Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
File:                     quDn_oLDpsQmokwM_6ILDjowT6I.mft (raw, json)
Hash identifier:          TZQSWerkhIbJqQZbHCSrAmfTWacObRIiG3rlf6Pzuo8=
Subject key identifier:   7D:C7:A5:C7:1E:F2:86:9F:AC:06:B3:95:5F:31:42:0B:65:6A:70:9F
Authority key identifier: AA:E0:E7:FE:82:C3:A6:C4:26:A2:4C:0C:FF:A2:0B:0E:3A:30:4F:A2
Certificate issuer:       /CN=aae0e7fe82c3a6c426a24c0cffa20b0e3a304fa2
Certificate serial:       01A15741C8BCAA0992F4A2ECD472D9D123B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
Manifest number:          012B
Signing time:             Tue 20 Oct 2026 03:01:31 +0000
Manifest this update:     Tue 20 Oct 2026 03:01:31 +0000
Manifest next update:     Wed 21 Oct 2026 03:01:31 +0000
Files and hashes:         1: UL8l5IwcVO4oalkF_m08Q-lh138.roa (hash: Ft4/BZpxSn/GVsZnEbmyHTlyfLxd+14L0O7a+0FPi2w=)
                          2: quDn_oLDpsQmokwM_6ILDjowT6I.crl (hash: /gmeOkIau4piEVZFkJP6Re/wZMS5dBU9bkU1+T77rik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 23:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:57:41:c8:bc:aa:09:92:f4:a2:ec:d4:72:d9:d1:23:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae0e7fe82c3a6c426a24c0cffa20b0e3a304fa2
        Validity
            Not Before: Oct 20 03:01:31 2026 GMT
            Not After : Oct 21 03:01:31 2026 GMT
        Subject: CN=7dc7a5c71ef2869fac06b3955f31420b656a709f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:91:ba:2d:11:3c:21:30:69:2d:b9:bc:d3:36:
                    36:ed:ba:b0:6a:e1:df:a3:f6:a5:86:67:a9:0d:03:
                    fc:09:de:75:d0:44:39:ed:6e:58:03:c7:bd:05:4e:
                    ce:fc:62:ae:4e:9b:cb:80:2b:cd:52:40:ea:f5:92:
                    71:0c:41:94:d1:0e:f3:90:ac:0c:d7:66:28:df:c8:
                    03:b2:b8:32:41:e3:ef:ea:e5:30:d0:12:7e:15:d1:
                    d4:3e:de:8e:a5:a8:60:91:2f:f5:26:b6:73:0b:18:
                    cc:03:81:28:cd:04:2d:41:0e:67:0d:83:a3:9a:a9:
                    6a:93:a7:0b:e7:f8:49:b4:c1:c4:ac:16:97:57:4c:
                    17:c9:7d:a4:c2:be:3d:64:29:74:25:62:1f:3e:c8:
                    da:71:63:aa:ca:7e:53:92:19:40:06:f9:f6:8b:b2:
                    ff:89:20:16:2c:c4:c8:63:6b:16:ba:33:f2:09:18:
                    1c:bf:e5:75:5c:c1:d9:4b:0a:8d:59:30:eb:7e:e9:
                    97:04:69:c3:04:b5:98:ff:84:5b:c9:4c:eb:b6:f5:
                    5d:f6:3f:85:62:7d:4f:ff:b2:ec:91:69:c3:00:1e:
                    19:61:ef:85:e1:3c:11:c8:26:be:e8:a7:a4:ba:b3:
                    e8:5a:a9:7c:f8:43:08:db:e7:2f:e2:70:9a:c9:66:
                    d6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C7:A5:C7:1E:F2:86:9F:AC:06:B3:95:5F:31:42:0B:65:6A:70:9F
            X509v3 Authority Key Identifier:
                keyid:AA:E0:E7:FE:82:C3:A6:C4:26:A2:4C:0C:FF:A2:0B:0E:3A:30:4F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quDn_oLDpsQmokwM_6ILDjowT6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/quDn_oLDpsQmokwM_6ILDjowT6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:36:95:3a:4a:56:7f:8b:02:6f:b7:29:2e:f1:1d:69:7b:19:
         d5:63:bc:0f:45:94:87:ed:e8:75:d3:48:71:7a:b1:ec:d7:16:
         2a:f4:d7:d5:82:63:9c:10:dd:1f:cb:40:ae:ad:9d:8a:e8:1b:
         8d:b4:ee:d3:43:a9:af:39:41:48:ec:88:95:f9:f4:1b:b8:4d:
         82:29:eb:63:43:65:67:49:73:eb:6a:f4:9b:5a:5d:c6:cc:a5:
         fc:35:c1:d4:31:6e:f7:3b:3c:b1:1b:f8:aa:1c:9e:af:5d:82:
         a3:36:6c:e2:15:34:8e:69:00:9a:bd:ad:d1:a2:1b:98:7e:13:
         38:f9:84:5b:05:17:f3:7f:06:0f:bc:69:26:b7:8c:c3:95:e9:
         34:dd:b8:76:62:3d:ad:d6:bf:7b:4b:2d:c1:17:e8:1c:b2:ec:
         81:f6:84:4e:a2:37:1f:b9:fb:5b:2f:a0:32:49:40:4a:93:7f:
         87:d9:0c:b3:cd:86:4b:1f:71:a9:35:a4:5c:b3:82:d8:4b:52:
         6d:36:2e:4a:6a:6a:6b:5c:a2:31:0a:77:5f:84:ac:ee:88:04:
         e5:87:39:20:4c:87:30:49:25:54:d8:61:f1:a6:c0:c0:91:99:
         26:84:a7:6a:f6:f3:ea:a2:a5:de:86:57:39:64:72:41:8d:2a:
         ac:dc:a4:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFXQci8qgmS9KLs1HLZ0SO0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZTBlN2ZlODJjM2E2YzQyNmEyNGMwY2ZmYTIwYjBlM2Ez
MDRmYTIwHhcNMjYxMDIwMDMwMTMxWhcNMjYxMDIxMDMwMTMxWjAzMTEwLwYDVQQD
Eyg3ZGM3YTVjNzFlZjI4NjlmYWMwNmIzOTU1ZjMxNDIwYjY1NmE3MDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJG6LRE8ITBpLbm80zY27bqwauHf
o/alhmepDQP8Cd510EQ57W5YA8e9BU7O/GKuTpvLgCvNUkDq9ZJxDEGU0Q7zkKwM
12Yo38gDsrgyQePv6uUw0BJ+FdHUPt6OpahgkS/1JrZzCxjMA4EozQQtQQ5nDYOj
mqlqk6cL5/hJtMHErBaXV0wXyX2kwr49ZCl0JWIfPsjacWOqyn5TkhlABvn2i7L/
iSAWLMTIY2sWujPyCRgcv+V1XMHZSwqNWTDrfumXBGnDBLWY/4RbyUzrtvVd9j+F
Yn1P/7LskWnDAB4ZYe+F4TwRyCa+6KekurPoWql8+EMI2+cv4nCayWbW8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3Hpcce8oafrAazlV8xQgtlanCfMB8GA1UdIwQY
MBaAFKrg5/6Cw6bEJqJMDP+iCw46ME+iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXVEbl9vTERwc1Ftb2t3TV82SUxEam93VDZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iNTlkZjYtZDVmYi00NTI0LThkNzIt
ZTE4YWFjNTA1NGE5LzEvcXVEbl9vTERwc1Ftb2t3TV82SUxEam93VDZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9iNTlkZjYtZDVmYi00NTI0LThkNzItZTE4YWFjNTA1NGE5
LzEvcXVEbl9vTERwc1Ftb2t3TV82SUxEam93VDZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzaVOkpW
f4sCb7cpLvEdaXsZ1WO8D0WUh+3oddNIcXqx7NcWKvTX1YJjnBDdH8tArq2diugb
jbTu00OprzlBSOyIlfn0G7hNginrY0NlZ0lz62r0m1pdxsyl/DXB1DFu9zs8sRv4
qhyer12CozZs4hU0jmkAmr2t0aIbmH4TOPmEWwUX838GD7xpJreMw5XpNN24dmI9
rda/e0stwRfoHLLsgfaETqI3H7n7Wy+gMklASpN/h9kMs82GSx9xqTWkXLOC2EtS
bTYuSmpqa1yiMQp3X4Ss7ogE5Yc5IEyHMEklVNhh8abAwJGZJoSnavbz6qKl3oZX
OWRyQY0qrNykHw==
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:54:48 2026 by rpki-client