Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
File:                     dqdYJumRIlpCn_ih5__cgEZkIN8.mft (raw, json)
Hash identifier:          dMscDZgdx6kMRKUu9wID2buNOrkXFT1OXWneTMAft+0=
Subject key identifier:   C1:B8:AF:43:E9:C1:87:11:69:68:07:C7:A6:8D:68:04:C5:D1:B4:1A
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Certificate issuer:       /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial:       01A1795EFC37B05DE975F610D3EFEC40CB42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
Manifest number:          1AEA
Signing time:             Mon 26 Oct 2026 18:00:30 +0000
Manifest this update:     Mon 26 Oct 2026 18:00:30 +0000
Manifest next update:     Tue 27 Oct 2026 18:00:30 +0000
Files and hashes:         1: 3lVoSteGkpKcde56m2WcsA8N-s0.roa (hash: 1XrtONYMpJVe4WnBQhEVaGnetVY+4paKXOigWmRK674=)
                          2: 72qqOl08Ng_75PrEX39wChvsHq8.roa (hash: wdAGiwDNclYEAAkLFN5CEwmjhcr+4EBdtbN76kXOOjo=)
                          3: AFJzhmH9R0mG2bUCJPJT6j8bKrw.roa (hash: EzibNTyau7BTPE7oIO9TUlGehtGq8uPVCAnORk3k9nM=)
                          4: HBckW3ER80MSeSiwpy-Z-q1qiGA.roa (hash: QBBHo4qiNBL+JHuv6YtHpt1D3ezGsz5yopdFgNvM84U=)
                          5: Jj6QniBhg0ekrss-TvVc94h0S2M.roa (hash: qf4l8DU2kkBt1QRzcva1hlT0ObLg86RVHmV+gl/DthY=)
                          6: M_Zrv0eTt-hhAHKM89cDFtPfvPI.roa (hash: 8QhFDfLhK8OB14NksFoRCKIZ2O0CQM/pbJL/g+vvAt4=)
                          7: Piwh6Gdq7GydD4rudpdk_H1-iJ8.roa (hash: wtN9D7HevPrfH3K/IMhwZNny7MHPmsA5+nenLp6rWiU=)
                          8: b4ESO_pvGgCqVp88yRCz-5OoSf0.roa (hash: gzB0VXXq99U/xkP9oWFBiaWwqsbZ9lY1uOT5L1wm/Fk=)
                          9: dKz_j_O-lAoD6qg2pO9vZUA4BGw.roa (hash: AKN2pF1PfbziQzZH+0SJyj3F9OOfW1sRqDb4wG8eZgw=)
                          10: dNznR1-S7vVnFASVh_hci4jZkMQ.roa (hash: zQ1QJ64mxnosKyQobzETFihGQBbENfar+9z/U7xN1lc=)
                          11: dqdYJumRIlpCn_ih5__cgEZkIN8.crl (hash: Il0gFdNCCHqmrw8YBRDBhEzuElgVz/ixnb43osTMiDc=)
                          12: fUNqCWuIckYGiVfEbuqCIkLI6d4.roa (hash: 2XlV9ynqjk3ChcE4Iw5juKC67TwbxBsySYHKnmHonQo=)
                          13: j2x4B6ObPzHT8ea8R_EMWP2PPik.roa (hash: X9UYUryQZPrf+c81HDCEnwfx3vw9iA0hQ/eJMGoOoMU=)
                          14: lkbj_rHQ3odPB7yMiampsN-UZno.roa (hash: qptKUULvCznnpcjyPdRsDYHUthdNfWlbjNhIIyjJ/gg=)
                          15: mcWyzJOHr9Zx7r67vsArKVYzm-M.roa (hash: jPJa6OTo4Vh6SlUAyeSF3ybtpQx5852t+NVU3VYBCWg=)
                          16: p5-KSOQJoRc-a4h6VGwthwBmpAw.roa (hash: Oaku+ye04iIHVUwLwL5t3yBGhVH08pyoMvs2MjpbNqY=)
                          17: qrN-Uu0M-3HDr-76__U4MO8Jem0.roa (hash: F/0Bv+YLgCLY8hUXxBuIT6dqQV4aBe4yFDyDrHdklVY=)
                          18: sN7KZAb0tSBb8kQXanj5RVDo87M.roa (hash: sNtlv5Kfns7Qub92+PG+1MiYKqG3uVLYzRGiFbw3ks8=)
                          19: u3HM98A-Q9MDGyUnaURhtvW-lGU.roa (hash: orjD4qXj9t+4NhQVjT8wKDidu8IPZ4dL81G059Mpu9c=)
                          20: vbIqeSU0561jYPf76GOTQkgqkkU.roa (hash: I6pxxL2tdL5sG8uXzs35tb/DbPA84Se4ObiynAzOPa8=)
                          21: xFb3afKCHZ5K-TLErHfTSuMJKOU.roa (hash: 6l4PHj5QdfEodyTxnZX/6jrZVq4xk62zNf4EfjYJEmo=)
                          22: y2z9eC0pey0L-F8Me0uxP0CdRNE.roa (hash: ynALlANptr3j2opU4Eof0BTlyqYbPLK8fhfTetUFwTw=)
                          23: ygWs-sHzivtfoMPPnMV6aV1UCv4.roa (hash: KjRCKq03kFFE3PyzvTA3OcOazG7q6LPfF+mD7puBZ4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 18:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:5e:fc:37:b0:5d:e9:75:f6:10:d3:ef:ec:40:cb:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
        Validity
            Not Before: Oct 26 18:00:30 2026 GMT
            Not After : Oct 27 18:00:30 2026 GMT
        Subject: CN=c1b8af43e9c18711696807c7a68d6804c5d1b41a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:9b:20:32:ca:88:10:bd:4b:08:82:49:86:
                    a9:73:76:35:e5:19:f2:31:c1:53:9e:45:0c:0c:df:
                    91:58:42:20:fd:6f:d3:db:14:37:13:1c:d8:ee:57:
                    1c:6a:b3:3a:4c:50:b5:43:09:75:ed:a7:b9:12:ed:
                    17:87:04:14:58:45:30:c7:c6:3b:e6:a2:66:1b:4b:
                    e2:1a:24:c5:69:82:59:36:81:ef:52:60:5b:51:b1:
                    b9:42:68:7d:78:5f:89:05:9a:48:29:9a:5f:74:47:
                    bb:ad:fb:3c:f7:66:41:99:12:8b:ee:71:24:18:8b:
                    64:5c:8b:f6:78:37:5b:36:ca:19:d0:3d:af:ee:2c:
                    af:65:7b:dc:41:d5:06:f0:da:58:7b:72:be:30:b9:
                    d6:ce:3f:51:21:9c:b0:dc:a1:5c:8b:e2:43:4a:cb:
                    39:59:b5:9f:b0:da:f9:53:10:bf:a9:19:5c:87:ba:
                    e2:0c:6e:89:0a:46:01:75:00:83:99:b3:5c:72:a9:
                    8b:6e:b9:41:63:98:56:79:7a:cf:58:da:9f:a9:97:
                    83:d9:a5:e4:d9:99:80:2e:63:a1:e1:ab:4f:20:1c:
                    6c:7f:fb:25:61:b6:cb:a6:f2:8a:c5:23:53:e0:35:
                    a3:d3:65:3c:e8:a1:b0:ed:02:1f:08:d6:81:e0:0f:
                    cb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B8:AF:43:E9:C1:87:11:69:68:07:C7:A6:8D:68:04:C5:D1:B4:1A
            X509v3 Authority Key Identifier:
                keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ec:fd:05:87:e7:96:ea:73:67:5b:7b:de:67:ad:b0:82:c0:
         a8:04:3f:c5:da:3f:a7:3c:c8:7e:97:25:a9:40:7a:0e:58:50:
         9f:c0:bd:43:79:0b:a6:8e:03:26:98:3f:d7:7b:e2:c1:69:02:
         3a:97:d3:05:44:09:d3:d3:e3:02:10:da:3c:f4:5d:b4:c5:10:
         ce:be:cd:23:95:03:71:9e:b2:2a:23:e7:18:ac:c8:38:ac:e4:
         ae:7a:2c:36:2d:d8:64:69:ef:e8:7e:f0:71:57:13:38:cb:ca:
         d1:25:4d:a2:4a:1d:f4:83:64:a9:74:da:27:4c:2f:be:7a:4d:
         8a:3b:8b:00:73:6e:d2:0b:b3:63:72:c4:0b:eb:79:ea:12:78:
         df:36:9b:79:e1:c0:bc:08:4d:68:f5:e3:98:e0:f1:6f:8a:9f:
         da:f9:48:a9:e0:1b:68:f5:4e:7b:3f:4f:fc:15:f7:3d:52:9b:
         3b:cf:3a:04:bd:b3:8a:42:a7:48:01:f8:ab:df:b0:74:22:58:
         9e:5c:d4:cb:6b:9f:bf:73:8f:fa:5e:3c:b9:d9:7e:ce:c5:a2:
         d0:46:4f:ac:71:9d:7c:a2:e1:70:2a:32:87:b9:9e:65:e1:53:
         89:cf:4f:cd:6f:ab:94:16:73:9e:27:a7:78:5a:d4:4e:3d:60:
         a1:bc:0f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:53:21 2026 by rpki-client