Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
File:                     quarBHvHMpbJcVvLrq4ukYMWt4o.mft (raw, json)
Hash identifier:          JY+O0F7A0BwJUth5uBHp8oW+MeBuZTxCU8AeB0ritt8=
Subject key identifier:   1C:27:2B:6B:32:A6:78:92:73:E6:6B:12:46:E2:40:E9:23:3F:E6:D3
Authority key identifier: AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A
Certificate issuer:       /CN=aae6ab047bc73296c9715bcbaeae2e918316b78a
Certificate serial:       01A16CB64DF5B6941517DB4CBFDA582DBC3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
Manifest number:          0A8B
Signing time:             Sat 24 Oct 2026 07:00:49 +0000
Manifest this update:     Sat 24 Oct 2026 07:00:49 +0000
Manifest next update:     Sun 25 Oct 2026 07:00:49 +0000
Files and hashes:         1: WICYHswQgB3ANXpj2XMC_BWEC_s.roa (hash: ikH6R5G0JiDUZ3ms+Esb5y69pjV5ZuQpnPGnpa+MynM=)
                          2: quarBHvHMpbJcVvLrq4ukYMWt4o.crl (hash: xv0Sjfvl0QPSA/Fqn9aMy+w9r4LlmS96U0Kg1rtBKJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 04:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6c:b6:4d:f5:b6:94:15:17:db:4c:bf:da:58:2d:bc:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae6ab047bc73296c9715bcbaeae2e918316b78a
        Validity
            Not Before: Oct 24 07:00:49 2026 GMT
            Not After : Oct 25 07:00:49 2026 GMT
        Subject: CN=1c272b6b32a6789273e66b1246e240e9233fe6d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:b6:3f:f7:3e:34:bd:8f:c5:b4:3e:9f:5f:
                    2a:81:d5:fb:d6:d1:db:0b:7e:f5:f5:59:62:56:69:
                    b6:97:90:39:80:05:ef:61:22:bf:3d:6e:ad:a9:10:
                    38:62:a1:14:25:3e:e1:9d:11:45:e7:19:15:5c:8c:
                    d4:f3:bd:4e:40:d7:6b:49:36:b9:79:f5:48:07:df:
                    82:eb:fc:38:cc:15:b4:4a:e4:57:57:01:5f:79:57:
                    96:c0:a6:57:6d:38:ce:11:b1:b9:e8:28:4d:24:44:
                    01:14:ed:d6:37:eb:d6:c6:a4:39:e5:f7:f7:a5:61:
                    63:81:b1:fb:19:60:03:0e:c8:87:19:b9:23:99:11:
                    2e:0e:b4:4e:7c:3a:80:ac:b1:f5:c0:4a:97:48:b3:
                    46:f4:02:17:40:c8:bd:d4:2c:b0:11:47:41:aa:58:
                    dc:f1:80:a8:28:90:ae:56:b0:e7:8b:2b:12:ce:d0:
                    0e:01:46:35:66:b0:92:22:37:72:78:63:5c:25:c6:
                    d2:bc:91:cc:df:e5:03:44:c5:48:44:92:14:4e:21:
                    d4:bb:8b:6d:91:eb:0f:d6:ef:12:46:c8:fa:d2:5d:
                    58:59:55:c3:e4:84:52:ee:d3:c1:06:26:95:0d:7b:
                    aa:94:d8:22:5d:e7:4f:f3:b7:a1:39:47:26:24:79:
                    69:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:27:2B:6B:32:A6:78:92:73:E6:6B:12:46:E2:40:E9:23:3F:E6:D3
            X509v3 Authority Key Identifier:
                keyid:AA:E6:AB:04:7B:C7:32:96:C9:71:5B:CB:AE:AE:2E:91:83:16:B7:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quarBHvHMpbJcVvLrq4ukYMWt4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3e802e-fab8-44fc-991b-2b50693dbf95/1/quarBHvHMpbJcVvLrq4ukYMWt4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:aa:58:dc:75:53:02:33:8c:00:7f:9f:42:1e:1e:17:db:4c:
         f2:07:16:69:60:0b:2e:9f:64:34:b9:0f:ed:58:55:93:22:ba:
         bd:46:ea:9e:82:cb:79:32:da:72:63:8f:c8:02:37:41:f4:82:
         68:bb:0c:ac:29:0f:ca:3b:ea:ee:c3:d3:c5:fe:81:1d:b1:c7:
         64:99:c9:c0:ef:02:5b:04:ab:23:4d:6e:b7:4c:ab:f9:6a:ac:
         98:9b:73:41:e4:1b:b4:cd:95:f1:98:14:fc:7f:78:8a:85:b4:
         eb:f1:dd:08:67:3d:d3:d9:a7:ea:d3:25:f7:19:2c:ff:7f:1d:
         7e:69:e5:44:83:f4:06:27:01:c1:08:a1:d4:1b:41:09:a8:19:
         3d:d1:0e:12:07:83:48:4b:2b:94:15:7b:97:f9:c7:cc:99:12:
         0a:28:ee:8e:ea:5d:bb:0d:c6:eb:82:9b:d0:a9:45:e9:e4:2b:
         f4:27:2d:84:bf:8a:e1:f7:89:16:f0:ed:5b:3f:cb:31:62:a6:
         34:b7:5d:e9:67:d3:38:73:99:c7:03:07:87:03:a7:41:36:05:
         a7:3a:c2:58:6e:aa:53:59:bc:01:d7:bf:f3:dc:67:27:6f:28:
         93:73:6a:75:b6:66:b0:23:c4:ec:bf:77:56:f6:38:c3:0f:20:
         68:bc:ba:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:14:49 2026 by rpki-client