Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.mft
File:                     qeYaOcqwlqd1rl65N0mg67NnEoU.mft (raw, json)
Hash identifier:          eDo1Jsi8yhvAAE8uD3wxcmxuVPcWlTfrLjABa+tXjrQ=
Subject key identifier:   23:89:38:26:38:E2:7E:65:85:1A:F8:CF:C2:4E:F1:BB:B0:68:47:77
Authority key identifier: A9:E6:1A:39:CA:B0:96:A7:75:AE:5E:B9:37:49:A0:EB:B3:67:12:85
Certificate issuer:       /CN=a9e61a39cab096a775ae5eb93749a0ebb3671285
Certificate serial:       01A17FCF311ABFAA6F2C1C7D22CCE90D4C29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qeYaOcqwlqd1rl65N0mg67NnEoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.mft
Manifest number:          0140
Signing time:             Wed 28 Oct 2026 00:00:47 +0000
Manifest this update:     Wed 28 Oct 2026 00:00:47 +0000
Manifest next update:     Thu 29 Oct 2026 00:00:47 +0000
Files and hashes:         1: 5O-01ndXn91lvA7IGVp_7JD4C-I.roa (hash: nMoMotkyMIOIoR19nWnqbdZxJYSLaTBAftysCvWr7wQ=)
                          2: H5RC6IGh5Sbx9PEDoFiqbRt3ynU.asa (hash: n2QJ0n4EloMxuDW9dgN6ie/KWyMZurH7F5vYNP7+oXA=)
                          3: oekYsitCnhsBLEDUo2OKvfy3f9c.roa (hash: 9ar9NhbD7Igy6b/ldj4/mv2tjbrOn9f4QbaYWVwOYjg=)
                          4: qeYaOcqwlqd1rl65N0mg67NnEoU.crl (hash: jkXgp+6Y/rrkguvyImWp5RLG/XQ5g3+DfZlhrcqJqeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qeYaOcqwlqd1rl65N0mg67NnEoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 00:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:cf:31:1a:bf:aa:6f:2c:1c:7d:22:cc:e9:0d:4c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9e61a39cab096a775ae5eb93749a0ebb3671285
        Validity
            Not Before: Oct 28 00:00:47 2026 GMT
            Not After : Oct 29 00:00:47 2026 GMT
        Subject: CN=2389382638e27e65851af8cfc24ef1bbb0684777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fa:8f:c3:25:c3:bf:68:2f:d0:d8:ba:4f:96:
                    fe:bb:89:04:dd:78:2c:52:e2:f8:fa:78:e2:90:05:
                    7e:ec:ad:c2:0a:ac:3b:16:2f:21:cc:f9:1d:27:38:
                    24:84:9d:f2:3f:10:9f:ae:6c:af:9d:7e:e8:e7:d9:
                    9e:8f:84:d1:4c:61:5d:9b:ae:2e:8c:34:24:26:15:
                    64:1b:d5:c0:f7:21:9a:d3:13:e5:05:c4:dd:98:ec:
                    44:82:de:75:64:1b:a6:d8:c6:cd:9d:40:49:0b:ac:
                    61:18:59:5c:80:c5:cd:85:2e:8c:22:36:43:00:f4:
                    d2:f3:0c:30:8a:e5:15:1d:a9:b0:84:f2:2b:3d:ef:
                    2b:2e:7a:92:2b:4d:db:38:fa:cd:7c:5e:4a:18:c1:
                    f1:70:09:be:a4:78:a9:d3:31:90:e3:a4:46:84:f8:
                    49:e5:09:a7:27:b8:1f:08:8d:30:2d:cf:28:ea:75:
                    ff:c8:94:09:82:a5:5d:76:29:46:1b:f1:4e:e9:25:
                    e7:2a:05:85:bf:73:6e:51:ff:c8:2b:23:85:b6:e5:
                    a1:08:4c:9d:c9:8f:c4:b4:b0:0d:01:9d:84:9a:5d:
                    18:c8:33:01:a0:e7:5e:01:1e:2c:e6:45:fc:b0:7b:
                    0d:9b:df:53:c7:a3:42:71:30:34:28:44:e8:65:3c:
                    f4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:89:38:26:38:E2:7E:65:85:1A:F8:CF:C2:4E:F1:BB:B0:68:47:77
            X509v3 Authority Key Identifier:
                keyid:A9:E6:1A:39:CA:B0:96:A7:75:AE:5E:B9:37:49:A0:EB:B3:67:12:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeYaOcqwlqd1rl65N0mg67NnEoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/qeYaOcqwlqd1rl65N0mg67NnEoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:45:dc:56:d2:d1:35:07:fe:71:69:3d:5c:50:bf:3d:72:94:
         0a:c5:20:62:bf:97:61:ff:b6:74:e3:34:d8:72:6e:ef:16:1c:
         4c:00:69:a9:0f:97:f1:98:9b:60:74:48:f6:95:42:d8:d2:5e:
         21:6b:8b:28:e4:ee:92:f7:b5:f6:b5:6d:02:52:fd:5b:0b:b8:
         1b:f4:4c:79:f9:b0:9f:c8:6b:d3:30:9a:af:3b:7e:c0:aa:7d:
         53:22:57:6d:49:eb:d2:69:55:5b:cb:5d:1d:4f:3b:17:4d:0c:
         15:2c:a0:bf:24:39:a9:35:f9:5f:7d:1c:a7:34:ab:99:60:ba:
         3e:21:91:35:72:65:4b:6b:3f:3c:43:75:60:c6:d1:3c:16:e8:
         64:af:91:ff:3d:d5:64:dc:40:55:e6:51:48:50:7e:4d:a1:07:
         75:b6:17:13:ea:8b:8b:98:c5:ab:47:77:5f:c1:19:0c:e0:04:
         26:da:6c:e1:f0:0a:af:97:c2:0f:ea:89:1e:7f:d8:99:fe:86:
         d5:f2:96:8b:0d:e3:8f:0a:87:88:62:40:db:4c:c7:ed:dd:fd:
         e4:1a:5b:c5:9d:6b:38:2a:bf:fa:9f:17:16:a5:ef:79:f8:21:
         e0:c6:2f:00:87:cf:8a:2e:98:6b:0f:f6:16:94:d6:e7:ef:a5:
         66:6a:15:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/zzEav6pvLBx9IszpDUwpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZTYxYTM5Y2FiMDk2YTc3NWFlNWViOTM3NDlhMGViYjM2
NzEyODUwHhcNMjYxMDI4MDAwMDQ3WhcNMjYxMDI5MDAwMDQ3WjAzMTEwLwYDVQQD
EygyMzg5MzgyNjM4ZTI3ZTY1ODUxYWY4Y2ZjMjRlZjFiYmIwNjg0Nzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfqPwyXDv2gv0Ni6T5b+u4kE3Xgs
UuL4+njikAV+7K3CCqw7Fi8hzPkdJzgkhJ3yPxCfrmyvnX7o59mej4TRTGFdm64u
jDQkJhVkG9XA9yGa0xPlBcTdmOxEgt51ZBum2MbNnUBJC6xhGFlcgMXNhS6MIjZD
APTS8wwwiuUVHamwhPIrPe8rLnqSK03bOPrNfF5KGMHxcAm+pHip0zGQ46RGhPhJ
5QmnJ7gfCI0wLc8o6nX/yJQJgqVddilGG/FO6SXnKgWFv3NuUf/IKyOFtuWhCEyd
yY/EtLANAZ2Eml0YyDMBoOdeAR4s5kX8sHsNm99Tx6NCcTA0KEToZTz0NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOJOCY44n5lhRr4z8JO8buwaEd3MB8GA1UdIwQY
MBaAFKnmGjnKsJanda5euTdJoOuzZxKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWVZYU9jcXdscWQxcmw2NU4wbWc2N05uRW9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQt
YjI5ODEyYzNlNDY1LzEvcWVZYU9jcXdscWQxcmw2NU4wbWc2N05uRW9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQtYjI5ODEyYzNlNDY1
LzEvcWVZYU9jcXdscWQxcmw2NU4wbWc2N05uRW9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUXcVtLR
NQf+cWk9XFC/PXKUCsUgYr+XYf+2dOM02HJu7xYcTABpqQ+X8ZibYHRI9pVC2NJe
IWuLKOTukve19rVtAlL9Wwu4G/RMefmwn8hr0zCarzt+wKp9UyJXbUnr0mlVW8td
HU87F00MFSygvyQ5qTX5X30cpzSrmWC6PiGRNXJlS2s/PEN1YMbRPBboZK+R/z3V
ZNxAVeZRSFB+TaEHdbYXE+qLi5jFq0d3X8EZDOAEJtps4fAKr5fCD+qJHn/Ymf6G
1fKWiw3jjwqHiGJA20zH7d395BpbxZ1rOCq/+p8XFqXvefgh4MYvAIfPii6Yaw/2
FpTW5++lZmoVyA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:21:49 2026 by rpki-client