Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
File:                     q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json)
Hash identifier:          FD9wVILj1lO2+0vrkDelEoFEhWp7bFOyodyvV71NEAY=
Subject key identifier:   01:80:23:3D:35:4C:C5:DD:F1:6B:FC:94:1C:0C:5A:72:89:A1:A1:41
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Certificate issuer:       /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial:       01A181F4F3B99CEE25532EB2EC8132BFF062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
Manifest number:          1B1D
Signing time:             Wed 28 Oct 2026 10:01:16 +0000
Manifest this update:     Wed 28 Oct 2026 10:01:16 +0000
Manifest next update:     Thu 29 Oct 2026 10:01:16 +0000
Files and hashes:         1: 0fgHNVCctmMI1V-BS5_kF5EsiOU.roa (hash: eNuhCbiq7TJi88XjDE039hLZRz8ipxup9WRLp8sp1DI=)
                          2: 7_6SFXfZMrzFSdtu3xDOw0gJ8JY.roa (hash: hG4yO49oHj9b8DfZFiphyKQ8y3qDFd1bbzb1jH4CrQU=)
                          3: DF7ZMArr7YQkP6JCvTXnJ48GG1g.roa (hash: h0YoBkA2Ma+7OTVVfQXFtJdLdFlpvKYuPy7+Y+Jklhw=)
                          4: Ep-mQB2FAsp8xVwfqHWWTFWTlYM.roa (hash: CcqzWZ6bMIWysh3kKgYdOQMLPUZ4shI2ek8KjLM+54s=)
                          5: GujJ-FoV2NxCphoiy9ei8Zxbj94.roa (hash: 5qyX0xcJQK2tt6fcmxtTs5x5YBwoFGMWlBym7IBYHmk=)
                          6: MuQyieCgxPJT0SRv6Xj_GxkiB-I.roa (hash: 0pzaFGjjnJFM3Mi6/Z0qJhoLAoydrAANnuMwOCc5Kso=)
                          7: P7wv0TBgiECiEBUf1EgkMnv47Po.roa (hash: rqQESPX4LWrWYgKl1zOfXltaaGJ18DHxc3dAwU1KR9k=)
                          8: Q1yzAo5L9w5IHv0JqXbg9yCMMcU.roa (hash: qLGf0LLtEidrk4nWv5exOU1LPTUa9MuB+3L8YC0+hbc=)
                          9: QLx_bFpLJ0q7OGCLe6wvYzJoLrw.roa (hash: XQYgd3zzuTttV8zp0GzxyEY68F4NaIMjIG/jCEfOzec=)
                          10: RjNeSA3OdSgfuKyXCw4On9Hfwig.roa (hash: TGS0IFEq2/Ak8/1sB2LyNa9KTXiGL21lniik5j5gU80=)
                          11: T5XQh9j95-eHLk4tIkpyKU927L4.roa (hash: YLS+fL7b3BgU8PYEgqxRvmWh3Kk8TcAGqvr6h5p+gtg=)
                          12: TDSIuL-UCZDNweCSbeoQaq_Kz94.roa (hash: xmfP7+f8gMkStgz64Ovg93ThSGH8dnAhDslP+tZj6oY=)
                          13: X_eS7uT76Tv6lToj2nDNeg9sgYo.roa (hash: rlOOw1Hh+1Gv0+quXstdSdljOaXwuIQS08R8cOH2H9E=)
                          14: YRVJ0Gjf3ToFSXg4tQ2csynme1g.roa (hash: +3oRd6tn6dDyNGcRR/+Wdu79deA/W9QRUODpof/4dqI=)
                          15: YVly3HyFx4cO-VDnGW8-TlLZp8c.roa (hash: zmddt2tM/OfIW2jjFDZBhz9+RtNwb/OeGPoKv5WQBq0=)
                          16: f_U1wlpu2o8G1EDSBfG2v3CJsrU.roa (hash: mBEZgenCoBMKSBIbKUgW3oXM9LSYHALYDi8zO9xe4lk=)
                          17: gkBIXWPDqd5iHgTo6Oq_RIYuttI.roa (hash: TAAZ/5Q3PgiVYAsyiVs0eY43VCN4PWzuxjaw3+oWC3U=)
                          18: l8R7A1sksjUkbsqqgmFV4yhnwoY.roa (hash: tOD+/L6A4hjUPcMiH0jbILCqY006lQVa6EOA+rm4RSY=)
                          19: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: 0XQzPNlSBHVW5RTv1z8M4f7Xh1wrwJfIfhHZto3ZYB8=)
                          20: qHqVroTNd8mAZUTP-4LLTihEjRA.roa (hash: LFqfsvqUg1kryv3SdZmfz1fPpVN8XkzwNYvHfBdV5dM=)
                          21: r97T0zrjjPPADnFxgjfEjKH0-vI.roa (hash: uvIm3GKMAsVoII3IPG7UtxMh0NuDqi6V1N2PDdGwnIM=)
                          22: sIdlwG_KvJyr9jN9d5KfNvyl-ws.roa (hash: HSdj5IIYXsemUlbbPFPUMMU0DovDtEclq0qz0Z73zr0=)
                          23: z2b5HqrBbNton83_qG8fiGl3ipE.roa (hash: /MzZQY5wAz0d5qSw7Z9ljmH3Z0SZhJHz2o3BPZIFhmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:f4:f3:b9:9c:ee:25:53:2e:b2:ec:81:32:bf:f0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
        Validity
            Not Before: Oct 28 10:01:16 2026 GMT
            Not After : Oct 29 10:01:16 2026 GMT
        Subject: CN=0180233d354cc5ddf16bfc941c0c5a7289a1a141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e1:6a:d8:26:af:ea:c0:44:89:2c:8e:90:4a:
                    af:3a:f0:5c:b8:e8:31:18:cd:61:97:d1:23:e7:97:
                    e2:9f:34:52:e1:91:3e:01:12:bd:35:d9:74:05:17:
                    3c:34:1a:65:52:3a:36:1d:52:d7:9c:6b:0f:a9:38:
                    51:73:d2:30:61:b4:00:93:b9:3b:12:69:b8:f1:84:
                    5a:16:80:65:43:da:72:8c:83:fe:40:15:94:82:d8:
                    38:5a:be:88:1a:c4:b0:17:46:13:7e:fe:d3:96:7a:
                    47:7c:da:15:c3:e8:3d:65:df:06:54:b3:c4:4d:3e:
                    97:cc:8d:d8:40:12:02:4f:29:b1:5a:04:cc:8d:b7:
                    d5:45:08:ff:95:db:a6:96:5e:42:d2:f0:2f:f3:f1:
                    2e:21:f7:c2:82:ef:80:4c:93:67:93:30:71:3d:29:
                    ae:5c:69:a4:fc:1e:10:41:2e:10:7a:6e:11:d9:30:
                    33:9d:10:4b:6e:f2:f6:d3:86:43:7b:ec:5d:47:c2:
                    d8:1d:2a:31:7c:a4:c4:4e:d2:cf:a3:03:87:bc:61:
                    88:ea:e7:df:dc:4e:55:29:b4:1f:a3:3b:b8:d0:bd:
                    16:9f:f3:82:89:03:cc:63:5b:96:f1:84:e8:eb:8e:
                    47:1e:30:eb:24:b3:91:34:cc:00:ca:1e:5b:44:21:
                    c0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:80:23:3D:35:4C:C5:DD:F1:6B:FC:94:1C:0C:5A:72:89:A1:A1:41
            X509v3 Authority Key Identifier:
                keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:bf:cf:28:88:3f:38:98:a0:47:7f:68:f4:80:3d:fd:94:8d:
         b1:c4:c0:eb:f3:3d:63:03:f9:b0:31:03:c2:8e:c9:66:d1:d1:
         39:1b:a6:29:da:d0:61:26:16:8c:7a:56:98:49:09:ab:25:13:
         54:07:76:ac:88:04:a5:6a:4e:ef:76:0b:89:95:9f:a7:69:1a:
         f8:08:d1:10:54:bb:c0:c6:e1:2d:4e:76:ae:35:28:ca:a1:d8:
         47:41:78:55:fa:f9:ec:27:bb:3d:19:af:e1:e6:6d:b3:40:86:
         a9:93:d0:1c:47:51:da:e8:f4:70:e0:2d:a4:26:b5:87:d2:f0:
         73:b1:f4:99:e4:26:b7:9d:79:6a:7e:f6:93:74:26:a8:5d:87:
         ad:cc:35:2c:42:5d:59:21:b5:b4:79:bd:61:8c:d9:5f:34:32:
         c8:c0:6c:dd:07:ec:82:69:e1:e3:fa:41:89:02:50:8c:41:56:
         c5:f6:18:eb:35:08:97:62:ee:0d:86:ee:e9:1f:83:c1:36:60:
         46:77:4d:6a:63:83:94:f5:b1:0f:1e:2d:99:14:8b:c3:c0:f2:
         63:62:fb:0b:d9:03:83:38:2a:b7:b7:99:b3:58:79:5e:e7:b6:
         ef:a6:d2:fc:5b:c8:70:0d:52:7d:62:ee:82:2d:a6:b3:67:03:
         88:39:7f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:34:24 2026 by rpki-client