Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft
File:                     JQQakk7oOTLBjogOQerd-nzyy7M.mft (raw, json)
Hash identifier:          OkB4N3YxibbmEpY40eyFV5hVAN6DjUuqp9T65BSAhPY=
Subject key identifier:   18:6A:2C:3D:4A:22:74:9E:10:58:8F:16:F0:2E:FC:E4:A4:3F:5A:2B
Authority key identifier: 25:04:1A:92:4E:E8:39:32:C1:8E:88:0E:41:EA:DD:FA:7C:F2:CB:B3
Certificate issuer:       /CN=25041a924ee83932c18e880e41eaddfa7cf2cbb3
Certificate serial:       01A147CF13D65DDB5692B675B710A146AE0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JQQakk7oOTLBjogOQerd-nzyy7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft
Manifest number:          0123
Signing time:             Sat 17 Oct 2026 03:01:55 +0000
Manifest this update:     Sat 17 Oct 2026 03:01:55 +0000
Manifest next update:     Sun 18 Oct 2026 03:01:55 +0000
Files and hashes:         1: JQQakk7oOTLBjogOQerd-nzyy7M.crl (hash: aBdij6KT/u57M+h1WsOarcGdikUcyxIQ5HHbrBW7AlE=)
                          2: gqBVZEVuiZ-zx9jxMYipRTJwia4.roa (hash: j0pbo/Vqg06cGHRaMHKMNgMf3A2mm2wCn/7xVagvqms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JQQakk7oOTLBjogOQerd-nzyy7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:47:cf:13:d6:5d:db:56:92:b6:75:b7:10:a1:46:ae:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25041a924ee83932c18e880e41eaddfa7cf2cbb3
        Validity
            Not Before: Oct 17 03:01:55 2026 GMT
            Not After : Oct 18 03:01:55 2026 GMT
        Subject: CN=186a2c3d4a22749e10588f16f02efce4a43f5a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:fb:bf:66:79:90:99:e9:0d:59:49:ec:0f:
                    9e:bc:09:3f:83:fc:e9:fa:0d:af:9a:e7:60:56:c5:
                    cb:a0:7e:bf:dd:1a:b6:51:68:08:ae:32:8c:68:73:
                    0b:c5:2c:ed:c5:d3:63:8e:e3:35:80:d2:0a:ed:06:
                    e1:18:39:92:8f:ec:51:c8:2c:bb:68:70:b1:36:3f:
                    23:b4:c8:1d:13:cd:ea:d1:6a:39:fc:be:af:06:7e:
                    4f:61:35:5f:37:b4:ea:2d:d7:29:ae:15:d3:12:72:
                    82:24:18:fb:a3:93:ee:4d:84:43:5d:aa:5e:7c:c8:
                    35:c1:b9:c4:6c:6a:48:4c:30:58:9c:39:cb:1f:5e:
                    cd:6a:32:da:72:7f:c3:e5:2d:e4:c6:86:be:99:ff:
                    16:ff:01:ed:61:3b:10:33:e6:1f:97:1a:c5:aa:da:
                    19:6a:65:61:90:7d:d4:ca:a1:fc:75:a7:08:79:9d:
                    f2:4e:d8:5b:78:ae:4e:89:e7:0a:d9:e2:20:1e:d0:
                    61:01:bf:04:96:44:9c:9f:80:92:42:49:dd:79:bb:
                    23:d4:29:b6:93:ef:52:f3:5a:28:08:2e:af:26:30:
                    de:b3:3d:01:7d:a5:56:ee:37:ca:8b:6a:af:7f:fa:
                    ea:cc:4a:0c:c1:de:e6:aa:c2:39:57:69:f9:e1:74:
                    5f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6A:2C:3D:4A:22:74:9E:10:58:8F:16:F0:2E:FC:E4:A4:3F:5A:2B
            X509v3 Authority Key Identifier:
                keyid:25:04:1A:92:4E:E8:39:32:C1:8E:88:0E:41:EA:DD:FA:7C:F2:CB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQQakk7oOTLBjogOQerd-nzyy7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/JQQakk7oOTLBjogOQerd-nzyy7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c8:6a:e5:f5:ae:4a:0d:59:65:76:92:be:d7:c9:24:3a:1d:
         43:54:ec:67:ab:ed:8d:36:aa:7a:f1:77:9d:ba:d4:f2:ee:3a:
         8a:51:4c:db:3d:d3:65:24:d7:3d:1b:eb:8b:68:de:64:d9:b3:
         d8:d8:99:da:1d:d0:01:39:ab:dc:24:1b:3d:a8:b6:16:f7:05:
         53:68:6f:dd:de:3f:72:38:43:0b:9c:cc:9e:b3:24:02:c5:6d:
         ca:43:c1:1a:5b:f2:18:dd:56:49:b9:00:cb:a9:64:2b:cc:6f:
         d6:1a:21:d5:d0:37:20:0e:7e:a9:a2:38:8b:c9:a7:f6:41:01:
         05:4e:f9:1c:3d:a1:3f:3a:b4:47:60:a5:a7:30:6b:a2:60:6c:
         9e:e3:47:0e:9e:53:52:ce:01:74:1c:60:6d:04:75:57:55:e4:
         a7:95:0c:62:84:ac:d1:18:d5:a1:1f:1d:19:06:23:7c:d3:ad:
         40:bb:b6:f8:3a:f0:a7:d9:5a:83:b9:6b:ff:ac:fb:b8:9c:f8:
         30:50:c2:e4:03:83:47:01:41:36:80:d3:60:84:0d:71:18:03:
         43:1e:93:db:95:56:5d:91:ba:1f:0f:e3:4a:3d:2c:71:b8:a0:
         2a:63:52:c7:b3:c9:92:ca:bc:42:5a:34:15:17:93:42:a1:f0:
         bb:cb:af:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFHzxPWXdtWkrZ1txChRq4OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MDQxYTkyNGVlODM5MzJjMThlODgwZTQxZWFkZGZhN2Nm
MmNiYjMwHhcNMjYxMDE3MDMwMTU1WhcNMjYxMDE4MDMwMTU1WjAzMTEwLwYDVQQD
EygxODZhMmMzZDRhMjI3NDllMTA1ODhmMTZmMDJlZmNlNGE0M2Y1YTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsn7v2Z5kJnpDVlJ7A+evAk/g/zp
+g2vmudgVsXLoH6/3Rq2UWgIrjKMaHMLxSztxdNjjuM1gNIK7QbhGDmSj+xRyCy7
aHCxNj8jtMgdE83q0Wo5/L6vBn5PYTVfN7TqLdcprhXTEnKCJBj7o5PuTYRDXape
fMg1wbnEbGpITDBYnDnLH17NajLacn/D5S3kxoa+mf8W/wHtYTsQM+YflxrFqtoZ
amVhkH3UyqH8dacIeZ3yTthbeK5OiecK2eIgHtBhAb8ElkScn4CSQkndebsj1Cm2
k+9S81ooCC6vJjDesz0BfaVW7jfKi2qvf/rqzEoMwd7mqsI5V2n54XRfTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhqLD1KInSeEFiPFvAu/OSkP1orMB8GA1UdIwQY
MBaAFCUEGpJO6DkywY6IDkHq3fp88suzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlFRYWtrN29PVExCam9nT1FlcmQtbnp5eTdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zN2JkYjctOWI5My00NmFiLTlhMTUt
NDJhNDhkYmMyNTIxLzEvSlFRYWtrN29PVExCam9nT1FlcmQtbnp5eTdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zN2JkYjctOWI5My00NmFiLTlhMTUtNDJhNDhkYmMyNTIx
LzEvSlFRYWtrN29PVExCam9nT1FlcmQtbnp5eTdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8hq5fWu
Sg1ZZXaSvtfJJDodQ1TsZ6vtjTaqevF3nbrU8u46ilFM2z3TZSTXPRvri2jeZNmz
2NiZ2h3QATmr3CQbPai2FvcFU2hv3d4/cjhDC5zMnrMkAsVtykPBGlvyGN1WSbkA
y6lkK8xv1hoh1dA3IA5+qaI4i8mn9kEBBU75HD2hPzq0R2ClpzBromBsnuNHDp5T
Us4BdBxgbQR1V1Xkp5UMYoSs0RjVoR8dGQYjfNOtQLu2+Drwp9lag7lr/6z7uJz4
MFDC5AODRwFBNoDTYIQNcRgDQx6T25VWXZG6Hw/jSj0scbigKmNSx7PJksq8Qlo0
FReTQqHwu8uv4A==
-----END CERTIFICATE-----
Generated at Sat Oct 17 05:50:31 2026 by rpki-client