Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File:                     qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier:          tKQXje0I2euT+GBL9pC9tJImgXBQsbuMA5pKO/NHojc=
Subject key identifier:   62:E1:A3:05:56:11:F6:43:0A:08:9C:28:38:03:80:E2:2B:E1:DD:1A
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer:       /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial:       01A154E52E72D1C4462AF87B80706924DCD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number:          0E86
Signing time:             Mon 19 Oct 2026 16:01:08 +0000
Manifest this update:     Mon 19 Oct 2026 16:01:08 +0000
Manifest next update:     Tue 20 Oct 2026 16:01:08 +0000
Files and hashes:         1: F46yJZ1_ZtncXoXA1gqtcgSgxks.roa (hash: 4xB/U3VlaMjmD/USOo57UOd/gQlGLMP8wxFd8TZyukw=)
                          2: HDDUkhzgUOHlF7zi4DlC9_ywpGI.roa (hash: ob4GjBCgXhSHBsKltA+N4Bhya5B54UhmYsdP2O0rGB0=)
                          3: MdEs2m-IrHBQCFgn-JlK3Bk7udc.roa (hash: Mo1ibwxe067q8YpdjNU7MlbnD4U4Cl8kB+EULAl5HTk=)
                          4: RBsCiDLoRPUa1sEuFbaN0WsP-WA.roa (hash: 2UgnVxLlLuAenOg0pXBuNFTqN4KE476l2bQbrokLRSM=)
                          5: SZxwFn-rv4YHYIn11rPhhdZalEE.roa (hash: qGdnGUtcjilIGvYv6gZqj/DBGuFNWX/5F8NZ1f7ELoQ=)
                          6: dQp1_bF-2hRgZhoSUp2j8-OiYAI.roa (hash: Ktp1XPuBOcTSPdwju+u+aKIoeTI5yi+j2Ty+pydNaPA=)
                          7: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: SgAhwhIZopvHrgfrANDAsTRsBaFVvT+0J99i9eIYgLA=)
                          8: vzfccsFprMOY9JYnROqdf595jyk.roa (hash: 9XgNIgYKyBtoz7QowqkqXgsGwcOR4Db53f7gkwA+doE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:54:e5:2e:72:d1:c4:46:2a:f8:7b:80:70:69:24:dc:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
        Validity
            Not Before: Oct 19 16:01:08 2026 GMT
            Not After : Oct 20 16:01:08 2026 GMT
        Subject: CN=62e1a3055611f6430a089c28380380e22be1dd1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:24:06:26:48:89:da:55:e9:18:60:0b:51:
                    4b:af:09:57:e5:0f:fd:c4:34:6d:8d:16:53:5a:f9:
                    34:5f:c7:b6:b6:f7:a9:66:5f:e2:4a:b0:50:4c:f7:
                    49:0d:f9:3d:76:50:50:f5:e1:ad:08:ce:6e:ea:ee:
                    b1:18:28:38:58:30:ae:d6:71:4a:70:71:be:af:10:
                    a3:4f:cd:29:16:d9:5b:05:cf:92:bd:84:fb:d7:f1:
                    b4:34:9c:68:99:ff:ad:c2:00:b0:2a:7c:27:6b:79:
                    c8:30:35:54:74:e6:c1:2b:d2:7d:23:37:79:67:a7:
                    87:22:1b:83:2d:3d:89:6e:3e:87:5c:79:97:ec:c3:
                    88:25:b4:35:6e:28:9f:26:67:cd:14:44:07:2b:9d:
                    77:99:45:0f:d1:2d:ba:15:d1:72:e7:01:9d:d1:80:
                    44:1f:41:25:b4:14:72:8a:3d:32:30:52:dc:ff:a9:
                    ca:60:3f:7a:da:ae:a5:21:83:49:9a:9d:f8:ba:30:
                    7d:a7:90:4b:7d:55:7a:60:9c:6f:55:72:a0:0e:5c:
                    7f:47:30:5f:c8:1e:de:b8:fa:b2:e9:72:20:53:45:
                    0a:79:c3:d6:a0:62:47:be:69:1c:ca:54:87:5f:42:
                    19:bd:30:5f:f1:98:cd:73:1d:83:17:32:8f:6c:8f:
                    46:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E1:A3:05:56:11:F6:43:0A:08:9C:28:38:03:80:E2:2B:E1:DD:1A
            X509v3 Authority Key Identifier:
                keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:04:c7:85:18:c0:98:69:24:53:d0:d9:0c:f9:56:60:ab:f7:
         ed:ac:0b:56:8f:29:c1:64:11:82:ef:f8:90:d8:81:83:d3:12:
         38:b8:14:0a:5f:64:90:0a:10:ec:14:ab:3c:4c:f0:8c:e4:d3:
         10:20:33:47:d6:ff:4d:e5:33:8d:03:c1:d6:0b:b9:e6:10:2b:
         67:a3:bc:ea:a1:de:9d:06:04:9e:4a:b1:f8:84:1d:7f:e1:fb:
         61:9d:3d:07:ea:90:4c:10:54:56:60:2a:35:a6:90:4a:7e:bf:
         4d:af:12:bc:02:7e:6a:c3:bf:53:b5:b3:62:4a:10:a5:53:00:
         c1:b4:c5:02:47:fa:f1:89:84:c8:e0:51:4f:d0:8f:62:8a:ce:
         09:d6:2c:ee:d7:10:ba:f3:20:59:af:65:9f:9f:a2:c0:6d:cf:
         5d:f0:5d:5d:e4:ab:26:d9:11:f7:78:6b:2d:65:c5:ec:02:d5:
         1b:d8:d0:48:bd:d4:16:4b:ee:f3:6a:60:c4:6e:97:a4:6e:36:
         16:91:48:fb:35:5a:be:70:1d:bf:c8:07:9a:b7:64:55:06:7e:
         c2:9d:e5:3e:e8:88:fe:d6:7e:da:f8:65:69:eb:60:25:fd:ba:
         bd:be:9c:21:d5:99:84:15:2b:f5:0f:64:ed:7b:97:d7:89:8a:
         3b:d9:16:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFU5S5y0cRGKvh7gHBpJNzTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjViYWUyNTc3OGJlZWQ4ODgwYzA4ZGYyZDNmMzdmYzM3
YWJjMWUwHhcNMjYxMDE5MTYwMTA4WhcNMjYxMDIwMTYwMTA4WjAzMTEwLwYDVQQD
Eyg2MmUxYTMwNTU2MTFmNjQzMGEwODljMjgzODAzODBlMjJiZTFkZDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ8kBiZIidpV6RhgC1FLrwlX5Q/9
xDRtjRZTWvk0X8e2tvepZl/iSrBQTPdJDfk9dlBQ9eGtCM5u6u6xGCg4WDCu1nFK
cHG+rxCjT80pFtlbBc+SvYT71/G0NJxomf+twgCwKnwna3nIMDVUdObBK9J9Izd5
Z6eHIhuDLT2Jbj6HXHmX7MOIJbQ1biifJmfNFEQHK513mUUP0S26FdFy5wGd0YBE
H0EltBRyij0yMFLc/6nKYD962q6lIYNJmp34ujB9p5BLfVV6YJxvVXKgDlx/RzBf
yB7euPqy6XIgU0UKecPWoGJHvmkcylSHX0IZvTBf8ZjNcx2DFzKPbI9GpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLhowVWEfZDCgicKDgDgOIr4d0aMB8GA1UdIwQY
MBaAFKhluuJXeL7tiIDAjfLT83/DerweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTkt
MWI2Zjc1MGNmOWEyLzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTktMWI2Zjc1MGNmOWEy
LzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgTHhRjA
mGkkU9DZDPlWYKv37awLVo8pwWQRgu/4kNiBg9MSOLgUCl9kkAoQ7BSrPEzwjOTT
ECAzR9b/TeUzjQPB1gu55hArZ6O86qHenQYEnkqx+IQdf+H7YZ09B+qQTBBUVmAq
NaaQSn6/Ta8SvAJ+asO/U7WzYkoQpVMAwbTFAkf68YmEyOBRT9CPYorOCdYs7tcQ
uvMgWa9ln5+iwG3PXfBdXeSrJtkR93hrLWXF7ALVG9jQSL3UFkvu82pgxG6XpG42
FpFI+zVavnAdv8gHmrdkVQZ+wp3lPuiI/tZ+2vhlaetgJf26vb6cIdWZhBUr9Q9k
7XuX14mKO9kWvg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:53:56 2026 by rpki-client