Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
File:                     qxyACqG3ihekPhn9mTg1XQQR6Uo.mft (raw, json)
Hash identifier:          LZ3SegYZCWqTzG0hyVxd/doLlF99We2hCgzQp0QAHVg=
Subject key identifier:   0F:8C:B9:26:BA:B7:73:88:29:FB:98:8C:BB:A6:B1:0F:B6:54:06:F1
Authority key identifier: AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A
Certificate issuer:       /CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
Certificate serial:       01A17AA86371C66458B70165106721179E94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
Manifest number:          117F
Signing time:             Tue 27 Oct 2026 00:00:18 +0000
Manifest this update:     Tue 27 Oct 2026 00:00:18 +0000
Manifest next update:     Wed 28 Oct 2026 00:00:18 +0000
Files and hashes:         1: Nl-NwJXgg_mKvSjTnftPWLYBToY.roa (hash: UM5uAdr1m30XVEMiULWnarxQCPhDPuMKS+lBMXBG4Ls=)
                          2: Rohs0EQIAoIUkwGS6XtjnDouO8g.roa (hash: EcZk5ZFiNKSus0TYnUyIuUuGvRBAlAnVxdbmm6ttv7A=)
                          3: ihu7RSF9d_o474O74_XHNiBLq8Y.roa (hash: zWFbywvFotfCwUcEIQ2DvsebZNFghPy/L/dQzBScQnk=)
                          4: qxyACqG3ihekPhn9mTg1XQQR6Uo.crl (hash: CCJlpu5E4Sq5dXuxJjCo6jZd4zOWuNtslKvdRdBmnzk=)
                          5: yRGQyOdHAyUvnCTeM-zwgIKX4Qw.roa (hash: bp0xhjE5IUPvG68ZkNNK1uC8wEizknIYbPwTcDbU+cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7a:a8:63:71:c6:64:58:b7:01:65:10:67:21:17:9e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1c800aa1b78a17a43e19fd9938355d0411e94a
        Validity
            Not Before: Oct 27 00:00:18 2026 GMT
            Not After : Oct 28 00:00:18 2026 GMT
        Subject: CN=0f8cb926bab7738829fb988cbba6b10fb65406f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8b:52:d0:f7:d8:78:d2:6b:2c:28:fb:a4:c0:
                    6b:7e:24:dd:35:57:73:d1:be:47:a5:b1:05:91:79:
                    d5:00:5d:47:76:20:d5:3c:e4:4a:a9:82:38:7f:40:
                    51:b1:cc:2f:72:1f:8a:62:89:32:dc:76:86:5e:05:
                    86:72:96:cd:4b:19:8d:26:aa:c5:fa:c6:aa:c9:55:
                    79:54:e6:3d:4e:0e:f8:48:b0:52:89:c2:8c:7f:d4:
                    4d:1a:e7:6c:85:9e:2d:ee:21:01:61:39:fa:34:93:
                    c4:79:a9:a6:f2:df:4a:4e:fb:84:de:ca:71:87:fb:
                    7f:8a:19:eb:fa:43:5b:22:b3:43:35:9d:4f:2b:13:
                    e5:e3:dc:d4:a4:d2:61:4c:92:79:31:42:5e:bf:f9:
                    ac:73:8e:d4:62:16:f6:8e:c8:0c:f9:cf:25:36:be:
                    b9:7f:21:e9:03:27:aa:8f:44:6d:6c:89:62:72:70:
                    c0:64:17:e7:a2:1a:e9:54:a5:c8:24:52:0a:3e:69:
                    64:08:0c:e5:2a:52:c2:b4:2d:0d:83:5f:de:4d:91:
                    a9:3a:e5:1e:7f:96:49:fe:49:c5:b6:69:e8:5b:f3:
                    c8:59:a1:fc:ec:3b:56:af:1b:69:10:a8:a4:5c:23:
                    fe:ff:08:c1:80:79:fd:37:9f:63:73:1d:ff:11:8c:
                    f4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8C:B9:26:BA:B7:73:88:29:FB:98:8C:BB:A6:B1:0F:B6:54:06:F1
            X509v3 Authority Key Identifier:
                keyid:AB:1C:80:0A:A1:B7:8A:17:A4:3E:19:FD:99:38:35:5D:04:11:E9:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxyACqG3ihekPhn9mTg1XQQR6Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b1ca0-bbf2-4419-8a0c-50cbcb5b19c2/1/qxyACqG3ihekPhn9mTg1XQQR6Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:53:a1:77:63:0a:85:65:29:45:93:25:28:a2:27:9a:9f:0b:
         45:1a:13:32:50:c8:57:c2:b4:66:ab:88:62:a9:33:f2:28:1f:
         58:cf:ca:85:82:7e:65:79:7e:c2:06:82:52:a1:3f:a5:49:59:
         3c:2d:b9:88:95:37:87:f0:9f:b7:6c:99:e6:20:ee:f0:6e:fa:
         c4:67:b7:93:fc:bb:75:ac:80:92:0b:40:a5:91:b5:3b:33:a4:
         13:32:0c:53:7e:d3:56:6c:b6:9d:43:28:70:af:73:ec:4d:a6:
         ae:18:5f:c5:f4:88:01:97:49:1d:76:af:f8:a5:45:5f:49:4f:
         4a:0d:c0:3b:e3:e9:9f:f7:2f:4d:46:16:18:41:bb:4a:84:62:
         d8:09:9e:d9:9f:e9:8f:7c:03:a9:98:25:7c:38:2c:88:cd:1d:
         ef:e4:3b:05:e3:ed:a5:90:91:05:b9:cd:01:6b:af:c6:56:aa:
         86:97:e7:2c:96:40:ae:c2:73:0e:bd:41:19:20:fe:d2:c9:e3:
         f3:e4:21:b1:66:c5:2e:69:d7:36:ad:a8:30:b9:d6:c0:76:26:
         e7:9e:bb:a0:0d:ab:1e:66:5d:ba:7a:66:ef:c6:fd:d8:d2:a0:
         27:e1:e7:3d:26:ef:b5:7e:92:1b:31:3b:83:01:3a:2f:fa:1a:
         dd:96:e2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:22:54 2026 by rpki-client