Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
File:                     QR3qU0Z7bHFD6yPShFaagYOy6C8.mft (raw, json)
Hash identifier:          4wvbB/SBJsh21AZiOTbp5/3K48HJUg10LoE0whQ5cCA=
Subject key identifier:   FF:30:B8:DC:91:5C:D5:14:58:78:4C:12:E5:15:29:EA:29:01:44:CA
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Certificate issuer:       /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial:       01A1803D3267D0896B50841E5333F57E9DB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
Manifest number:          1172
Signing time:             Wed 28 Oct 2026 02:00:56 +0000
Manifest this update:     Wed 28 Oct 2026 02:00:56 +0000
Manifest next update:     Thu 29 Oct 2026 02:00:56 +0000
Files and hashes:         1: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (hash: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA=)
                          2: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (hash: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc=)
                          3: 82aS80Z-S6NnAm8LU_jWB7rQeAE.roa (hash: mOu6QJnhLdJFHVRfq0f+8ItgcvTyM6U8zNv2AcRLuzk=)
                          4: AvPEAsrsZnpduHlbZPtLhyceuUg.roa (hash: Cs4MF3Z+/BdE208DS1rGNXAGCcbUy+xo4aaSdy0eddI=)
                          5: QR3qU0Z7bHFD6yPShFaagYOy6C8.crl (hash: fEQHMZhw3Vnbp1Xky3JbFvKPRpxgQg+Qck130lwaj6c=)
                          6: V9kZj-ccrUMnQWg5mxReVJXbH5k.roa (hash: oS09om8MhecuKyNRgZQtc/bFzcef1tCMlqRTQckmDzs=)
                          7: X_3fvkwct2Hs39yxw7r-4b_Or14.roa (hash: p7OIXjNBLYuZXyMrZ8V8pRVBF8RJlCTVNbD30dt7sYQ=)
                          8: Zcg2z_FmMMZv2rKPHV-prkCEEoc.roa (hash: Iy4Ah5HraRu4lHUUcID+QrNRdmnn5d0MqDieV9MLnKk=)
                          9: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (hash: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k=)
                          10: ksC83TQbLj8ZS4YoxGUFy7Ie-0Y.roa (hash: EbKrunMmN01j1ocs5z9OeF/aOmbcs6S3mB7lzkTyLnI=)
                          11: wJ9cMXy5I7NmP-tesog5dif_IcA.roa (hash: UcLm73dNhdZjvrhZoZZ7iKhQcPqcgFD8eyPtkOjfw6E=)
                          12: z2kZxAf0sstSr43Tliv-9wcbn9Y.roa (hash: 5Lr5045ZBArfMH8wAePGwKZYSNE38nbZ3QRnd+6wX20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:3d:32:67:d0:89:6b:50:84:1e:53:33:f5:7e:9d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
        Validity
            Not Before: Oct 28 02:00:56 2026 GMT
            Not After : Oct 29 02:00:56 2026 GMT
        Subject: CN=ff30b8dc915cd51458784c12e51529ea290144ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dd:de:8e:e0:73:f1:65:ac:77:80:a2:85:dd:
                    38:78:87:14:d2:95:0d:c4:3e:c8:d1:28:3f:c9:01:
                    ad:e6:d9:45:29:9c:db:e1:f7:31:a6:e5:e7:bf:10:
                    59:d4:35:3f:5c:4d:c4:74:45:d7:e3:c0:8e:b1:60:
                    88:30:24:40:dc:94:fe:57:e6:9c:6d:b0:ba:a1:cd:
                    42:6f:0e:52:03:27:63:e6:d1:a3:16:2b:10:3d:77:
                    36:2e:3c:80:fd:80:17:ec:92:e5:0b:4c:59:15:22:
                    ae:20:a4:17:b9:c0:40:c3:fc:3d:60:99:49:9e:5d:
                    ae:ea:fd:73:0e:62:74:9b:8e:8c:88:1d:8d:f2:c0:
                    03:44:ff:2c:8b:21:03:84:bb:dd:9b:4b:36:c5:27:
                    b2:f3:71:89:50:59:c5:da:3c:9c:34:90:d7:89:52:
                    cf:71:77:d2:0a:a4:da:05:23:2e:38:42:23:2d:f7:
                    af:7d:d0:09:9a:b0:24:37:79:f9:ec:d8:45:cd:03:
                    a7:26:a2:95:b6:ce:2c:72:14:1c:de:a0:30:a2:46:
                    cb:b0:b8:5f:73:fc:e3:74:d6:be:5c:d5:86:d5:81:
                    63:20:b0:ad:f9:bc:5c:c2:33:1c:d5:15:cd:6e:94:
                    1f:fe:69:0b:86:92:6c:9d:b1:f0:5f:b4:50:a6:ce:
                    a9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:30:B8:DC:91:5C:D5:14:58:78:4C:12:E5:15:29:EA:29:01:44:CA
            X509v3 Authority Key Identifier:
                keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a1:82:04:ad:34:43:61:f4:52:8f:7f:a8:df:23:71:5a:f5:
         19:01:70:9e:fd:4c:33:5f:2c:b6:c5:a9:c5:56:91:72:aa:93:
         aa:d3:db:89:3a:da:d3:3e:34:e3:66:a5:a4:77:66:ba:b5:ac:
         39:46:aa:8b:f3:72:55:95:ff:83:dd:18:32:6e:12:1f:13:39:
         ff:70:ea:00:f7:76:a9:6c:58:08:86:17:43:8f:27:f0:67:04:
         cb:49:cc:02:45:71:1d:3d:ce:63:d0:e8:c1:21:85:26:23:4a:
         a9:fb:ca:12:2e:0a:b7:fe:77:ab:89:d1:8a:6b:ab:88:85:f5:
         34:cf:e4:8a:a0:d0:b0:83:f1:d2:73:1b:14:1d:b2:37:0e:bf:
         93:1f:34:e0:89:5b:b1:97:9e:63:75:44:f8:0b:c6:9e:5f:0a:
         52:9d:43:76:0a:08:af:74:48:3e:40:10:34:8d:94:56:3e:49:
         bb:f0:30:1d:d2:24:96:48:4b:56:4f:2f:13:fe:3e:da:bf:70:
         a5:66:75:43:c1:a5:d6:de:a4:ea:b8:cb:81:b2:c7:ea:45:3c:
         f8:44:35:0a:e6:3e:dc:a9:8b:72:b2:a6:7a:31:88:42:1e:9c:
         31:cd:19:65:7d:95:63:8a:f6:9f:49:83:ed:ed:35:90:ad:be:
         61:cb:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:39:54 2026 by rpki-client