Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
File:                     QMyB_4LO1hrvhHas56DoGLuuj8Q.mft (raw, json)
Hash identifier:          uuWmKOvMqMBBxfCWZhi2yd5Y2eoTjjuORWndlmA6gWo=
Subject key identifier:   D6:4B:DB:93:0A:3D:23:98:5A:06:63:E4:24:B3:D6:04:10:76:3F:2D
Authority key identifier: 40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4
Certificate issuer:       /CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
Certificate serial:       01A15C9EF793FE33BD336C7363616A363D68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
Manifest number:          112F
Signing time:             Wed 21 Oct 2026 04:01:24 +0000
Manifest this update:     Wed 21 Oct 2026 04:01:24 +0000
Manifest next update:     Thu 22 Oct 2026 04:01:24 +0000
Files and hashes:         1: 3kLb2SclnRZ3nd2D3Q0PJ_hFvoA.roa (hash: 6pxbFnk+ektQu+gyRYaAFu/ZHeh+7fJhw5N9t7HsTNc=)
                          2: QMyB_4LO1hrvhHas56DoGLuuj8Q.crl (hash: 6wQJM/WpY0s9yoCdqFwPd7bwLL1T+HqpK0KwQ/d8GTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5c:9e:f7:93:fe:33:bd:33:6c:73:63:61:6a:36:3d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
        Validity
            Not Before: Oct 21 04:01:24 2026 GMT
            Not After : Oct 22 04:01:24 2026 GMT
        Subject: CN=d64bdb930a3d23985a0663e424b3d60410763f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b2:09:ba:70:15:ae:ef:44:02:e8:57:62:09:
                    a9:27:f0:74:8d:47:68:5b:dd:9b:3a:9f:f4:b7:40:
                    68:08:a4:71:d2:7c:62:f9:5a:a6:af:60:ab:14:b3:
                    14:f6:ef:32:2b:f1:d1:cb:51:cf:17:36:0f:b4:73:
                    df:cb:ff:c2:6c:7c:f8:a5:29:12:bd:aa:bf:bf:7e:
                    41:60:be:fa:dd:a7:06:18:f6:73:d8:24:7c:44:6a:
                    ba:5c:20:64:38:3f:a1:ca:fb:73:0a:b9:95:90:3e:
                    aa:e5:62:5d:3a:ec:67:06:a6:87:b7:e0:ff:47:6c:
                    6b:3a:10:38:ec:6a:e8:a8:1c:83:a6:15:68:ed:c5:
                    3f:4f:a1:15:ce:1a:29:e5:ca:51:5e:69:67:ef:4b:
                    33:38:07:b8:fd:f8:ab:6a:6f:8a:75:c0:fc:8c:0f:
                    5c:b0:2b:e4:9b:e2:08:fb:f7:91:e3:81:4f:7f:21:
                    8f:4e:e5:5a:b7:65:72:47:31:c6:fc:0a:c9:c7:01:
                    8a:d6:50:eb:c1:c7:81:9d:12:89:a6:ec:5a:6b:62:
                    5f:89:b4:e9:91:20:7a:47:93:3c:74:68:f7:20:21:
                    23:0b:40:bd:a1:47:c2:5c:8d:ef:f2:6d:68:36:e2:
                    ca:52:6c:7a:cf:14:93:60:d7:fc:88:86:11:68:1e:
                    e5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4B:DB:93:0A:3D:23:98:5A:06:63:E4:24:B3:D6:04:10:76:3F:2D
            X509v3 Authority Key Identifier:
                keyid:40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d3:3e:08:34:20:1c:63:bc:d9:8a:dc:0e:77:76:c4:63:ec:
         59:a0:77:32:ef:3f:b3:de:e3:e6:e9:16:b8:1a:43:71:0a:73:
         59:ac:e2:44:9b:e4:5f:1f:69:c1:be:fc:3e:3e:b0:06:48:79:
         e3:3f:a0:4d:63:75:7d:73:9c:23:bb:98:cc:3d:98:55:76:56:
         60:11:0e:f5:41:e4:40:23:4f:c2:e3:d1:b6:34:82:2e:87:74:
         d1:76:05:20:79:58:9e:27:24:2d:8a:e7:2d:1f:90:55:5a:39:
         b7:54:a7:38:0c:02:e3:b5:a4:65:a5:fb:7f:c7:61:98:97:76:
         7f:c0:d8:cc:59:30:32:96:85:89:88:8b:c8:c3:7b:15:a0:51:
         37:50:82:3e:23:ef:d7:b8:18:77:57:4f:2b:36:84:4e:8e:03:
         f4:c8:09:53:25:98:98:3f:29:3c:c7:1b:40:a5:6a:fd:94:6c:
         16:c7:9a:e0:62:c8:71:44:02:8b:b9:3a:b0:4c:ae:7d:ec:d1:
         63:33:d0:8c:8d:1f:78:ed:5d:7d:73:f2:a5:89:85:aa:dc:ed:
         13:64:88:11:76:7f:9f:9f:1a:bd:d5:0e:b4:79:a1:6c:85:44:
         9a:63:65:e0:46:30:7f:a7:79:64:1a:b1:9f:da:1e:81:94:52:
         31:e6:fe:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:50:58 2026 by rpki-client