Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
File:                     Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json)
Hash identifier:          P7DfIMaujsm02fZwCVBjmgTRqGxfj2VTQqlwfLbP21M=
Subject key identifier:   0B:26:D5:4C:FC:25:7D:D9:33:AC:AC:81:B9:5A:9E:CA:7B:C0:76:37
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Certificate issuer:       /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial:       01A18608D4D42B648B97AAFAC6AB513D64CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
Manifest number:          1A15
Signing time:             Thu 29 Oct 2026 05:01:27 +0000
Manifest this update:     Thu 29 Oct 2026 05:01:27 +0000
Manifest next update:     Fri 30 Oct 2026 05:01:27 +0000
Files and hashes:         1: 6yATERdiX2wk0GFwUGUYwsoJuDI.roa (hash: KtrtZMXlX/Ho5Lrtg2Wv7jNJ8tmVGjU+3M5mJcyVobY=)
                          2: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: yx1XFlw++vydSou41uIs3xOIP9VLWVZCx/RIa+a9vP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:86:08:d4:d4:2b:64:8b:97:aa:fa:c6:ab:51:3d:64:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
        Validity
            Not Before: Oct 29 05:01:27 2026 GMT
            Not After : Oct 30 05:01:27 2026 GMT
        Subject: CN=0b26d54cfc257dd933acac81b95a9eca7bc07637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:49:01:f0:94:c4:6f:8e:c9:01:43:7d:7c:91:
                    0b:56:bb:b2:07:85:8c:b7:a0:c8:50:54:e9:fc:06:
                    af:23:84:90:5a:f1:35:9b:db:c1:da:92:25:50:a8:
                    45:9a:13:c2:c8:1c:3a:c9:ed:d1:ba:8b:57:e5:5b:
                    66:15:47:7c:25:bf:d4:ce:58:9e:81:99:f2:01:a7:
                    23:60:75:35:54:c4:89:f0:97:b3:01:d5:90:c1:e4:
                    76:69:c0:e5:27:04:fe:d6:27:a2:5e:ea:3f:2b:98:
                    08:4c:b2:8f:d6:45:fb:00:fa:7b:48:c9:e1:87:97:
                    8a:a0:d5:dc:8f:52:5e:ce:b4:ee:d5:48:46:26:1f:
                    58:ba:f0:c3:4f:94:be:aa:1e:a3:ba:51:fa:02:dd:
                    49:b6:aa:5b:ae:c8:a2:8f:8c:53:96:ca:6f:5f:e8:
                    6c:81:df:f1:a1:44:d7:67:ab:83:50:97:b2:a1:4d:
                    28:3c:ad:f9:5a:08:fb:64:84:99:00:35:61:e5:c0:
                    8b:94:ff:9c:43:07:8c:ab:9d:20:30:74:01:25:db:
                    01:3b:61:bb:3c:9a:f8:ae:9e:93:a6:c0:07:1a:43:
                    0e:50:07:87:fe:9d:a2:0d:40:5b:7f:4b:e7:d9:56:
                    76:27:91:b2:2c:c0:93:e0:3d:c5:d4:a5:c0:70:19:
                    21:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:26:D5:4C:FC:25:7D:D9:33:AC:AC:81:B9:5A:9E:CA:7B:C0:76:37
            X509v3 Authority Key Identifier:
                keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d0:da:bd:93:47:e6:8e:28:a1:6c:86:79:ec:5f:d4:44:2c:
         51:c9:48:3a:08:5e:fc:33:0f:d6:d7:f7:95:ce:b9:b9:8d:c0:
         8c:c2:2c:0e:4e:08:9f:ad:a0:16:27:c3:b0:0a:db:b5:e4:60:
         ab:c3:80:7a:c9:4d:49:15:e2:0f:5a:f1:08:a8:54:02:d7:e0:
         3e:a1:69:fc:3d:fb:94:a1:e6:d8:be:3f:b0:52:56:99:f2:85:
         da:13:d9:dc:12:07:dd:6d:0e:37:d2:c5:80:81:d4:b3:8f:6f:
         c5:b1:26:1c:37:f2:de:64:dd:be:30:f3:64:53:d7:8b:a3:51:
         26:02:e5:2e:1d:a0:65:c3:4c:60:e8:f8:88:e8:95:f6:ff:ef:
         2a:6e:6a:95:56:71:93:78:c7:0a:e3:29:6e:f6:7a:e1:75:67:
         67:76:2e:c4:ef:ab:c8:6b:59:a9:c4:1c:66:48:60:51:b3:52:
         32:50:b8:f7:71:e5:a0:6c:bc:7a:c9:3d:df:ec:90:44:ad:40:
         12:89:19:a5:70:40:8b:ac:27:5c:99:b1:2e:a7:5c:3e:61:05:
         c0:b0:52:09:2d:5a:b7:8a:10:3e:2d:a3:a9:8d:8d:89:e1:f6:
         b0:db:66:e9:ec:33:3b:52:31:de:91:69:93:8a:20:a2:f3:13:
         8e:78:16:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGGCNTUK2SLl6r6xqtRPWTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMGU0MDI2Y2E5NjRjZjM1MTI5NDBiMjZiMTFlNjQ4NzFj
NDc5NDQwHhcNMjYxMDI5MDUwMTI3WhcNMjYxMDMwMDUwMTI3WjAzMTEwLwYDVQQD
EygwYjI2ZDU0Y2ZjMjU3ZGQ5MzNhY2FjODFiOTVhOWVjYTdiYzA3NjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEkB8JTEb47JAUN9fJELVruyB4WM
t6DIUFTp/AavI4SQWvE1m9vB2pIlUKhFmhPCyBw6ye3RuotX5VtmFUd8Jb/Uzlie
gZnyAacjYHU1VMSJ8JezAdWQweR2acDlJwT+1ieiXuo/K5gITLKP1kX7APp7SMnh
h5eKoNXcj1JezrTu1UhGJh9YuvDDT5S+qh6julH6At1Jtqpbrsiij4xTlspvX+hs
gd/xoUTXZ6uDUJeyoU0oPK35Wgj7ZISZADVh5cCLlP+cQweMq50gMHQBJdsBO2G7
PJr4rp6TpsAHGkMOUAeH/p2iDUBbf0vn2VZ2J5GyLMCT4D3F1KXAcBkhGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsm1Uz8JX3ZM6ysgblansp7wHY3MB8GA1UdIwQY
MBaAFEMOQCbKlkzzUSlAsmsR5khxxHlEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMzI0MTAtNDgzOS00MTc0LThkZTIt
MTExM2FlNTYzMzY5LzEvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8xMzI0MTAtNDgzOS00MTc0LThkZTItMTExM2FlNTYzMzY5
LzEvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtDavZNH
5o4ooWyGeexf1EQsUclIOghe/DMP1tf3lc65uY3AjMIsDk4In62gFifDsArbteRg
q8OAeslNSRXiD1rxCKhUAtfgPqFp/D37lKHm2L4/sFJWmfKF2hPZ3BIH3W0ON9LF
gIHUs49vxbEmHDfy3mTdvjDzZFPXi6NRJgLlLh2gZcNMYOj4iOiV9v/vKm5qlVZx
k3jHCuMpbvZ64XVnZ3YuxO+ryGtZqcQcZkhgUbNSMlC493HloGy8esk93+yQRK1A
EokZpXBAi6wnXJmxLqdcPmEFwLBSCS1at4oQPi2jqY2NieH2sNtm6ewzO1Ix3pFp
k4ogovMTjngW4g==
-----END CERTIFICATE-----
Generated at Thu Oct 29 08:04:57 2026 by rpki-client