Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
File:                     qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json)
Hash identifier:          kM18vP3a4KrXsf07x4ELV5vm2stz/NqYGjvBzcYn8/k=
Subject key identifier:   12:52:9F:00:39:E1:7F:06:63:85:45:15:74:5F:F1:C0:1A:58:7F:D6
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Certificate issuer:       /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial:       01A17326AB1AF50561EBF272D580EB58DB81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
Manifest number:          0EFF
Signing time:             Sun 25 Oct 2026 13:01:16 +0000
Manifest this update:     Sun 25 Oct 2026 13:01:16 +0000
Manifest next update:     Mon 26 Oct 2026 13:01:16 +0000
Files and hashes:         1: 0UTNnPCaSBRChjd-4paFJAa8mvY.roa (hash: kU7KErkztorzfF4UTYyKtoYDyMlrOJjwkRRJcXS9JCM=)
                          2: 3XFseKD5P1HWKROwFzTd36OyHbE.roa (hash: BIeVIxGIOa2ePH8XQOOYNOlUDe/lxUqOSdtUmx3XDZE=)
                          3: 9kV8fUl_KriLSLVtxrkRq6q3Ix0.roa (hash: uExdYX2548cfGCpmCeNErn/kV2y3p/D6bqfR/PH26F0=)
                          4: eBB5lvjqAnBclLcWqTOlF_8lA7s.roa (hash: AOzQfZTfdGMYeAqIt8a663Hmw+/xidNofnCq2r4ivkQ=)
                          5: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: 80UiL/D5NJaMdKGk/2pgYY7YsZqxW4+3zAS1+XkCXjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 13:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:73:26:ab:1a:f5:05:61:eb:f2:72:d5:80:eb:58:db:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
        Validity
            Not Before: Oct 25 13:01:16 2026 GMT
            Not After : Oct 26 13:01:16 2026 GMT
        Subject: CN=12529f0039e17f0663854515745ff1c01a587fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:81:39:65:5b:49:68:80:3c:49:40:83:a9:e2:
                    9b:b5:a6:f6:0b:10:27:5e:23:a6:21:16:88:c3:48:
                    e3:1a:5c:c7:35:e0:07:e5:3c:84:eb:ee:81:f4:4c:
                    9a:35:c6:1c:07:1a:ba:5c:8f:ee:d3:43:05:95:d1:
                    b4:dd:96:05:b8:0e:0f:f6:48:5b:5d:74:7c:08:71:
                    48:4c:5f:39:fa:05:10:78:79:b2:9c:15:5e:b0:7a:
                    9b:d6:fb:c4:91:3a:e0:ed:99:f3:42:eb:d2:9c:f6:
                    70:b2:ef:fe:fa:2a:f8:c4:98:64:50:72:9e:d7:b3:
                    70:f1:ae:de:e9:de:f5:f5:08:bf:eb:92:36:16:09:
                    bf:1d:8d:e9:80:67:7e:35:e6:d9:f8:ec:6e:b6:d3:
                    b5:eb:f0:1b:3a:5f:e1:0a:9f:21:c7:27:43:b8:e6:
                    3c:37:d7:95:d2:84:7d:15:a3:0b:26:54:e3:ae:e3:
                    c6:1d:b7:94:d8:5b:e1:81:47:aa:2a:19:d1:09:6f:
                    07:e5:6b:2f:3f:b0:62:f3:76:29:e1:8b:87:bc:2a:
                    d2:e5:2a:c0:6d:80:fa:89:06:64:4c:bb:c0:e4:b5:
                    10:a5:8d:30:0c:1d:6d:06:61:4a:55:5c:a6:5e:a7:
                    4a:31:d5:e2:40:b1:cb:36:53:41:12:d4:c5:9c:4f:
                    6b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:52:9F:00:39:E1:7F:06:63:85:45:15:74:5F:F1:C0:1A:58:7F:D6
            X509v3 Authority Key Identifier:
                keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d6:89:47:80:d7:3c:cc:67:39:93:51:98:63:10:af:4d:44:
         c6:64:6a:ab:f5:7f:a9:c0:7a:81:6c:06:92:0e:43:c8:ac:94:
         6c:dc:a0:e3:c7:bf:1f:fa:97:5d:34:0a:03:13:01:59:36:30:
         6d:da:23:88:36:a0:2b:78:d5:19:57:03:ac:fd:80:e0:b6:93:
         a2:1b:05:7a:49:05:27:b2:6f:5c:3d:87:5f:3a:0f:2b:60:a6:
         a2:8f:e3:16:2f:19:94:3c:a3:c4:5b:19:f0:68:18:41:18:8c:
         ea:7d:b3:72:8e:63:1b:9a:82:d3:cc:26:21:90:0c:30:bd:37:
         24:2e:6d:6b:7c:5d:3c:47:df:f5:14:1a:cf:57:58:1a:91:1c:
         11:ff:07:0b:1b:5e:77:44:73:5b:99:21:ff:99:4c:30:e8:7e:
         69:ef:24:9a:bd:2c:94:f7:65:bd:ca:76:49:75:53:37:d8:fc:
         b7:4a:03:45:33:91:19:76:ee:c2:7a:61:b3:f1:d6:18:7e:8e:
         76:21:2f:b0:13:4c:22:85:fe:4e:c6:e6:92:05:2a:f0:37:2d:
         24:60:83:8e:c7:c0:81:02:36:99:36:15:21:56:36:cb:1e:f5:
         b0:1a:b0:c9:e3:fd:e2:9a:9f:11:2c:f9:4b:4c:09:67:c1:6b:
         8e:a8:55:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:08:09 2026 by rpki-client