Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
File:                     QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft (raw, json)
Hash identifier:          vVS9Q6xaiuNKlCyg2gjwvqU6eO+BEgxb39UszX3Qit8=
Subject key identifier:   8E:42:44:21:25:BC:3E:CA:61:8F:B3:A7:58:49:E1:C4:DE:68:2E:E8
Authority key identifier: 41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
Certificate issuer:       /CN=412add9455bc132b730e727051f0b64ba45fcda4
Certificate serial:       01A18AF75043B5EDBABDB71A2367E342DD3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
Manifest number:          07BE
Signing time:             Fri 30 Oct 2026 04:00:25 +0000
Manifest this update:     Fri 30 Oct 2026 04:00:25 +0000
Manifest next update:     Sat 31 Oct 2026 04:00:25 +0000
Files and hashes:         1: QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl (hash: 8aKiTV0AC80sL9AT2yYJSYoyENA2sRrX5KSRkP4ocTU=)
                          2: TCQSeVzJwjEr7_aTg_wyy8uk6RM.roa (hash: QmsaqQhRAEGLEdE3C26cYEAQUOOxk2PCRLum00KwaiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8a:f7:50:43:b5:ed:ba:bd:b7:1a:23:67:e3:42:dd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412add9455bc132b730e727051f0b64ba45fcda4
        Validity
            Not Before: Oct 30 04:00:25 2026 GMT
            Not After : Oct 31 04:00:25 2026 GMT
        Subject: CN=8e42442125bc3eca618fb3a75849e1c4de682ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:97:21:67:b7:07:b9:6c:61:e8:ef:54:70:7b:
                    5d:df:c4:d6:c4:82:5f:0f:37:06:e0:41:90:1f:b8:
                    1d:88:71:39:4e:91:93:65:4a:e2:76:69:36:2f:be:
                    9e:24:05:6e:28:44:ea:d0:e8:34:1a:61:69:86:2f:
                    20:b3:93:42:c2:53:88:de:a0:86:0e:70:98:e6:c9:
                    ef:a3:20:15:bb:45:2f:6d:fa:c1:07:61:b3:50:32:
                    88:df:c0:00:a8:19:4f:36:a1:ee:29:0f:e8:d1:52:
                    5a:68:54:5e:2a:76:42:a5:d8:a4:92:0a:3b:47:40:
                    2b:bd:41:14:a5:a1:7a:0f:b9:ec:2d:da:cf:e1:18:
                    b4:4f:0b:05:88:3b:cb:b9:0c:d1:4c:b1:28:a9:bc:
                    2a:95:53:81:5c:56:87:69:51:58:b1:e0:05:ef:31:
                    09:4a:fa:7f:15:92:4a:49:dd:21:f3:18:4f:80:49:
                    98:ba:96:99:ac:38:3d:69:9d:56:58:44:86:99:69:
                    2c:3b:c1:7e:db:a2:f7:03:13:ed:5b:88:8c:ad:6b:
                    f1:5e:66:95:3e:49:7e:66:42:12:30:3b:13:5e:e7:
                    61:bb:fa:12:43:25:d7:01:51:1d:7e:17:07:42:d6:
                    75:25:bd:3d:33:d4:4a:d8:d7:4a:5f:b5:3b:42:ee:
                    0e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:42:44:21:25:BC:3E:CA:61:8F:B3:A7:58:49:E1:C4:DE:68:2E:E8
            X509v3 Authority Key Identifier:
                keyid:41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:5d:7c:cd:7b:1f:32:ac:89:27:53:4e:bd:0f:29:a1:fa:ec:
         41:9a:4e:87:d6:a3:80:91:23:4b:b8:bf:6b:ec:0b:6d:af:bb:
         65:2c:05:31:c7:1c:5f:52:cc:52:16:91:55:eb:95:5c:1f:79:
         f4:29:1c:53:d1:01:b7:f1:09:e0:f9:4a:45:3e:a2:34:b6:11:
         57:71:a8:ce:55:ae:16:56:34:17:2e:ec:45:c5:ce:20:b1:51:
         40:ae:60:b6:95:3d:83:92:6e:7d:fc:7a:a1:12:0e:38:e1:ee:
         17:8f:bd:df:05:e4:17:f1:05:b3:c6:37:3c:79:9f:40:c1:02:
         cf:9d:d3:91:e8:88:04:81:74:26:dd:8f:86:f3:04:80:05:d5:
         aa:d3:d8:1b:19:07:35:5a:ec:aa:1c:6f:89:e1:a8:b6:29:7b:
         25:29:92:47:52:68:f6:e4:9e:2f:d4:ca:8b:74:78:38:96:09:
         09:c9:bb:35:9e:9a:af:a2:d1:fd:dc:16:04:05:9f:06:60:e7:
         bc:ce:9a:20:88:f3:f9:75:fe:ee:20:cb:f9:27:aa:83:0f:2f:
         5b:1e:a4:41:45:84:71:38:90:7d:07:62:b3:34:90:99:43:78:
         f4:ff:0d:54:60:6d:18:2a:c4:90:9c:fb:77:5a:e3:c3:27:be:
         76:56:af:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGK91BDte26vbcaI2fjQt06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMmFkZDk0NTViYzEzMmI3MzBlNzI3MDUxZjBiNjRiYTQ1
ZmNkYTQwHhcNMjYxMDMwMDQwMDI1WhcNMjYxMDMxMDQwMDI1WjAzMTEwLwYDVQQD
Eyg4ZTQyNDQyMTI1YmMzZWNhNjE4ZmIzYTc1ODQ5ZTFjNGRlNjgyZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpchZ7cHuWxh6O9UcHtd38TWxIJf
DzcG4EGQH7gdiHE5TpGTZUridmk2L76eJAVuKETq0Og0GmFphi8gs5NCwlOI3qCG
DnCY5snvoyAVu0UvbfrBB2GzUDKI38AAqBlPNqHuKQ/o0VJaaFReKnZCpdikkgo7
R0ArvUEUpaF6D7nsLdrP4Ri0TwsFiDvLuQzRTLEoqbwqlVOBXFaHaVFYseAF7zEJ
Svp/FZJKSd0h8xhPgEmYupaZrDg9aZ1WWESGmWksO8F+26L3AxPtW4iMrWvxXmaV
Pkl+ZkISMDsTXudhu/oSQyXXAVEdfhcHQtZ1Jb09M9RK2NdKX7U7Qu4OMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5CRCElvD7KYY+zp1hJ4cTeaC7oMB8GA1UdIwQY
MBaAFEEq3ZRVvBMrcw5ycFHwtkukX82kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNyZGxGVzhFeXR6RG5Kd1VmQzJTNlJmemFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lOWM2YTYtNmJjNi00MWUyLTgwZTkt
YmM5ODg3YTdiNTUzLzEvUVNyZGxGVzhFeXR6RG5Kd1VmQzJTNlJmemFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lOWM2YTYtNmJjNi00MWUyLTgwZTktYmM5ODg3YTdiNTUz
LzEvUVNyZGxGVzhFeXR6RG5Kd1VmQzJTNlJmemFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmV18zXsf
MqyJJ1NOvQ8pofrsQZpOh9ajgJEjS7i/a+wLba+7ZSwFMcccX1LMUhaRVeuVXB95
9CkcU9EBt/EJ4PlKRT6iNLYRV3GozlWuFlY0Fy7sRcXOILFRQK5gtpU9g5Juffx6
oRIOOOHuF4+93wXkF/EFs8Y3PHmfQMECz53TkeiIBIF0Jt2PhvMEgAXVqtPYGxkH
NVrsqhxvieGotil7JSmSR1Jo9uSeL9TKi3R4OJYJCcm7NZ6ar6LR/dwWBAWfBmDn
vM6aIIjz+XX+7iDL+Seqgw8vWx6kQUWEcTiQfQdiszSQmUN49P8NVGBtGCrEkJz7
d1rjwye+dlavUw==
-----END CERTIFICATE-----
Generated at Fri Oct 30 11:37:41 2026 by rpki-client