Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File:                     qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier:          Vtv7Y3HYavyKK/MFBTRor4dE18HE+c4X5E/EjvFo4CE=
Subject key identifier:   45:23:6C:13:96:03:C7:B9:7D:E2:F0:6E:C2:9D:78:F5:CB:0D:FA:25
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer:       /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial:       01A17F6232F0F075252E08FC3622D10CC495
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number:          100B
Signing time:             Tue 27 Oct 2026 22:01:44 +0000
Manifest this update:     Tue 27 Oct 2026 22:01:44 +0000
Manifest next update:     Wed 28 Oct 2026 22:01:44 +0000
Files and hashes:         1: R6fKmNiL6DPYHGHsgrQhdxRjogw.roa (hash: KlrIoUKqLYU4rd9VeTGSXIJFZfzjhsMmFKFxCnepX50=)
                          2: ThcE502VHh7nDHiwu3z750fA_jI.roa (hash: nZbm/T+Jniaq7ToA4MEmQ7fWhUfWYilhhXfFms2U7ZQ=)
                          3: VyAWND_OasnYuRme0Q6yAU_fUQw.roa (hash: c2ejCdGHIJHwK7lWa3CclVna1o7khnE1y7hWMzg9fC0=)
                          4: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: MNhsSqClqqDRPFFWMmFUy+Ny2P1iCRnHKjDczIN2Y/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:62:32:f0:f0:75:25:2e:08:fc:36:22:d1:0c:c4:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
        Validity
            Not Before: Oct 27 22:01:44 2026 GMT
            Not After : Oct 28 22:01:44 2026 GMT
        Subject: CN=45236c139603c7b97de2f06ec29d78f5cb0dfa25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:46:f1:7f:c7:5c:7d:09:21:c7:82:f9:14:16:
                    ce:e5:e1:ea:80:c4:ad:a2:5d:42:26:ef:23:fc:35:
                    36:77:a3:f5:d0:5f:1f:b9:e7:ec:7d:63:52:eb:69:
                    f4:2f:4e:7d:58:63:b0:5d:b1:70:c9:68:a2:57:e1:
                    26:00:bc:44:3e:49:56:70:74:07:9b:0d:aa:69:b0:
                    ec:8d:7a:9b:d3:9b:19:92:40:b1:b1:2a:ce:00:c5:
                    3c:2d:f7:1a:f5:ae:62:ff:7d:bb:99:02:65:41:9d:
                    41:85:fd:3d:4c:67:21:4a:cc:8d:6e:6f:ad:78:8c:
                    70:88:19:ea:fe:cb:c5:23:b8:3e:b9:9b:12:97:0f:
                    13:e8:c3:ce:f1:99:b7:fc:5a:8c:2a:04:ab:5c:78:
                    1d:b6:8e:ba:08:96:88:a1:c9:df:0b:66:4a:8d:a2:
                    1c:7a:1c:bd:47:0e:54:c8:3e:3b:41:6f:7c:90:16:
                    cc:05:cc:03:77:03:13:4e:95:2c:1e:da:51:2f:5b:
                    28:3a:43:da:48:f6:97:10:c2:ab:fa:d7:48:36:ef:
                    8c:11:0e:5e:4f:eb:5d:13:01:cf:e5:1a:08:b2:78:
                    3d:8a:50:f0:9f:eb:b5:37:15:48:b7:ff:50:68:a9:
                    e4:34:40:a7:37:63:84:7c:9f:2c:a5:bc:00:ed:c3:
                    10:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:23:6C:13:96:03:C7:B9:7D:E2:F0:6E:C2:9D:78:F5:CB:0D:FA:25
            X509v3 Authority Key Identifier:
                keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:82:be:96:fc:5c:ab:11:e8:ec:5f:58:97:14:6e:0b:87:2f:
         a4:a5:86:31:74:58:98:b2:8e:64:4f:04:c8:73:d5:f8:d6:69:
         73:d4:e3:1f:e4:59:f9:4a:90:58:50:06:a7:45:2c:8b:cc:3a:
         e8:cb:07:5c:72:51:32:d5:2a:c6:76:44:05:ba:9c:49:5c:f0:
         d4:e9:70:89:92:c9:c0:76:c0:26:54:1e:e8:d6:b2:ed:7c:fe:
         9c:85:61:42:d0:aa:e9:f5:aa:c1:4b:ed:c2:d6:b9:f8:55:c7:
         64:69:da:6b:a7:4c:ce:cc:d1:e0:00:29:b4:0f:97:b6:0f:b2:
         41:b4:52:d6:0d:87:23:01:7e:28:00:a9:5f:c0:16:31:34:14:
         8c:4a:3b:66:61:95:f8:a8:4a:46:88:ed:96:8f:52:ed:43:a6:
         b8:42:2f:f3:b9:60:24:dd:aa:24:3d:07:32:86:db:05:98:ab:
         66:8f:13:23:b8:20:8c:23:c0:90:3c:b5:be:ab:fb:6a:de:52:
         71:8c:98:65:d2:a1:39:71:08:4d:06:60:ff:f7:2e:66:ea:80:
         bc:cb:98:08:9f:46:23:45:4a:cc:b9:80:bf:53:94:fe:ba:f9:
         3d:90:5a:e8:3a:00:cf:f1:96:67:9a:fb:02:99:5c:65:89:92:
         15:8e:37:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/YjLw8HUlLgj8NiLRDMSVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MDEwY2ViMjBmMmUwNzZhM2YwMDAyNzFhNWMzNzU3NjFi
ZWMyZjUwHhcNMjYxMDI3MjIwMTQ0WhcNMjYxMDI4MjIwMTQ0WjAzMTEwLwYDVQQD
Eyg0NTIzNmMxMzk2MDNjN2I5N2RlMmYwNmVjMjlkNzhmNWNiMGRmYTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ubxf8dcfQkhx4L5FBbO5eHqgMSt
ol1CJu8j/DU2d6P10F8fuefsfWNS62n0L059WGOwXbFwyWiiV+EmALxEPklWcHQH
mw2qabDsjXqb05sZkkCxsSrOAMU8Lfca9a5i/327mQJlQZ1Bhf09TGchSsyNbm+t
eIxwiBnq/svFI7g+uZsSlw8T6MPO8Zm3/FqMKgSrXHgdto66CJaIocnfC2ZKjaIc
ehy9Rw5UyD47QW98kBbMBcwDdwMTTpUsHtpRL1soOkPaSPaXEMKr+tdINu+MEQ5e
T+tdEwHP5RoIsng9ilDwn+u1NxVIt/9QaKnkNECnN2OEfJ8spbwA7cMQ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUjbBOWA8e5feLwbsKdePXLDfolMB8GA1UdIwQY
MBaAFKgBDOsg8uB2o/AAJxpcN1dhvsL1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mNDQ0YWEtYWU4Yy00ZDE0LWEzYTMt
NDlmNjVjNmE0OGJmLzEvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mNDQ0YWEtYWU4Yy00ZDE0LWEzYTMtNDlmNjVjNmE0OGJm
LzEvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJoK+lvxc
qxHo7F9YlxRuC4cvpKWGMXRYmLKOZE8EyHPV+NZpc9TjH+RZ+UqQWFAGp0Usi8w6
6MsHXHJRMtUqxnZEBbqcSVzw1OlwiZLJwHbAJlQe6Nay7Xz+nIVhQtCq6fWqwUvt
wta5+FXHZGnaa6dMzszR4AAptA+Xtg+yQbRS1g2HIwF+KACpX8AWMTQUjEo7ZmGV
+KhKRojtlo9S7UOmuEIv87lgJN2qJD0HMobbBZirZo8TI7ggjCPAkDy1vqv7at5S
cYyYZdKhOXEITQZg//cuZuqAvMuYCJ9GI0VKzLmAv1OU/rr5PZBa6DoAz/GWZ5r7
AplcZYmSFY43qQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:21:58 2026 by rpki-client