Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File:                     Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier:          qJhY8T/vuH0kmtpaAMac6YLn/zNLS4eCm+bMajyAdjk=
Subject key identifier:   45:AB:D2:D5:BD:A9:2E:0B:0C:AE:3B:27:06:15:47:8D:FD:1D:25:BA
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer:       /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial:       01A147CEDA97B26192387C6152F1ABD96532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number:          18F8
Signing time:             Sat 17 Oct 2026 03:01:41 +0000
Manifest this update:     Sat 17 Oct 2026 03:01:41 +0000
Manifest next update:     Sun 18 Oct 2026 03:01:41 +0000
Files and hashes:         1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: iy+38V6OM4CwcGuv9OiyZOjMr/oPXarpHbt3yT4jEb4=)
                          2: eqD1-410xbl18T07yvCtbxsa1Ms.roa (hash: IGD8JZ6WIWOq2cxiQwhCeO2QQ+pd/nJb7mzndaBQXkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:47:ce:da:97:b2:61:92:38:7c:61:52:f1:ab:d9:65:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
        Validity
            Not Before: Oct 17 03:01:41 2026 GMT
            Not After : Oct 18 03:01:41 2026 GMT
        Subject: CN=45abd2d5bda92e0b0cae3b270615478dfd1d25ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c9:08:9f:a5:26:09:f6:2a:5e:06:f1:86:a7:
                    9e:4a:aa:3f:41:6a:04:57:02:91:66:c6:81:61:fe:
                    b8:93:49:f6:41:52:62:e5:56:fe:27:39:45:29:48:
                    5a:5d:4d:3f:03:a3:a5:96:0f:66:35:14:1c:0b:76:
                    12:1a:2c:97:28:07:bf:5c:36:94:fa:a3:f3:ca:80:
                    51:d3:35:3c:f6:e1:43:3d:df:73:60:68:49:70:bf:
                    07:36:e0:6a:e8:c5:bd:82:a8:2d:04:2e:91:81:03:
                    3c:54:43:dd:0d:b0:c9:be:c0:cb:90:85:0c:ed:d1:
                    57:41:b8:e9:b3:45:a3:b4:99:c0:0c:a4:54:e6:b0:
                    78:a1:1c:9c:ad:df:5f:ea:a9:50:48:43:25:8f:e4:
                    f2:c0:49:23:d1:ca:a4:75:c4:61:9b:03:fc:ec:26:
                    13:32:15:0f:39:64:de:51:18:56:41:f1:82:82:e1:
                    e9:75:e4:8c:43:88:8c:b4:bb:4a:66:83:42:f4:a5:
                    c2:50:83:97:5f:0f:9d:e2:40:a4:d8:0a:60:a2:c3:
                    78:86:ec:d0:41:fa:d2:a2:d2:ba:73:84:25:85:6c:
                    f2:0c:bc:a7:90:9a:43:1b:a5:08:eb:5e:01:e0:90:
                    e8:5c:33:8d:6e:5a:9d:cf:50:eb:7f:ba:f4:24:72:
                    55:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AB:D2:D5:BD:A9:2E:0B:0C:AE:3B:27:06:15:47:8D:FD:1D:25:BA
            X509v3 Authority Key Identifier:
                keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:03:8a:a6:e9:15:09:55:e0:6b:b7:78:ab:34:dd:8e:3c:09:
         33:62:9e:48:a2:e3:40:86:33:a0:7e:b9:dd:2a:09:0c:5e:72:
         ba:63:b5:12:c1:bc:48:b5:ea:7e:01:c9:0c:cc:9e:91:32:8f:
         6a:91:8a:ec:5b:03:f8:b3:48:0e:79:2b:32:2f:af:c3:0e:73:
         e0:fd:fc:2c:90:04:c2:ea:8e:fb:9a:a6:ef:5b:6b:db:25:ba:
         01:10:8f:cb:e8:38:68:7a:f9:12:d0:10:5b:c5:1f:e5:1b:1a:
         a4:27:d8:ec:7c:7c:50:9e:79:36:9d:12:ce:0e:f3:ad:dc:ae:
         19:d0:1d:12:95:3f:84:25:7d:90:31:88:17:3f:da:31:c2:2f:
         06:d7:07:7d:b2:68:56:f5:2c:92:7f:52:af:84:73:92:83:86:
         a0:c2:a9:e2:d5:be:eb:27:02:8b:94:6c:a8:ea:ac:c0:96:79:
         bd:eb:ea:b7:d0:6e:69:5e:e1:6b:ae:54:82:93:dc:7f:5d:5e:
         fe:d7:b8:2f:eb:8a:8e:da:fd:8d:4b:dc:98:56:a6:bf:67:f8:
         b9:6e:27:61:61:64:ba:e1:dc:18:c8:63:6d:7f:99:76:27:56:
         e3:dc:02:ca:5a:fc:d2:e0:1f:de:88:3d:fe:27:71:75:c8:49:
         5b:f8:76:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFHztqXsmGSOHxhUvGr2WUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYThlMjg5OTY5M2ZjYTAwYmQ4MDQxYmE4ODAxZjJkODg4
NjkxMDgwHhcNMjYxMDE3MDMwMTQxWhcNMjYxMDE4MDMwMTQxWjAzMTEwLwYDVQQD
Eyg0NWFiZDJkNWJkYTkyZTBiMGNhZTNiMjcwNjE1NDc4ZGZkMWQyNWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMkIn6UmCfYqXgbxhqeeSqo/QWoE
VwKRZsaBYf64k0n2QVJi5Vb+JzlFKUhaXU0/A6Ollg9mNRQcC3YSGiyXKAe/XDaU
+qPzyoBR0zU89uFDPd9zYGhJcL8HNuBq6MW9gqgtBC6RgQM8VEPdDbDJvsDLkIUM
7dFXQbjps0WjtJnADKRU5rB4oRycrd9f6qlQSEMlj+TywEkj0cqkdcRhmwP87CYT
MhUPOWTeURhWQfGCguHpdeSMQ4iMtLtKZoNC9KXCUIOXXw+d4kCk2ApgosN4huzQ
QfrSotK6c4QlhWzyDLynkJpDG6UI614B4JDoXDONblqdz1Drf7r0JHJVlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWr0tW9qS4LDK47JwYVR439HSW6MB8GA1UdIwQY
MBaAFEOo4omWk/ygC9gEG6iAHy2IhpEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xNGUwOTEtOTc5YS00ZWQ1LTlkNWUt
NDk1NDI3MGUyNTA3LzEvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xNGUwOTEtOTc5YS00ZWQ1LTlkNWUtNDk1NDI3MGUyNTA3
LzEvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwOKpukV
CVXga7d4qzTdjjwJM2KeSKLjQIYzoH653SoJDF5yumO1EsG8SLXqfgHJDMyekTKP
apGK7FsD+LNIDnkrMi+vww5z4P38LJAEwuqO+5qm71tr2yW6ARCPy+g4aHr5EtAQ
W8Uf5RsapCfY7Hx8UJ55Np0Szg7zrdyuGdAdEpU/hCV9kDGIFz/aMcIvBtcHfbJo
VvUskn9Sr4RzkoOGoMKp4tW+6ycCi5RsqOqswJZ5vevqt9BuaV7ha65UgpPcf11e
/te4L+uKjtr9jUvcmFamv2f4uW4nYWFkuuHcGMhjbX+ZdidW49wCylr80uAf3og9
/idxdchJW/h24g==
-----END CERTIFICATE-----
Generated at Sat Oct 17 12:40:29 2026 by rpki-client