Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
File:                     QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft (raw, json)
Hash identifier:          z1HBDoE4TvcGOvwnNU9AUJKdAeao/1z2Jh4jNDGsWYA=
Subject key identifier:   A7:AE:B5:A6:DF:63:7C:79:CA:DE:EB:B5:DD:C6:49:0B:1C:FB:CE:F0
Authority key identifier: 43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
Certificate issuer:       /CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Certificate serial:       01A1517616B8AAF1874ED8785650D38C05A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
Manifest number:          15F2
Signing time:             Mon 19 Oct 2026 00:00:55 +0000
Manifest this update:     Mon 19 Oct 2026 00:00:55 +0000
Manifest next update:     Tue 20 Oct 2026 00:00:55 +0000
Files and hashes:         1: QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl (hash: bqlH+72+IaftliJ8e+oDIiRFhOtMGI2VZo83vLmm4cY=)
                          2: dzhGd3IrijK6XFNXLPo3QbQe60A.roa (hash: DzSQmk0X+ZHEQPIeJMm37I+zInIF580tNRunoudFrPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 00:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:51:76:16:b8:aa:f1:87:4e:d8:78:56:50:d3:8c:05:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
        Validity
            Not Before: Oct 19 00:00:55 2026 GMT
            Not After : Oct 20 00:00:55 2026 GMT
        Subject: CN=a7aeb5a6df637c79cadeebb5ddc6490b1cfbcef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:68:07:df:ce:ba:30:dd:90:95:d7:0d:0b:76:
                    30:e3:b0:87:65:60:fd:0d:13:32:c5:05:49:32:b9:
                    5a:f3:b4:3c:c4:b5:45:fb:87:14:4b:ba:2a:ac:ca:
                    51:d6:1e:ce:74:98:14:a3:f2:14:73:b3:9e:91:d2:
                    61:37:2c:a9:e4:57:f5:2c:c8:c3:87:4d:a6:8f:23:
                    f5:13:aa:14:e3:98:e0:38:11:12:a2:44:88:5d:0c:
                    8e:48:16:50:80:f6:c7:83:90:52:61:a7:24:7a:08:
                    72:ba:6d:4d:24:f7:6f:ca:d5:6f:5a:3c:63:17:a8:
                    fa:16:ab:9b:86:00:b1:07:34:96:60:19:b4:14:eb:
                    28:11:20:4b:8f:af:79:0f:7b:fc:00:26:6c:7f:ae:
                    16:9c:60:95:01:37:e8:f5:e8:c0:09:f1:0f:28:08:
                    0b:ed:09:69:06:98:8e:25:c9:a0:2e:fe:ea:68:07:
                    25:ec:34:11:61:d6:23:36:2e:32:6f:36:55:d8:d2:
                    5c:03:3a:7c:08:1c:0c:56:c9:a3:80:74:48:cd:57:
                    62:b3:fd:7f:97:09:a9:b0:85:64:84:c9:6f:9d:e6:
                    69:a9:e9:d1:ff:f5:9c:ba:52:8a:f0:47:fc:e7:8c:
                    a9:ee:a9:12:bf:f4:56:95:fc:1c:59:b7:63:f6:7e:
                    18:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AE:B5:A6:DF:63:7C:79:CA:DE:EB:B5:DD:C6:49:0B:1C:FB:CE:F0
            X509v3 Authority Key Identifier:
                keyid:43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:3a:31:aa:49:8a:8e:2a:b7:5e:5e:dd:95:ec:c0:1d:e5:1c:
         ea:a9:d8:62:e6:5c:ce:db:b1:61:a5:f0:66:be:57:6e:09:a4:
         af:4d:85:7b:28:ba:b9:c3:80:b3:89:60:68:f5:74:bf:e3:16:
         b5:27:01:bb:dc:40:32:0c:81:65:b9:2e:a1:80:97:fe:ee:b5:
         b4:51:0f:56:52:63:39:6f:42:3f:1c:8a:55:37:97:1a:fc:aa:
         e7:18:28:8b:39:5f:d9:b5:99:71:2c:6c:b6:ad:57:59:12:e7:
         17:cb:b0:ff:be:eb:0f:13:d0:c3:1e:90:89:f7:e8:79:cd:fe:
         de:30:8a:06:e6:af:0e:8d:9c:48:29:3e:83:ff:9b:af:65:2f:
         a1:c4:29:dd:7c:49:35:d5:fd:eb:fd:5f:e0:c7:65:91:85:1f:
         66:a4:6f:e3:2a:ac:b6:d1:a8:fd:b5:db:8a:6c:70:86:00:c5:
         ee:ee:c0:b4:8d:70:59:63:d8:e9:33:f3:32:4b:22:c7:85:c2:
         32:a0:8b:34:af:e0:e6:e9:a2:05:f3:7e:d8:c9:ba:44:50:05:
         c2:23:6c:3a:01:eb:5c:b7:54:df:5c:c3:be:97:f0:71:ec:d3:
         03:13:5e:c2:dc:dc:a4:29:25:b9:ab:36:e4:d6:5f:b1:37:5c:
         15:cb:4b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:39:43 2026 by rpki-client