Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.mft
File:                     QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.mft (raw, json)
Hash identifier:          HS/ZpH2jGtIXdelfVQTpJuhttVAL7itPea1FN92kSjk=
Subject key identifier:   04:89:AD:04:16:FC:40:B2:93:9B:AA:2B:33:24:44:58:CA:B9:02:B1
Authority key identifier: 41:47:F2:EE:0E:D0:E1:7A:73:B1:9F:98:29:D0:09:CB:57:5A:AB:74
Certificate issuer:       /CN=4147f2ee0ed0e17a73b19f9829d009cb575aab74
Certificate serial:       01A13290CF0B198BCFF1FCD9D0753B1B910D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.mft
Manifest number:          0118
Signing time:             Tue 13 Oct 2026 00:01:53 +0000
Manifest this update:     Tue 13 Oct 2026 00:01:53 +0000
Manifest next update:     Wed 14 Oct 2026 00:01:53 +0000
Files and hashes:         1: 4f6TNmLDfwHmEzXslemxRywKRJQ.roa (hash: 3/6yha2Tky/PNq7zE0ksBiNawuvZxQxEI/c3nZdX/Jc=)
                          2: KXyGC29qrMAzOy7hPyA4y-RQuK4.roa (hash: raUVJLpa/Uin1LtZwfZMQtZTj9i0teHFGh8Qpqgiq7s=)
                          3: QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.crl (hash: XeQJ9mTdNKGbmMy85JFTiz1D4mCDFaoNi+aW50nVMaU=)
                          4: T9U_9aCGiUQ96-pJqxgiDH8exms.roa (hash: wRu2cenF8ghXwJGX9GjCVKhP6rqYX/Q0mGOrSgXjY/0=)
                          5: yrMgEtFjCVSsCMn7YjkSj19StGc.roa (hash: hGOie0hBu6eRXEMbsuifURbA1uzoiAH8L5Iguxnz680=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:90:cf:0b:19:8b:cf:f1:fc:d9:d0:75:3b:1b:91:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4147f2ee0ed0e17a73b19f9829d009cb575aab74
        Validity
            Not Before: Oct 13 00:01:53 2026 GMT
            Not After : Oct 14 00:01:53 2026 GMT
        Subject: CN=0489ad0416fc40b2939baa2b33244458cab902b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f9:fb:4f:59:56:d0:48:2e:4a:79:45:c1:75:
                    c0:57:6c:23:49:c6:29:5f:08:5e:75:c7:00:02:6a:
                    a3:b0:40:82:19:aa:22:3b:70:1c:35:86:85:99:29:
                    80:4a:fb:d3:27:20:0e:2f:ae:73:4b:62:5b:db:d4:
                    5e:80:07:99:7f:61:bc:7f:1c:2d:3a:67:1d:40:7d:
                    00:66:ef:63:c9:8e:e1:80:c4:a2:2b:ce:94:80:4c:
                    6d:d2:93:04:64:3b:21:3a:85:5c:c9:f5:8f:c0:1d:
                    9d:73:28:c4:d2:4c:14:fd:90:bc:5a:9b:a8:5f:0a:
                    b1:a1:e7:da:3b:14:b7:ed:8a:84:fd:49:fc:20:d6:
                    45:80:f6:99:2a:da:fc:2a:9f:68:2a:73:39:d3:05:
                    0d:43:c2:39:a8:cc:08:ec:66:a5:d0:b4:91:12:6c:
                    a3:48:21:4b:fb:56:02:07:d9:f5:00:79:6f:28:96:
                    80:1a:bf:d6:8f:d0:c1:33:66:2c:10:07:da:9d:22:
                    f6:28:75:4d:61:26:ff:b7:ed:1e:bc:2b:6a:90:62:
                    66:e1:a7:e9:8c:45:af:ef:7d:42:78:14:05:30:43:
                    c8:b6:61:16:7f:9b:00:c1:76:3f:08:61:d5:9d:a1:
                    7c:d4:ce:e3:da:6c:04:79:81:de:e8:60:62:cb:72:
                    64:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:89:AD:04:16:FC:40:B2:93:9B:AA:2B:33:24:44:58:CA:B9:02:B1
            X509v3 Authority Key Identifier:
                keyid:41:47:F2:EE:0E:D0:E1:7A:73:B1:9F:98:29:D0:09:CB:57:5A:AB:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/QUfy7g7Q4XpzsZ-YKdAJy1daq3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:45:99:7f:88:be:a2:11:3d:67:07:1d:cf:61:2c:e7:21:98:
         5b:24:f8:e3:4d:6d:cb:3d:2a:98:cb:6e:8a:11:c4:4d:1f:5c:
         af:23:db:57:7f:cf:e5:c6:a3:a2:23:95:a5:fc:6e:6b:38:20:
         9d:76:f2:2b:a9:07:ec:97:3d:a5:76:e3:33:56:ce:99:de:c0:
         a1:d2:02:4f:6b:7a:97:4e:64:68:c6:82:91:f6:24:c0:bb:6a:
         d0:be:58:d7:fb:17:85:c5:ca:f4:2b:cb:44:99:64:5c:36:ce:
         1d:73:29:99:bd:32:92:02:9f:bd:e2:ec:fa:34:69:47:96:e6:
         27:02:0d:e6:51:b4:97:0d:5c:94:15:88:46:4a:84:f9:0e:79:
         ce:15:a1:65:b0:6f:12:ec:2b:d9:d5:77:e3:53:ca:4a:78:8f:
         e0:e4:e7:e0:c4:26:48:e1:28:18:df:be:2c:06:de:9b:69:b8:
         d5:8e:64:74:35:a6:b9:ad:e7:01:e3:e8:85:d2:db:16:43:57:
         3a:fc:a9:38:9a:30:76:5b:a3:e7:58:9d:13:29:29:36:9e:22:
         38:fc:a1:52:f7:cd:0d:00:cf:28:41:59:b6:9d:7b:da:ca:a1:
         a8:b7:a3:3d:17:ef:0d:41:60:ba:27:19:73:f5:8b:5f:87:96:
         93:29:02:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:51:06 2026 by rpki-client