Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
File:                     qFERp16dOcxDDqhbjSkgYNnop8I.mft (raw, json)
Hash identifier:          vd+Yedw3q2Q4SMQw1pSGVA4343BmOdKXv0YNQaYYfU4=
Subject key identifier:   10:B1:D1:8E:A7:68:87:5B:8C:5D:90:CE:09:78:FB:57:31:9C:2D:A7
Authority key identifier: A8:51:11:A7:5E:9D:39:CC:43:0E:A8:5B:8D:29:20:60:D9:E8:A7:C2
Certificate issuer:       /CN=a85111a75e9d39cc430ea85b8d292060d9e8a7c2
Certificate serial:       01A1551C509B32F2DD6B2AD681CBB216CED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
Manifest number:          015A
Signing time:             Mon 19 Oct 2026 17:01:21 +0000
Manifest this update:     Mon 19 Oct 2026 17:01:21 +0000
Manifest next update:     Tue 20 Oct 2026 17:01:21 +0000
Files and hashes:         1: h6c3rKlsCh2Ta6ieH4wNZunbZ_c.asa (hash: wHSgIizYN0GV/TTAR4CRTTTf21VDW35ePjsqiIQojnU=)
                          2: qFERp16dOcxDDqhbjSkgYNnop8I.crl (hash: xYTAMuxBk/nhsidY2quyYBuqeNcE3FYDEtHPQJkCC+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 17:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:55:1c:50:9b:32:f2:dd:6b:2a:d6:81:cb:b2:16:ce:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a85111a75e9d39cc430ea85b8d292060d9e8a7c2
        Validity
            Not Before: Oct 19 17:01:21 2026 GMT
            Not After : Oct 20 17:01:21 2026 GMT
        Subject: CN=10b1d18ea768875b8c5d90ce0978fb57319c2da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:e4:aa:96:c6:9e:e8:d1:8f:fe:2d:60:e5:
                    ae:25:c6:3c:8b:2c:90:48:86:af:14:d1:a3:4b:21:
                    c1:21:00:53:a4:50:74:87:0e:8b:2b:aa:d2:75:5c:
                    8f:5f:3e:1f:e1:d1:ef:de:c6:82:d3:38:8a:50:45:
                    a2:86:59:b9:7d:87:80:1e:b7:bb:ab:84:36:f0:dc:
                    08:4a:b9:fc:70:08:38:de:c9:a7:12:77:55:c0:2b:
                    31:8b:03:93:4c:8a:fa:44:6d:de:48:bc:dc:90:ec:
                    e3:55:5b:15:2e:ef:1b:7c:74:77:18:d4:c9:a2:ac:
                    7a:f6:3e:fb:4f:ce:06:98:0d:8d:b7:a6:51:1e:bf:
                    50:97:44:0e:e0:6a:b7:a9:ff:7c:f8:86:4a:30:c1:
                    d3:31:e6:4d:34:c4:7c:cd:97:41:e8:3f:ff:5a:e1:
                    22:8d:4d:cd:f2:49:6b:9e:e2:fb:0c:39:4d:4c:7d:
                    1c:30:ec:c7:97:ca:61:44:e3:30:41:20:bf:b9:08:
                    a7:96:c5:aa:72:6c:25:9d:8a:96:f1:3e:4b:8a:6f:
                    2a:0a:46:80:7d:65:04:fa:61:c4:90:9c:49:4c:5c:
                    ab:85:41:07:95:17:87:5b:2e:47:c1:7a:03:7d:c1:
                    29:61:72:68:9b:1e:4f:0e:5a:53:6a:a8:1c:97:e8:
                    14:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B1:D1:8E:A7:68:87:5B:8C:5D:90:CE:09:78:FB:57:31:9C:2D:A7
            X509v3 Authority Key Identifier:
                keyid:A8:51:11:A7:5E:9D:39:CC:43:0E:A8:5B:8D:29:20:60:D9:E8:A7:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7a:e1:96:70:b4:1e:82:27:5a:d0:48:c1:5d:c7:63:13:94:
         0e:7d:ca:2d:4a:41:fa:46:1c:49:0f:0a:01:d8:67:77:73:c3:
         09:54:a6:81:15:7a:e5:0f:ec:07:7a:99:d0:60:06:37:d4:e8:
         38:40:e5:48:c5:59:8a:ef:34:93:98:51:3b:f8:49:d7:9f:37:
         2a:70:d7:eb:12:7e:c2:d2:2a:67:5d:e7:89:42:d0:be:0a:b5:
         16:bf:c8:fc:8d:9e:a9:8c:24:f6:69:91:4d:43:8e:db:18:34:
         bf:08:05:fc:4f:5a:eb:b3:78:6c:79:1f:04:c3:f8:e6:39:50:
         dd:57:97:d9:1e:68:db:dc:61:c7:a4:81:52:b9:b7:e2:6e:fb:
         8a:cb:46:b1:e9:fd:72:1d:d8:d7:ef:27:8c:a4:29:4d:ed:c6:
         62:eb:94:88:a5:11:5d:62:a4:c2:ce:15:47:11:ff:dc:47:23:
         0f:7d:41:6a:07:c8:b9:a3:3f:e1:d6:5e:e4:50:83:c1:2a:7d:
         df:2e:94:06:1d:8f:3b:1e:b9:76:d0:b3:e5:c4:fc:f9:3e:74:
         a4:2b:a7:a6:3c:98:3e:f4:7a:43:93:7d:59:67:7f:c9:77:d6:
         59:69:b0:c0:2e:b5:46:dd:08:79:96:79:f5:72:34:c6:bd:1f:
         85:3d:24:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFVHFCbMvLdayrWgcuyFs7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NTExMWE3NWU5ZDM5Y2M0MzBlYTg1YjhkMjkyMDYwZDll
OGE3YzIwHhcNMjYxMDE5MTcwMTIxWhcNMjYxMDIwMTcwMTIxWjAzMTEwLwYDVQQD
EygxMGIxZDE4ZWE3Njg4NzViOGM1ZDkwY2UwOTc4ZmI1NzMxOWMyZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OzkqpbGnujRj/4tYOWuJcY8iyyQ
SIavFNGjSyHBIQBTpFB0hw6LK6rSdVyPXz4f4dHv3saC0ziKUEWihlm5fYeAHre7
q4Q28NwISrn8cAg43smnEndVwCsxiwOTTIr6RG3eSLzckOzjVVsVLu8bfHR3GNTJ
oqx69j77T84GmA2Nt6ZRHr9Ql0QO4Gq3qf98+IZKMMHTMeZNNMR8zZdB6D//WuEi
jU3N8klrnuL7DDlNTH0cMOzHl8phROMwQSC/uQinlsWqcmwlnYqW8T5Lim8qCkaA
fWUE+mHEkJxJTFyrhUEHlReHWy5HwXoDfcEpYXJomx5PDlpTaqgcl+gUMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCx0Y6naIdbjF2Qzgl4+1cxnC2nMB8GA1UdIwQY
MBaAFKhREadenTnMQw6oW40pIGDZ6KfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUZFUnAxNmRPY3hERHFoYmpTa2dZTm5vcDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jZDBiZGEtY2JiMi00OGYzLTlkZDIt
NTJkOGQ2ZTZkMjk4LzEvcUZFUnAxNmRPY3hERHFoYmpTa2dZTm5vcDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jZDBiZGEtY2JiMi00OGYzLTlkZDItNTJkOGQ2ZTZkMjk4
LzEvcUZFUnAxNmRPY3hERHFoYmpTa2dZTm5vcDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHrhlnC0
HoInWtBIwV3HYxOUDn3KLUpB+kYcSQ8KAdhnd3PDCVSmgRV65Q/sB3qZ0GAGN9To
OEDlSMVZiu80k5hRO/hJ1583KnDX6xJ+wtIqZ13niULQvgq1Fr/I/I2eqYwk9mmR
TUOO2xg0vwgF/E9a67N4bHkfBMP45jlQ3VeX2R5o29xhx6SBUrm34m77istGsen9
ch3Y1+8njKQpTe3GYuuUiKURXWKkws4VRxH/3EcjD31BagfIuaM/4dZe5FCDwSp9
3y6UBh2POx65dtCz5cT8+T50pCunpjyYPvR6Q5N9WWd/yXfWWWmwwC61Rt0IeZZ5
9XI0xr0fhT0ktQ==
-----END CERTIFICATE-----
Generated at Tue Oct 20 04:29:10 2026 by rpki-client