Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
File:                     QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json)
Hash identifier:          25XJu5ELsVg8sDOu/7+Cf541ItMH+rN6pKFmprgZZ1Q=
Subject key identifier:   49:99:07:41:DD:87:14:3D:9C:E9:DD:F4:21:7C:B4:E7:B9:0A:D0:4A
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Certificate issuer:       /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial:       01A12241AF68EDFF641868984BE946480FDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
Manifest number:          1AA1
Signing time:             Fri 09 Oct 2026 20:01:32 +0000
Manifest this update:     Fri 09 Oct 2026 20:01:32 +0000
Manifest next update:     Sat 10 Oct 2026 20:01:32 +0000
Files and hashes:         1: 5Bwd_XnCpBq4Cag2pu6bO5I9VIA.roa (hash: eytyjkZwAv73scTtka+wDpj6hepaCfnJjuIuqglSirA=)
                          2: 9wbcMUG4q75E7YjhGVXHnPYT7YM.roa (hash: nEsfQpZm0sg/MSPEMCxg0Fs6SfpSZuGJLTA7MHD7Ovo=)
                          3: GyN2brNi0SyVzTIfSD630KlULEk.roa (hash: WuqJqU2d7Re2MFRsMAJ/7CUNdgg3R6YAy0ZwMSitoI0=)
                          4: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: TqsuhrGkZ+VGiMsScWrbvaKN/8H1rmslArQpmDtmZs8=)
                          5: iOH1McI9iTFIop-UJ1HA_U9if9E.roa (hash: jGsjtR/lt4692ZMHqph22xA5pSDg/jMmydFaGhjVUKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:22:41:af:68:ed:ff:64:18:68:98:4b:e9:46:48:0f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
        Validity
            Not Before: Oct  9 20:01:32 2026 GMT
            Not After : Oct 10 20:01:32 2026 GMT
        Subject: CN=49990741dd87143d9ce9ddf4217cb4e7b90ad04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:23:d3:77:6f:dd:85:73:76:b6:f2:d3:6e:73:
                    38:d1:98:50:e4:0a:18:49:33:c0:6a:4b:0b:9d:2d:
                    f5:d9:42:88:90:26:61:a4:c9:66:b7:2a:b6:c7:64:
                    95:77:14:e4:35:48:23:25:d2:77:f7:64:e8:cf:26:
                    4d:fc:87:63:54:59:9a:bc:21:63:f6:7b:de:cb:f5:
                    84:32:0c:92:05:00:da:45:62:0b:63:35:55:12:e8:
                    67:ce:e4:81:09:90:bf:68:f1:08:19:42:c0:8c:c2:
                    9c:b5:15:17:1f:d4:e6:15:d0:09:03:b2:f9:03:ed:
                    c3:23:a2:a9:fc:52:a4:d1:5a:08:d1:5d:e7:2f:99:
                    29:c4:fb:cd:6b:55:3c:72:15:2d:6f:49:b9:f0:cd:
                    55:bd:99:a2:51:54:a7:bb:1d:24:aa:83:b4:ca:de:
                    f3:b2:15:e3:38:8a:98:a4:0a:f4:75:ef:43:ef:63:
                    7b:a9:21:7c:e3:a9:03:c2:ba:4f:32:2b:af:49:65:
                    29:9e:50:b0:23:2e:a1:79:af:bb:bc:8a:12:cf:3b:
                    b4:32:3c:26:46:55:2d:3f:cc:39:ec:03:62:3d:07:
                    22:1f:88:c3:9d:4e:12:38:d8:9e:ad:f7:6a:bd:5d:
                    9b:62:69:0a:36:5f:88:f5:18:8b:77:e2:67:09:f1:
                    72:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:99:07:41:DD:87:14:3D:9C:E9:DD:F4:21:7C:B4:E7:B9:0A:D0:4A
            X509v3 Authority Key Identifier:
                keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:81:c7:e9:07:e5:db:18:6c:74:b9:0c:c9:e2:37:c9:08:cb:
         f7:11:90:58:be:c5:fa:70:92:38:65:9c:71:1d:9d:39:12:89:
         ba:21:90:b9:e1:96:4a:0e:31:f3:97:0e:e8:67:af:e7:e5:c2:
         48:d3:dd:5c:d1:ba:e7:93:a0:0f:50:e6:5f:c2:96:97:45:11:
         bc:a3:f5:c8:00:fb:70:45:a3:2b:66:83:af:a8:cc:11:18:b1:
         9a:f7:f7:69:62:7d:c8:2d:55:ff:60:70:c8:05:1c:35:ac:c5:
         a3:fe:27:ca:9a:fd:d6:8e:14:ea:59:34:fe:5b:70:16:e3:2f:
         e5:d9:22:51:df:4c:b2:00:6c:3e:65:f3:1f:63:30:89:3e:2d:
         72:df:4a:09:8f:c6:0d:85:0a:6d:a8:76:a1:27:95:57:ec:84:
         1c:86:ed:1e:9a:03:a9:86:2d:f4:01:bc:ce:fa:a8:50:24:49:
         7d:1c:09:b8:ee:3c:e8:ca:e0:35:d4:1d:41:40:fc:2d:9e:a3:
         eb:3a:7f:1b:ee:df:8e:54:fd:f0:ea:bb:a2:27:9f:be:22:49:
         22:82:36:d1:0c:05:c0:33:67:e2:1b:8c:e4:4a:64:6e:5f:14:
         25:6e:a0:84:00:4d:90:31:04:5c:10:21:d4:3e:f0:3b:16:e4:
         00:ed:25:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEiQa9o7f9kGGiYS+lGSA/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDU1Yjc4ODM2YTkzZmI2ZjllYzlmYTdhNzllZDliOGJl
YTJiYTEwHhcNMjYxMDA5MjAwMTMyWhcNMjYxMDEwMjAwMTMyWjAzMTEwLwYDVQQD
Eyg0OTk5MDc0MWRkODcxNDNkOWNlOWRkZjQyMTdjYjRlN2I5MGFkMDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiPTd2/dhXN2tvLTbnM40ZhQ5AoY
STPAaksLnS312UKIkCZhpMlmtyq2x2SVdxTkNUgjJdJ392TozyZN/IdjVFmavCFj
9nvey/WEMgySBQDaRWILYzVVEuhnzuSBCZC/aPEIGULAjMKctRUXH9TmFdAJA7L5
A+3DI6Kp/FKk0VoI0V3nL5kpxPvNa1U8chUtb0m58M1VvZmiUVSnux0kqoO0yt7z
shXjOIqYpAr0de9D72N7qSF846kDwrpPMiuvSWUpnlCwIy6hea+7vIoSzzu0Mjwm
RlUtP8w57ANiPQciH4jDnU4SONierfdqvV2bYmkKNl+I9RiLd+JnCfFyQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmZB0HdhxQ9nOnd9CF8tOe5CtBKMB8GA1UdIwQY
MBaAFEDVW3iDapP7b57J+np57ZuL6iuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMt
OTJlOGJlNjI3OWJiLzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMtOTJlOGJlNjI3OWJi
LzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIHH6Qfl
2xhsdLkMyeI3yQjL9xGQWL7F+nCSOGWccR2dORKJuiGQueGWSg4x85cO6Gev5+XC
SNPdXNG655OgD1DmX8KWl0URvKP1yAD7cEWjK2aDr6jMERixmvf3aWJ9yC1V/2Bw
yAUcNazFo/4nypr91o4U6lk0/ltwFuMv5dkiUd9MsgBsPmXzH2MwiT4tct9KCY/G
DYUKbah2oSeVV+yEHIbtHpoDqYYt9AG8zvqoUCRJfRwJuO486MrgNdQdQUD8LZ6j
6zp/G+7fjlT98Oq7oiefviJJIoI20QwFwDNn4huM5Epkbl8UJW6ghABNkDEEXBAh
1D7wOxbkAO0lxQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 00:42:48 2026 by rpki-client