Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
File:                     QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft (raw, json)
Hash identifier:          eGtbJHi/PRhjmOa5/RHTzWmw+2Y42o8I0R101gMK8jA=
Subject key identifier:   8E:71:1C:AF:31:0B:F1:C8:C0:95:48:F6:1A:9B:9C:D4:91:56:0D:43
Authority key identifier: 40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64
Certificate issuer:       /CN=4017b4c9f01da83469a9851f95106e396fd25e64
Certificate serial:       01A176CBDF8B675A9157CB89302E0F81F9D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
Manifest number:          0141
Signing time:             Mon 26 Oct 2026 06:00:34 +0000
Manifest this update:     Mon 26 Oct 2026 06:00:34 +0000
Manifest next update:     Tue 27 Oct 2026 06:00:34 +0000
Files and hashes:         1: 9z84m-kebT8cdB-4tut3KLWmbhQ.roa (hash: tJspMU+tMRDYHrt52hzcYgBJTQsCCMP09cWPHPzuZFA=)
                          2: QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl (hash: 96REsdc2vjb4w9yvsCEwgE6c58aI+CrcjQHK5L+bgKM=)
                          3: UyuDpsThd0HTxIHLtl_AcLRLcgU.roa (hash: cR9/I8Oh8wt0pXLSLn6pWKFwtuW+7P/mjqHujGnIbq8=)
                          4: bbCeI0gcrdJEbQysLJxjANiohZE.roa (hash: oG8FmKmodUCgjzGLEM0eyGJW2mVDzSmINHpgvQW+IsE=)
                          5: tgvXIki0g-pfbDcyTN4Jty571wU.roa (hash: aBHUTes6NUct+J0pVH5+kLoc6/IlFtoI9S3mihoYFaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:cb:df:8b:67:5a:91:57:cb:89:30:2e:0f:81:f9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4017b4c9f01da83469a9851f95106e396fd25e64
        Validity
            Not Before: Oct 26 06:00:34 2026 GMT
            Not After : Oct 27 06:00:34 2026 GMT
        Subject: CN=8e711caf310bf1c8c09548f61a9b9cd491560d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:b2:21:81:ae:0a:49:de:cd:97:3b:ca:d1:
                    ad:6f:29:53:c0:44:68:f3:2e:a0:71:36:54:47:5b:
                    50:f9:9e:cb:7d:eb:f0:2e:48:83:4a:95:b7:73:f3:
                    51:ef:f3:16:97:dd:fb:bf:1b:55:91:4b:33:5e:f7:
                    5e:cc:9f:c8:c8:e6:4c:83:09:a6:f1:16:a2:cb:78:
                    f8:c7:d5:f5:89:ba:48:ca:d4:c5:83:8e:d1:87:98:
                    5d:ec:0f:2b:51:19:91:e1:24:57:90:df:39:28:12:
                    6a:ef:b8:64:cc:c7:4b:27:b5:a4:e7:61:3d:23:ee:
                    e5:5f:aa:fb:33:5d:73:70:07:74:5f:be:80:79:17:
                    d5:f4:e0:3e:b6:91:78:bc:53:80:43:d4:75:18:a8:
                    a1:7a:01:b6:ca:85:45:d4:48:89:57:0e:b7:71:11:
                    2a:03:14:c3:ef:7d:7e:8b:da:81:18:9e:dc:cc:5e:
                    64:ba:b6:28:0d:00:db:98:40:aa:e7:55:91:d1:34:
                    a9:73:b1:c9:43:1f:c8:13:09:56:78:7b:37:d0:49:
                    cc:a4:a5:c4:58:a6:a2:64:c3:c8:c7:c4:e3:15:a6:
                    9c:1b:7d:b1:5a:58:a5:6a:a2:49:eb:63:26:30:81:
                    7f:2b:c8:ac:dc:2c:c5:25:0c:e0:08:6f:fc:c7:c1:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:71:1C:AF:31:0B:F1:C8:C0:95:48:F6:1A:9B:9C:D4:91:56:0D:43
            X509v3 Authority Key Identifier:
                keyid:40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:27:bd:81:9f:c0:16:6d:d8:ad:ff:5f:07:10:76:60:b5:bb:
         3c:33:78:95:b9:ad:8c:f8:e4:fc:ff:fb:38:ca:28:30:f7:a8:
         ee:69:69:96:7d:e6:50:92:40:ef:96:a0:a7:d2:af:0d:02:c3:
         64:04:45:3a:bc:18:87:31:0d:02:4b:f5:b0:de:4a:70:27:83:
         79:47:fa:89:15:5f:93:9c:ee:ef:67:b0:00:c3:90:b9:c1:d1:
         ec:fe:87:88:01:0e:d2:bc:af:3a:8a:05:f6:22:d6:41:f6:ce:
         87:9c:a2:95:1b:02:d7:cc:0a:93:e1:c1:09:e5:54:bd:41:3e:
         1e:ff:82:63:d9:21:e7:18:19:a8:6d:c9:7b:6f:eb:54:6c:b1:
         2c:47:04:13:92:21:1c:18:7c:c3:dd:48:3c:f1:7d:e3:c7:40:
         6d:ee:77:ec:a9:88:e5:77:cc:62:e7:4a:d7:fc:f9:33:09:37:
         16:02:f7:3a:16:c6:c1:d0:16:63:ed:5e:f0:8f:a4:7c:1a:ff:
         08:0d:a9:69:67:e4:27:5d:36:77:97:3c:88:1e:1b:67:ad:2b:
         99:cf:5b:3e:5b:a9:69:38:45:66:3d:41:46:75:25:48:91:aa:
         32:0f:2e:bc:18:6f:8a:1d:9b:37:76:bc:40:ec:3e:71:cc:a4:
         fd:b6:c4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:19:59 2026 by rpki-client