Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File:                     QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier:          VLqo0iAMt1FIRuaoZi6IE3wY0Y/OE4t61I/KPfe0fd0=
Subject key identifier:   83:C7:07:2B:DD:AF:24:50:7D:2E:42:3B:74:AD:12:51:10:47:44:CB
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer:       /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial:       01A17439D93ECEF174EA983FC46342A7DAAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number:          1855
Signing time:             Sun 25 Oct 2026 18:01:50 +0000
Manifest this update:     Sun 25 Oct 2026 18:01:50 +0000
Manifest next update:     Mon 26 Oct 2026 18:01:50 +0000
Files and hashes:         1: LR4OEFuXJFG601CBDAdGi2eJuDA.roa (hash: NMogK1dWSLWZg8KRXWYMDcVAVexU5Hc8nklyuTVzNTg=)
                          2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: dBU6hOssR+IBT3KxKQRP22hMY+wEA/ILwrPlxjjX/KI=)
                          3: yLjJ3nLSiELitR79aZqorJ0E2nc.roa (hash: xtAiyE7KLrMeKdwMrZXmwAda9WUSSp0xD353CtNzkqA=)
                          4: zmI7itrZiL_gDQE-LI8VX6mhi3M.roa (hash: oaucdw8kxMg4EQDLP4CSccRXkWAvO6YKuvgDiVYtKOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:39:d9:3e:ce:f1:74:ea:98:3f:c4:63:42:a7:da:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
        Validity
            Not Before: Oct 25 18:01:50 2026 GMT
            Not After : Oct 26 18:01:50 2026 GMT
        Subject: CN=83c7072bddaf24507d2e423b74ad1251104744cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f3:44:97:ef:87:07:8c:97:7a:e1:ec:6c:6f:
                    60:87:0c:05:6d:d2:bb:f3:34:6a:96:c2:04:40:7b:
                    d7:fc:c1:48:b3:70:01:6c:ee:f2:78:2b:85:58:cb:
                    c4:a4:31:a8:9f:0e:b2:95:27:e6:59:0f:c6:56:1b:
                    7f:0e:d2:48:58:93:77:94:fc:a0:da:d1:56:26:07:
                    08:48:6a:da:37:6c:8c:82:a6:01:e4:ee:07:ae:06:
                    66:a8:5c:4a:ec:2c:5b:eb:d9:fd:27:3d:7a:f9:dc:
                    ec:63:13:3f:8c:b3:82:c1:80:43:00:0f:83:a9:6b:
                    eb:07:c4:a5:58:57:7e:bb:29:1f:e9:74:08:e7:4d:
                    ab:cf:df:12:dc:e3:0c:e7:5d:0a:eb:51:dd:07:12:
                    92:28:64:c5:1d:cf:f7:72:44:45:5f:73:c0:cb:9f:
                    48:1a:45:36:43:f5:87:aa:70:22:b7:e3:54:75:50:
                    80:f2:2c:f4:b5:98:00:81:75:48:29:68:0f:4c:f6:
                    7d:4a:e3:8c:ee:27:3d:8a:c5:18:ee:74:b2:bc:45:
                    5e:31:81:00:23:81:8c:dc:a6:43:3c:1a:e4:d9:e1:
                    0c:28:15:1e:29:60:9b:98:56:4f:55:f7:c5:36:58:
                    db:5c:6a:24:40:2c:3f:04:e1:39:36:72:95:86:53:
                    9a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C7:07:2B:DD:AF:24:50:7D:2E:42:3B:74:AD:12:51:10:47:44:CB
            X509v3 Authority Key Identifier:
                keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3e:c9:bb:a2:00:51:0d:80:9e:58:91:35:a2:50:a2:18:55:
         69:8c:57:9a:77:61:0f:b5:e4:0c:da:d5:f1:de:3c:6d:19:7a:
         9d:34:28:2d:52:e4:40:d9:59:63:3e:1d:61:54:c3:2b:f3:07:
         81:17:6a:5c:7e:53:e7:42:52:e1:6f:38:b8:dc:1c:ce:f9:00:
         8c:db:5c:3b:7e:4d:c3:e1:92:92:26:2f:99:03:10:49:e6:4e:
         54:3a:e4:69:61:8e:9d:fb:1a:ca:16:20:b2:d2:26:70:f1:6c:
         a7:98:89:d6:17:93:5e:f4:79:9f:16:43:28:f5:ef:f5:80:c9:
         85:38:b5:ec:1d:65:51:2e:c8:0c:cd:4d:4b:1f:b5:77:30:2c:
         06:1c:04:69:18:cf:ae:55:4e:61:aa:51:1d:11:73:6a:f9:b1:
         46:c2:5e:30:61:72:7d:9f:ea:53:10:c6:78:e2:08:14:09:f8:
         64:6c:36:59:3d:64:80:cf:fb:12:66:03:ef:06:3e:1c:b6:0d:
         29:7d:34:e2:4e:11:73:53:c8:79:94:2c:25:5a:3d:e5:b8:61:
         c0:34:64:6f:b5:4c:1d:dc:0e:58:fe:25:ea:a7:ce:48:b2:e1:
         47:e8:b9:4c:e2:d2:d9:aa:05:de:41:f0:63:d0:63:8e:29:62:
         8c:01:73:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:22:15 2026 by rpki-client