Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File:                     QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier:          bw7VagirXKnCB4VVji2GsjwUwpMcXqyOlLnBKbxwghQ=
Subject key identifier:   63:44:F5:17:CE:F3:BF:08:EC:02:B6:03:A2:CE:E9:D8:FE:88:7F:D9
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer:       /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial:       01A174DDD0F9BE3610BCFB30BC4DF0466B64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number:          1B72
Signing time:             Sun 25 Oct 2026 21:00:56 +0000
Manifest this update:     Sun 25 Oct 2026 21:00:56 +0000
Manifest next update:     Mon 26 Oct 2026 21:00:56 +0000
Files and hashes:         1: 1-PpSoq1Ya0W2udvlzhtC8_rJnFE.roa (hash: RzIa719racr7e2aKSO4FsE1OPwBOUiGx13LkPx0y2h0=)
                          2: 12xCLSUF_Loq09QVMGwwZ_HsjG4.roa (hash: o1ff57ROPr5n/T1159c2N0eMkrIG67OK/zOCTFl7+dU=)
                          3: 1mT7gtWrBnHp6BgmY-vuUYsAbpk.roa (hash: /o52vCC5uMHohb5WVzatUS8J5UV2zNcnsElli+mr6XY=)
                          4: 2Ai39wk2IJN5A9va_AC40LFzqWU.roa (hash: Izeu/F4EjqSAc8sBUPxcx6Por3E0vpcdBzZDlLmLG7g=)
                          5: 7ctFBaAA77hxUugJvpz5-Q2O2So.roa (hash: n0ZJ9RY1JNNGdLrdJEoDFvXyOiokkCUsJwdY3Jy8Fn0=)
                          6: 8WvuVHfrKiqm58ncBUbhJtDUAlA.roa (hash: YXJPCq9y+4Q48oB8ztWgqpdSUGgVi6ahHrCFlwCyIE4=)
                          7: 8d1aydDuAEXfQxk3W61T0a2FlkU.roa (hash: 8cEwTeGphfNoRcWbQQHMMDzfPHsfDPvaBz9Pwfy3hzg=)
                          8: ANbnsWF-JLHqejX2Av48LjJnZgs.roa (hash: 9c6ZcPPtFkeQLm/HVh4TWJ/ypShUXQ5+qlsGmHtD58M=)
                          9: Gj_Gr-caeyvMu7IQ2gfNN7YRqnQ.roa (hash: ro4ubpZ2t4HfdmEU7x4fQb0eH2RexmTzvNHwvvx6Dvo=)
                          10: H-sJquMx0B9zaiEd2E3ZAwhMIY0.roa (hash: Qz5OBe4elYp8/kALuORw31r1oAByBlhUSN3w2LlmMFc=)
                          11: JOafdpaRUl88PgC90VL5xpYKcjE.roa (hash: ZlP86SaiYRDtD1HSEnrHmifz4GMyg0MfqdTIcETJl8k=)
                          12: JjaZurkudx-UKkST6atudJj3AIU.roa (hash: dRfqQWg4++hOM2BitZpArCb7fIVbWUXdPwFxajSITpU=)
                          13: Jx-zSBaAtSzGRnoxua09_B35hu8.roa (hash: ygx6YAI4Qrh2nCUmG7dLJ2U8ftvHeQnhJCeN0vQjB9w=)
                          14: NKWHCYzNepWbSsW4Fdxn7US24kg.roa (hash: GmLgFf+CDpdyG1pPKSxadcb5exdWjVthfa2WpFffGps=)
                          15: OQTikXZqi1CYO00Z7qqLK_7l6sY.roa (hash: ATNTfM8Dm6LwV9QBEZffW+T0+RYubS9zfbW6xwmllZo=)
                          16: PSTGomZ1ObMqQqpGdFQH1zvbUBQ.roa (hash: afnFmYkWhiN9F+mMJUqb2R4wmcsEqxZEBV5b+sQWhDE=)
                          17: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: 6l3VuPB0dBNue2+zGICBMSZRUj/4VQbMKMb1LEvsBFQ=)
                          18: RgoVuEZzrB6iPeoDkS2VZ5UJEjM.roa (hash: 7eIfiRclCfgNOCGCCRoqijzNwFTi6X6q7V5T2mrxMRU=)
                          19: WnopdAwOrDN6y_1U890g8zUPsu4.roa (hash: cEqS9xsX7GzUgGfzRbri3RLqsLO7DlebLIf8kF5GpUM=)
                          20: Yhh2c5k5LhDOhYle3vNv0DyJTfw.roa (hash: 5rg3Zm+cCVynOrEVlUJGi6HocKZPKPBOqGy0u2RMqq8=)
                          21: aCrBApyDuKijuFQpX20WNh4unzc.roa (hash: RUfwA5/PkM//szQwil20D8d8AR2S1/InQiu9dABqgmA=)
                          22: bOwoeGXB2wja2W0aIO7cJEqFn0c.roa (hash: TjrVmHhe6qTnTA+IeFLgJO+nqktu8K34RwVXqHJjTPE=)
                          23: c0KJ2P5Rcttwd8OKo1GAKG5wK0I.roa (hash: 6gfKNgu/Js8TKH019d+hABZigWq8HE/Xz+piBtXfQX0=)
                          24: c_kw6nE0oumRgbuqbPqt_w9G3LQ.roa (hash: QlTafF5Fr8rTazn6yLXkkaTtTBuaFwA0hjaqj2PVi2w=)
                          25: efYx2Naa9G8N6_bwOdBPLtUpvIc.roa (hash: 2vbWTgOzCvgtKkoB/3a/tGvRVc8asQkkZl4xhzqkRcU=)
                          26: eg-dC7-vvWJiDSYDZiH6xaOQOec.roa (hash: sC47Vwp9nCQThUP6arB1TrIxrRHoT/y10hj3aRxTokc=)
                          27: eif41r_-3o6gJdDyF1qc7lHSk-o.roa (hash: RCii2XB1uZ3fKnOwfPOjCgjXmQunfteSRzbCjDDdRqw=)
                          28: fZc85iYki7_TA9d3ZLKIvDIo01U.roa (hash: K+rKoIjKGnK/y+UT2HAY6NqeaibCmdTHERcABQrSICk=)
                          29: gNAyrBVoFaWeREXzr33gHPdjLuc.roa (hash: 9t3cAZDPUcX15JFGLDAbTwFu6aPFTfX5yposYhTNwLc=)
                          30: gfZI4IQTC0ezUMVBFSxLag6FqdI.roa (hash: uT4KnHoYYVdfwJWh8J9YXV6bwz4BpsS1dLHpl2DqdnI=)
                          31: kuKa_RbKBF-8apG5eNAA7ZGrk64.roa (hash: 8GXXom7MNoYYjacR6QL5aPwdId669M5Mrd0b2uKdYxk=)
                          32: nBGgopArMxJvSfmIUE11Wl93-ps.roa (hash: 5WIipJqJLXOOwsFI1wknOH4BL7VaCS3h8HSy0SSHWz4=)
                          33: nH7gC0A7tnD9psDoH0OJ31kdyeU.roa (hash: R/7TBye0UFeEZNsucxTN2YluARZDvoPXoxZFH713aK0=)
                          34: qR_EeezWFCPCT7yS3YotmHi1U-8.roa (hash: Bq96CSZJdHMqj8GDPwJjcNN91UyIT9CdiAOchD6OW2E=)
                          35: r4gojXpCfVfMsKXfq3IcqeiE878.roa (hash: T3XdnQciJ8C4NOqpLw2BOhgbQDlMQMjf7FhYEgWICW0=)
                          36: s0P0zrsw80VgnPS3_ivxkr8CHak.roa (hash: mmzJAojtZdun1M9hZZOT0W/OKF4bt3iycS8+Z0cqRSI=)
                          37: uL4cGH9AG30pYk7CgMWU5cvovug.roa (hash: YQx6iN3YW6G5UzZHEmhYZJ0tBhIhkpMoitrqcMp/AxA=)
                          38: vanYw-zAW1B03Ap8EGM-X-9boHo.roa (hash: KXoGvYV70RLHSvH90MfYI8MYqhrQDWCU5Yc8cSTrOI0=)
                          39: w4XR7nwro5wjJE5JtKRUqOgZf5k.roa (hash: KiumyrEOqBPi+erguwa4/UEHEHESuukLcClHJxfKhnI=)
                          40: xCWFYaCHS1SmC6D3vKe_9B5xNtU.roa (hash: VaDEX7+rHt7AB/5KA8HDgGsaeYRJWAqH4EieOHlomdE=)
                          41: yzb33J_TSUGconlwuZQ-C76Iv3M.roa (hash: pbqUjm0+WTbb3C+E1+eqMTIxj74nhtNQcn4k0MNN9wQ=)
                          42: z5vbRW8wOtq9Cnc40Flnbx_mCcs.roa (hash: DK3Ht6MAwJXp1omMFEpDwrTT9qGRGCxH1TMLy6c7wYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 15:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:dd:d0:f9:be:36:10:bc:fb:30:bc:4d:f0:46:6b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
        Validity
            Not Before: Oct 25 21:00:56 2026 GMT
            Not After : Oct 26 21:00:56 2026 GMT
        Subject: CN=6344f517cef3bf08ec02b603a2cee9d8fe887fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:3c:d9:f3:4f:b0:2f:ed:29:76:48:a9:ca:6e:
                    50:6b:11:40:bd:00:50:82:0f:34:f7:15:2f:a3:e7:
                    89:c8:22:6c:cb:bb:27:95:09:b7:27:2c:e1:1b:cc:
                    21:e5:9f:d9:84:b0:be:f9:44:9f:e5:fb:3e:04:1d:
                    93:21:a4:5c:5e:2a:fb:06:0b:1f:58:4f:1a:8e:ef:
                    ab:73:8e:f1:3f:4e:64:40:8e:db:13:8d:bc:00:7d:
                    91:9c:79:f1:44:4e:0a:84:a7:00:56:ab:55:7a:05:
                    a0:66:9a:72:28:23:64:dd:0c:8d:70:96:be:9b:d8:
                    59:ab:3e:c7:cc:84:24:b6:68:72:a3:2d:6b:f4:ce:
                    85:1f:d7:b4:9e:22:b9:2a:fc:38:20:0d:54:4f:c0:
                    c9:76:57:d0:f3:1d:7e:49:4d:1d:db:72:32:9d:f8:
                    1a:16:9a:97:af:a4:91:bb:50:ac:a0:0a:3e:b1:06:
                    a6:de:1b:78:a9:cb:6d:34:d1:56:96:73:0c:1b:0a:
                    4b:66:37:72:3b:f5:dc:e0:e3:64:9c:4d:3e:77:35:
                    e0:04:3d:ea:bc:ac:fa:c5:a9:98:3e:be:d6:e2:57:
                    f6:05:cf:6a:d7:78:9e:3f:92:fe:1d:be:79:78:e5:
                    38:4a:ab:80:f6:29:ea:d1:0a:d0:39:a9:f9:62:74:
                    bd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:44:F5:17:CE:F3:BF:08:EC:02:B6:03:A2:CE:E9:D8:FE:88:7F:D9
            X509v3 Authority Key Identifier:
                keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:bc:ef:f3:d6:2f:c8:3f:86:13:ac:f9:63:38:f9:78:e4:31:
         2e:3d:c9:ce:55:9d:0f:b6:cf:a0:31:d6:87:bf:68:bc:71:fe:
         08:0b:d3:5a:bb:7c:99:3b:f0:17:56:e2:94:6b:51:33:34:95:
         0f:52:c0:e4:d3:4b:75:9f:e1:cf:59:0d:80:4f:e0:55:8b:70:
         a8:e3:bd:0e:d9:60:44:50:8c:f0:4a:2e:82:66:61:45:82:94:
         30:4d:b4:31:25:14:10:70:53:42:e9:78:2d:03:2c:18:30:dd:
         a5:d7:b2:2e:22:e0:00:f5:0c:5d:27:60:4e:6f:85:a9:82:19:
         f2:a9:ff:42:03:ec:26:64:f1:8f:c1:d6:e4:c0:63:60:46:fd:
         81:36:ab:67:9d:5f:75:f8:ee:91:bc:1d:fb:18:c4:af:5a:a1:
         ab:e0:02:8f:60:a1:ad:6c:32:87:18:ad:43:1e:d3:e3:6c:fb:
         c6:18:8c:d0:88:ea:0e:47:57:54:0b:3b:4b:4e:dd:2b:b6:75:
         6f:81:d5:31:ed:c2:64:3a:5f:a3:4c:f9:44:46:42:3f:a0:00:
         92:fc:45:a1:b3:0c:3c:b7:37:99:17:c9:1b:4c:df:6a:ea:d0:
         8d:36:ba:77:c2:ad:b1:ca:62:02:a6:b0:12:4b:24:02:a3:7c:
         14:17:fb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----