:d9:0e:
                    b5:ba:53:5b:2f:a4:73:03:3b:ad:cc:64:f7:c9:a6:
                    b5:da:3f:94:b0:32:93:e9:e1:ea:47:2e:91:83:38:
                    8c:57:37:de:8e:e4:90:b2:b4:4d:f3:50:8a:48:6d:
                    4d:b8:c2:12:dc:ff:82:a8:01:f9:0e:2a:36:f0:b7:
                    b5:ce:08:6b:58:ab:9d:e7:ba:11:d3:4b:d8:85:d1:
                    b7:03:87:dd:09:9e:5b:16:98:26:9c:e4:05:50:f3:
                    27:7b:a5:30:3d:85:0d:ab:d9:04:d6:f3:26:d1:c7:
                    a4:ef:6e:98:3e:9b:dd:4d:45:61:25:7a:2f:3b:14:
                    48:1e:a8:ac:09:d3:2c:71:b2:6d:0e:a1:76:0c:da:
                    24:27:69:b2:5a:fb:46:72:ea:e1:07:b4:1b:a2:89:
                    3a:18:72:8d:ba:06:2b:84:f4:64:6a:c3:b3:ae:c0:
                    22:82:28:4b:a6:80:32:36:1d:26:17:cf:f1:2e:db:
                    cb:25:86:4c:36:6a:9e:ce:b1:e1:af:29:fa:e4:78:
                    2a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F7:71:B2:95:AA:39:A7:B4:33:8E:86:47:94:A7:5D:6E:A3:1C:54
            X509v3 Authority Key Identifier:
                keyid:47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a0:b1:69:47:0a:16:e0:91:53:5f:25:85:14:97:a6:a9:9e:
         bf:12:1f:a7:4c:f8:ae:6d:4a:f8:97:f7:07:ee:19:10:f0:8f:
         60:bd:dc:1f:9f:ca:4e:a2:18:7c:2c:2c:8d:82:35:47:5d:f7:
         70:42:42:30:4b:b3:1f:36:f1:2b:6c:58:23:31:0a:ce:1d:0d:
         d9:40:cb:82:9f:94:7e:69:88:c4:0c:52:1c:90:c8:01:f2:19:
         2e:f8:22:89:9b:91:99:d4:6d:9e:49:f8:8d:e3:20:73:ce:b9:
         43:70:79:2a:dd:cf:13:70:8c:17:39:d9:27:db:f6:1e:4c:1a:
         46:8e:82:bf:ff:15:1b:d0:fd:47:07:89:de:68:f8:b5:20:c6:
         15:98:29:1b:4e:8f:54:79:59:68:d1:a8:5c:6e:79:47:2d:8b:
         10:a0:99:4e:f3:4a:7e:7e:e2:68:2f:1e:24:89:49:14:2a:ac:
         90:7b:de:a7:71:a7:03:00:98:f1:1d:c3:b0:d1:1b:ba:50:8d:
         18:90:79:a5:02:ef:d0:97:4a:09:98:e4:e6:41:ed:83:a3:78:
         f8:aa:5a:ac:71:c0:3f:e0:c6:7a:db:b2:8f:6a:6a:fe:7b:03:
         54:cc:3b:cf:05:d5:0c:04:e1:ea:a6:13:f7:49:14:c3:17:d5:
         58:02:5f:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAdBqJHd6E7dEjCdGA/QgUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZTQyMjMzZWQ2MzBiMGI4OWY1MmMwNzdmZjBkNWMyYjM3
ZDRkZmEwHhcNMjYxMDI4MDMwMDU0WhcNMjYxMDI5MDMwMDU0WjAzMTEwLwYDVQQD
Eyg0ZmY3NzFiMjk1YWEzOWE3YjQzMzhlODY0Nzk0YTc1ZDZlYTMxYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqmdeDVwQuCIKlCZ4fTTcLxL4CsQ
oWWeAPezb1L6LpBRKzYKOyh6FlkPYxmyoWt3KTFBx4v8br6Q2Q61ulNbL6RzAzut
zGT3yaa12j+UsDKT6eHqRy6RgziMVzfejuSQsrRN81CKSG1NuMIS3P+CqAH5Dio2
8Le1zghrWKud57oR00vYhdG3A4fdCZ5bFpgmnOQFUPMne6UwPYUNq9kE1vMm0cek
726YPpvdTUVhJXovOxRIHqisCdMscbJtDqF2DNokJ2myWvtGcurhB7Qbook6GHKN
ugYrhPRkasOzrsAigihLpoAyNh0mF8/xLtvLJYZMNmqezrHhryn65Hgq0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/3cbKVqjmntDOOhkeUp11uoxxUMB8GA1UdIwQY
MBaAFEfkIjPtYwsLifUsB3/w1cKzfU36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi1RaU0tMWpDd3VKOVN3SGZfRFZ3ck45VGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lOTQ4MTctZjI1OS00ZmZhLTliYTMt
N2ViOTVjYzBmNzQ5LzEvUi1RaU0tMWpDd3VKOVN3SGZfRFZ3ck45VGZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lOTQ4MTctZjI1OS00ZmZhLTliYTMtN2ViOTVjYzBmNzQ5
LzEvUi1RaU0tMWpDd3VKOVN3SGZfRFZ3ck45VGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiaCxaUcK
FuCRU18lhRSXpqmevxIfp0z4rm1K+Jf3B+4ZEPCPYL3cH5/KTqIYfCwsjYI1R133
cEJCMEuzHzbxK2xYIzEKzh0N2UDLgp+UfmmIxAxSHJDIAfIZLvgiiZuRmdRtnkn4
jeMgc865Q3B5Kt3PE3CMFznZJ9v2HkwaRo6Cv/8VG9D9RweJ3mj4tSDGFZgpG06P
VHlZaNGoXG55Ry2LEKCZTvNKfn7iaC8eJIlJFCqskHvep3GnAwCY8R3DsNEbulCN
GJB5pQLv0JdKCZjk5kHtg6N4+KparHHAP+DGetuyj2pq/nsDVMw7zwXVDATh6qYT
90kUwxfVWAJfLw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:51:53 2026 by rpki-client