Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File:                     01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier:          kEv69TiABLwtJ+VZzlsU7uNp9EWeBKJgY6UGdBqGjmA=
Subject key identifier:   3F:56:A7:A6:59:40:3A:00:2D:B1:D0:F6:30:FC:F6:9C:2D:13:02:30
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer:       /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial:       01A14B05FBE9EC7FF6D366B64353BE60ABE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number:          1AAC
Signing time:             Sat 17 Oct 2026 18:00:45 +0000
Manifest this update:     Sat 17 Oct 2026 18:00:45 +0000
Manifest next update:     Sun 18 Oct 2026 18:00:45 +0000
Files and hashes:         1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: jBFfaggDBH+skMJEnNwuQocEyve5ID/Ab8F4kv4kKac=)
                          2: uXxyOPGVnASS7u5ky0_kq_0zUmQ.roa (hash: 83RawsrluXe18GC2cGOGUx568BZVRaon+KIyn+++hqw=)
                          3: z4dC7BchYgJeEJVK0u1hQk0LX9w.roa (hash: eWL2mFtDMtr2WhkRkhhO2F6MQbo7HgvI3DvROQrIYRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 18:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4b:05:fb:e9:ec:7f:f6:d3:66:b6:43:53:be:60:ab:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
        Validity
            Not Before: Oct 17 18:00:45 2026 GMT
            Not After : Oct 18 18:00:45 2026 GMT
        Subject: CN=3f56a7a659403a002db1d0f630fcf69c2d130230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:ae:1b:b0:58:ed:96:52:80:56:2d:e3:d8:
                    4e:6f:e5:b2:27:3d:a9:d4:7d:62:86:0e:12:75:e2:
                    3e:c7:5d:3f:ca:f7:06:5b:f1:4e:36:61:ec:b1:41:
                    37:c0:df:49:90:d5:9b:29:20:a8:a9:e0:89:f3:1f:
                    b1:5c:a0:ed:67:a4:07:d0:17:69:3b:7b:2f:b6:5e:
                    87:be:67:c4:4e:b1:77:87:91:3a:6f:f7:b6:1d:84:
                    a8:d7:02:62:5b:c2:da:05:35:06:2e:86:75:0f:5b:
                    01:c8:ec:5b:ed:2a:db:73:f6:af:76:0c:5c:ba:42:
                    42:b6:29:eb:2a:85:3e:b0:c3:2b:3f:cb:15:8a:85:
                    8c:fa:6e:6e:32:9f:c1:ca:38:8b:f2:c2:51:21:70:
                    23:9e:aa:e7:ab:22:c2:7d:dd:10:96:c5:1a:d4:6a:
                    b5:04:82:55:b3:3b:f3:99:89:f7:ee:13:26:d2:f6:
                    79:fb:54:5b:65:6d:59:1b:73:92:53:95:66:35:de:
                    82:b6:2d:ed:38:74:df:bf:87:12:ce:aa:9a:e1:bd:
                    5e:5d:df:a5:c6:53:10:7b:23:93:91:c0:44:aa:88:
                    97:63:05:5c:83:8a:a1:aa:3c:cf:08:4d:b7:12:84:
                    64:f3:54:ca:52:4e:1e:2b:e8:a4:4c:a4:57:40:67:
                    e1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:56:A7:A6:59:40:3A:00:2D:B1:D0:F6:30:FC:F6:9C:2D:13:02:30
            X509v3 Authority Key Identifier:
                keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:1d:e9:15:13:90:0e:c9:93:e8:cb:fc:e2:db:3c:c4:3d:5e:
         7f:36:8d:fd:05:6f:5c:78:87:dd:e6:02:57:14:69:f6:3c:9c:
         5b:4d:3a:0a:68:8d:ad:90:5a:4e:70:5f:dd:38:a5:55:a7:aa:
         bf:f8:ec:14:33:e2:a2:64:62:ea:bf:a1:c1:13:04:10:8b:35:
         7a:08:57:bb:09:63:1b:5a:75:dd:90:c9:90:90:9d:7e:08:c4:
         97:1a:80:88:ea:92:fc:00:1f:59:19:08:6f:cf:15:bf:c7:1b:
         51:a0:77:fd:97:19:a1:82:0e:4e:75:3f:d9:df:6b:61:b5:f3:
         b7:02:80:b4:8a:ff:ee:09:63:46:bd:50:56:d6:8f:29:0e:1c:
         c8:e7:80:e2:7d:b7:ef:b9:eb:bc:97:25:fc:8e:f4:db:9c:c0:
         9f:30:70:79:d2:b6:22:3c:c3:24:05:1d:48:0b:17:99:00:8a:
         2d:57:6d:08:77:1e:e0:dd:b4:5e:62:12:98:58:1e:2a:05:ff:
         3a:4b:5e:49:a8:aa:2b:a1:f5:9d:87:08:10:1f:a0:94:c1:70:
         1e:54:b5:cc:d0:57:e4:c5:b1:00:5d:c7:f0:74:bf:ce:17:e3:
         15:63:22:d7:75:d0:61:2d:75:12:72:55:b7:5d:ba:aa:06:e6:
         83:5a:98:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFLBfvp7H/202a2Q1O+YKvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTQwYjUxOGQ3NWZiZWZkNjE2YmZkOTRjZjA1ZmQyNWJh
NDg4YjYwHhcNMjYxMDE3MTgwMDQ1WhcNMjYxMDE4MTgwMDQ1WjAzMTEwLwYDVQQD
EygzZjU2YTdhNjU5NDAzYTAwMmRiMWQwZjYzMGZjZjY5YzJkMTMwMjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1OuG7BY7ZZSgFYt49hOb+WyJz2p
1H1ihg4SdeI+x10/yvcGW/FONmHssUE3wN9JkNWbKSCoqeCJ8x+xXKDtZ6QH0Bdp
O3svtl6HvmfETrF3h5E6b/e2HYSo1wJiW8LaBTUGLoZ1D1sByOxb7Srbc/avdgxc
ukJCtinrKoU+sMMrP8sVioWM+m5uMp/ByjiL8sJRIXAjnqrnqyLCfd0QlsUa1Gq1
BIJVszvzmYn37hMm0vZ5+1RbZW1ZG3OSU5VmNd6Cti3tOHTfv4cSzqqa4b1eXd+l
xlMQeyOTkcBEqoiXYwVcg4qhqjzPCE23EoRk81TKUk4eK+ikTKRXQGfhpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9Wp6ZZQDoALbHQ9jD89pwtEwIwMB8GA1UdIwQY
MBaAFNNUC1GNdfvv1ha/2UzwX9JbpIi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hY2VlOGUtNzc2MS00MTlmLWI0ODMt
YjMwMTYyZTNjY2MwLzEvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hY2VlOGUtNzc2MS00MTlmLWI0ODMtYjMwMTYyZTNjY2Mw
LzEvMDFRTFVZMTEtLV9XRnJfWlRQQmYwbHVraUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAax3pFROQ
DsmT6Mv84ts8xD1efzaN/QVvXHiH3eYCVxRp9jycW006CmiNrZBaTnBf3TilVaeq
v/jsFDPiomRi6r+hwRMEEIs1eghXuwljG1p13ZDJkJCdfgjElxqAiOqS/AAfWRkI
b88Vv8cbUaB3/ZcZoYIOTnU/2d9rYbXztwKAtIr/7gljRr1QVtaPKQ4cyOeA4n23
77nrvJcl/I7025zAnzBwedK2IjzDJAUdSAsXmQCKLVdtCHce4N20XmISmFgeKgX/
OkteSaiqK6H1nYcIEB+glMFwHlS1zNBX5MWxAF3H8HS/zhfjFWMi13XQYS11EnJV
t126qgbmg1qYQg==
-----END CERTIFICATE-----
Generated at Sun Oct 18 03:14:39 2026 by rpki-client