Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft
File:                     Qg_zglhintUOC3VkwjNBFYHh3w4.mft (raw, json)
Hash identifier:          43f7+aF1398JQD/H5gN1IpF6tRxbsWbIroiSKCBXx+E=
Subject key identifier:   B8:03:F8:EF:0C:65:9C:40:A9:9F:D4:F9:1A:DB:00:23:64:AF:B9:67
Authority key identifier: 42:0F:F3:82:58:62:9E:D5:0E:0B:75:64:C2:33:41:15:81:E1:DF:0E
Certificate issuer:       /CN=420ff38258629ed50e0b7564c233411581e1df0e
Certificate serial:       01A11D516168E9C2F0B5B29F4462D3C30DE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qg_zglhintUOC3VkwjNBFYHh3w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft
Manifest number:          010D
Signing time:             Thu 08 Oct 2026 21:00:34 +0000
Manifest this update:     Thu 08 Oct 2026 21:00:34 +0000
Manifest next update:     Fri 09 Oct 2026 21:00:34 +0000
Files and hashes:         1: Qg_zglhintUOC3VkwjNBFYHh3w4.crl (hash: lfQ5maQ4/5KUT3Sq2AFQMTAnYd0TbsObyUQ5DjzJ3Ec=)
                          2: i44ZsQWX9kFjZrBXqxJShe4F4UY.roa (hash: BxMxpzl8UVGfzxTIfCiqxK6y7sVAleuv4Iaf2OthD/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qg_zglhintUOC3VkwjNBFYHh3w4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1d:51:61:68:e9:c2:f0:b5:b2:9f:44:62:d3:c3:0d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420ff38258629ed50e0b7564c233411581e1df0e
        Validity
            Not Before: Oct  8 21:00:34 2026 GMT
            Not After : Oct  9 21:00:34 2026 GMT
        Subject: CN=b803f8ef0c659c40a99fd4f91adb002364afb967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e3:25:26:83:c2:4a:5e:71:f3:3e:25:3e:09:
                    cc:e6:30:19:4b:e2:cc:3d:9a:53:86:b5:6e:61:98:
                    46:61:6b:0b:f6:fd:f1:b5:35:bc:02:c4:f7:2a:48:
                    a7:cf:9b:48:e9:3d:f7:2a:f0:ed:66:8e:bb:f7:b2:
                    7a:6e:04:c5:ba:ac:0d:7d:e2:3a:c1:ff:07:24:12:
                    d2:3d:76:37:94:5c:2c:17:e8:33:ba:6d:f7:1e:46:
                    30:35:ed:29:d9:ac:62:5d:ac:29:84:b7:74:83:2b:
                    82:a8:44:b0:a4:5e:1a:24:17:e7:55:58:d9:4c:d0:
                    85:e8:5f:a3:7d:36:34:b3:4f:3d:f3:72:f2:61:45:
                    54:b0:0b:d6:8e:d3:d9:ec:76:76:ac:c3:03:87:10:
                    4b:a8:79:18:69:3c:72:a6:fd:b0:d4:df:3c:63:b0:
                    35:85:8e:b5:62:d8:94:81:d3:55:b3:74:1c:fa:99:
                    5c:0f:ce:57:c0:5c:b7:9f:67:35:5d:6d:05:d9:ba:
                    b6:f1:1d:66:e5:57:63:ae:0e:1e:a6:25:8b:c5:fa:
                    f5:20:39:91:2f:6f:3f:5b:ad:cb:0a:1d:d7:e7:c6:
                    36:5a:4a:b5:f9:9c:94:85:b3:0b:0e:68:45:39:bf:
                    af:44:c2:07:2b:16:f5:cf:41:fe:5d:83:e2:d0:1b:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:03:F8:EF:0C:65:9C:40:A9:9F:D4:F9:1A:DB:00:23:64:AF:B9:67
            X509v3 Authority Key Identifier:
                keyid:42:0F:F3:82:58:62:9E:D5:0E:0B:75:64:C2:33:41:15:81:E1:DF:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qg_zglhintUOC3VkwjNBFYHh3w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:9d:5d:a7:a7:2b:9a:23:83:92:61:24:65:29:6a:dd:a4:30:
         f0:82:8b:a0:c3:4b:02:65:ea:b2:83:b3:a2:52:8b:36:06:c8:
         c5:89:cc:c6:71:33:de:a7:d0:01:29:d6:24:e9:56:5c:a6:06:
         55:ee:57:ea:2a:52:78:53:63:91:4e:02:78:19:53:9e:25:e1:
         c8:dd:ad:ad:a8:b4:f1:4d:ba:73:f1:e4:ec:fe:08:c5:11:0c:
         f3:d7:ec:48:43:1e:17:55:86:8e:62:86:08:59:04:b3:30:d2:
         1c:4d:b2:1b:1b:b4:ac:8b:55:5c:77:55:18:2a:63:e5:0f:59:
         fe:1e:fa:69:a0:c8:d2:9d:94:60:a6:a9:a5:f4:37:4b:14:3c:
         a8:9b:d9:d5:b0:15:f7:c7:4c:65:c2:f5:b1:ed:cc:77:3b:83:
         35:36:bf:91:c5:c8:52:f0:5b:17:7b:20:f7:ed:a8:14:87:99:
         76:ff:3c:f0:d7:41:f2:78:cf:e7:d2:a2:54:d1:e9:6d:6f:8a:
         6a:30:02:d9:d0:a9:17:4b:33:af:1b:3b:30:cb:6d:f7:15:d9:
         fa:3b:76:16:03:a6:6e:a2:e0:c8:c4:c8:7f:b7:1a:2f:de:20:
         8e:16:b6:20:a5:48:26:bc:c6:fd:27:22:ee:e5:53:66:77:80:
         28:9b:5d:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEdUWFo6cLwtbKfRGLTww3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMGZmMzgyNTg2MjllZDUwZTBiNzU2NGMyMzM0MTE1ODFl
MWRmMGUwHhcNMjYxMDA4MjEwMDM0WhcNMjYxMDA5MjEwMDM0WjAzMTEwLwYDVQQD
EyhiODAzZjhlZjBjNjU5YzQwYTk5ZmQ0ZjkxYWRiMDAyMzY0YWZiOTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OMlJoPCSl5x8z4lPgnM5jAZS+LM
PZpThrVuYZhGYWsL9v3xtTW8AsT3Kkinz5tI6T33KvDtZo6797J6bgTFuqwNfeI6
wf8HJBLSPXY3lFwsF+gzum33HkYwNe0p2axiXawphLd0gyuCqESwpF4aJBfnVVjZ
TNCF6F+jfTY0s08983LyYUVUsAvWjtPZ7HZ2rMMDhxBLqHkYaTxypv2w1N88Y7A1
hY61YtiUgdNVs3Qc+plcD85XwFy3n2c1XW0F2bq28R1m5Vdjrg4epiWLxfr1IDmR
L28/W63LCh3X58Y2Wkq1+ZyUhbMLDmhFOb+vRMIHKxb1z0H+XYPi0BslkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgD+O8MZZxAqZ/U+RrbACNkr7lnMB8GA1UdIwQY
MBaAFEIP84JYYp7VDgt1ZMIzQRWB4d8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWdfemdsaGludFVPQzNWa3dqTkJGWUhoM3c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82ODcxYTAtYWZiMi00NWFiLWFkZGUt
NjJiZTFmMDJhYjBjLzEvUWdfemdsaGludFVPQzNWa3dqTkJGWUhoM3c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82ODcxYTAtYWZiMi00NWFiLWFkZGUtNjJiZTFmMDJhYjBj
LzEvUWdfemdsaGludFVPQzNWa3dqTkJGWUhoM3c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZ1dp6cr
miODkmEkZSlq3aQw8IKLoMNLAmXqsoOzolKLNgbIxYnMxnEz3qfQASnWJOlWXKYG
Ve5X6ipSeFNjkU4CeBlTniXhyN2trai08U26c/Hk7P4IxREM89fsSEMeF1WGjmKG
CFkEszDSHE2yGxu0rItVXHdVGCpj5Q9Z/h76aaDI0p2UYKappfQ3SxQ8qJvZ1bAV
98dMZcL1se3MdzuDNTa/kcXIUvBbF3sg9+2oFIeZdv888NdB8njP59KiVNHpbW+K
ajAC2dCpF0szrxs7MMtt9xXZ+jt2FgOmbqLgyMTIf7caL94gjha2IKVIJrzG/Sci
7uVTZneAKJtd0w==
-----END CERTIFICATE-----
Generated at Fri Oct 9 08:22:55 2026 by rpki-client