Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
File:                     fQakK7JEblHxkuo3W99-7FpRx38.mft (raw, json)
Hash identifier:          COXTvB/hka3LXBCAeMALppxEw4sL/hWX+xF8DqnledE=
Subject key identifier:   41:1B:D6:0D:68:19:25:81:C9:39:DD:65:EF:EC:AF:C7:96:0A:70:74
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Certificate issuer:       /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial:       01A15A0BED210BC96D8B250DC14BDE83961A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
Manifest number:          16D6
Signing time:             Tue 20 Oct 2026 16:01:33 +0000
Manifest this update:     Tue 20 Oct 2026 16:01:33 +0000
Manifest next update:     Wed 21 Oct 2026 16:01:33 +0000
Files and hashes:         1: 0KFRQQB9Lc0XuWKXvA0dnIy2njg.roa (hash: 9PNcCkZrauXgW+3YFUtyOx9/rmS3W9JA5UUSg4BFsGU=)
                          2: 2diwtm0Zbf_bmsdktiMcMcOMQg8.roa (hash: eVMbVKsLzh2plyfnoFozWhZn/xVtpLdpwRt+PjQnri4=)
                          3: 2hKTftFtuQRMT1oaso9aJ2Fwbhs.roa (hash: yt73gkjCnEpWOl4mDI2UvWLYkd+MzKzlxXOQLXQ8/rg=)
                          4: 3Q5j-7Pt8HcUq6bBHu3dKDediOU.roa (hash: 5c1NCBuQPjwD9eR+7rowyJnrFaKqJ48pXAIHslQmr00=)
                          5: 8NYcGLI50NHf_-GqbpzZZr4ltLA.roa (hash: fEaVNw2Wyd4+MGZ7FzjbEUafcEBr+2hDrYVvqLoZo5Q=)
                          6: 8jfqpIUKuOw3bEeNl0QjuTIts5w.roa (hash: lA+JjzalnUsshqDeIEjkif9B6fmiylkMishkEuJTw+c=)
                          7: 9JzLr_kY6fV9XLrISkFEllTE8Yg.roa (hash: vLCl7UqAkvLu4Gv7Uv3OI5gYhrAd84MopPXeYDD7onk=)
                          8: 9gIUZ3-KWFOqbPCbkWI5yHzecO0.roa (hash: jjpO0DxwKQMyYQwBPNQVarsVnFCb4DMo73zMMJVeyFI=)
                          9: BHMecBG9x9xUY8jTjlOT7nNxN9k.roa (hash: HYJY2r76YQlta0gJBproON2MhOd3SZjrPkPVpXkWpDU=)
                          10: Ez7vdg6eB07lFL05DPjqJKCOdIo.roa (hash: fBYYvlQ87n8J9SuhX/gsPnpOFHNxq/I9XnmkEjxP+Js=)
                          11: FLQX7VTxwFaQrQRyhh5AZ1ehPTU.roa (hash: TCoATecBzXKE+6xHAeP7h7guA+jHThVu36yV5nbsOcM=)
                          12: HMUv5O_IloNPK-xnYoboUUQaw9I.roa (hash: pWKPihhcLAd/kMZDUiPWP3Bf2PaOFgTs9krixFbyXKg=)
                          13: M23E5jFvo9QE4PZ22sZCcc77gm0.roa (hash: ez6ZtNmZWmq4SxAtsTn9ZRzqCWD4ICp/AVepQiwyNEI=)
                          14: M9SkjzKgp0C1w36F_3V-rwxzPrM.roa (hash: NOgmWBFIBR8qfeBLcrBHcBrGBBxychhI5zlw8nvAaeE=)
                          15: TCIbufkPjrOPAFHbaMVz2PJuwNQ.roa (hash: WtRiQqaxy0ZXMWLqBVnrOC4eZHImJ1xhzNYsapZ1pnA=)
                          16: UiWVNnunpHFmIczXpq49fnvJeYs.roa (hash: w0Bd3rOlh3OoeFYCrP5Yaea4iK5WgTyMFaHq0kqZRqk=)
                          17: WToUjwUwqxWGFX7YfgHrsOMgM_8.roa (hash: kIIRszKRMT6GNaYzUy0dv+/IIIR5RaGl85LSnUgSJ+k=)
                          18: ZmxAzTdpyOHGn1oGXDJkCvMWh_A.roa (hash: RJ1urSQtZ0MaFoKerRAcxgAUxsoMUSf8Kqmy+pHBJcs=)
                          19: bxDMk8rDIjX1JIaOhPkkS6agVn8.roa (hash: qdJb7Cn9TFHTehw1Um25RR8YIvGg9qXGmexGQanw2Jc=)
                          20: fQakK7JEblHxkuo3W99-7FpRx38.crl (hash: GvIAEPRhM0CdLpMxaUgNl6Sdy6ao2g1Q9ZCf73+EYl0=)
                          21: gnDB9W02-r6mUcSzv9GpwgZT3jo.roa (hash: xF1q8i5GseG2Y/ChOFm114hCxbfrQRyX8F0vQWk71OI=)
                          22: go1rZLit0ECxEQHq3kpBk2CE4Qg.roa (hash: hJVabNE+muWiI6lmIeSiA8icGMZrwMb4YKQs1wbCUu8=)
                          23: kx0iDFbsXmf1_joPchYNl-Qa3D0.roa (hash: 0natnuOE/XONkp7+7SAGpqgXtC+NNO9MQZlBw7eJSr0=)
                          24: lqCu78LtvHJishdD6N4eR-R7RIM.roa (hash: iKTkz66NrpLAcH4+xiDnu+/37wuOGvm5ZNIxFMyUSUw=)
                          25: ovaw2-C0aLc15MUNM--nHeVzXAk.roa (hash: k6KOhUlHQLtwN5AMkDyj19Newr/qZ7SL0hXw1sn09K8=)
                          26: ovqAK3pYOqxaHlVK-LqO8cHqIYM.roa (hash: W0pJB/sjr5+69ynLbPfenFx2cuPhFShby13x0oho2no=)
                          27: pv9Cpord1y0tCGV7NVJXrmWgS28.roa (hash: ue24VSBSX2J82akgvFk1ddcbgpuIzB8HeE+GFQFimS4=)
                          28: qvYAP-lSXmNoClOM3rygyr0zdI0.roa (hash: XZWaUj3+lj06izt55k5PBSAGEgz79sdEGihL99kraEo=)
                          29: xWAzCmZMcG-JDSiQJKOLozSrRc0.roa (hash: lzdIYy1HSi547j5LHsPdxL03SsyIBHEZ8dTINmo4ArY=)
                          30: zN7eJocMGhWq5niF73RM-dIuVIM.roa (hash: oo32X248IIf2Wa+j4gsxo5ikGlQv9o+0FiBYs6RXCgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 16:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5a:0b:ed:21:0b:c9:6d:8b:25:0d:c1:4b:de:83:96:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
        Validity
            Not Before: Oct 20 16:01:33 2026 GMT
            Not After : Oct 21 16:01:33 2026 GMT
        Subject: CN=411bd60d68192581c939dd65efecafc7960a7074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:73:38:24:85:cc:fc:f0:8f:b0:40:18:dc:
                    1e:01:46:6c:80:64:45:98:26:15:e2:75:d8:54:77:
                    aa:28:8f:2d:6f:36:5a:c2:3d:55:8d:60:f0:6f:50:
                    bc:0f:bf:b1:df:ef:02:3c:b0:e4:4a:f8:0e:e8:93:
                    49:0c:cc:a9:db:01:4b:87:9b:11:22:63:84:fb:5c:
                    c8:3e:e6:e8:aa:4f:e0:91:32:f4:ff:7a:13:e0:3a:
                    4d:3f:c1:a0:cb:f2:9e:1d:2e:b4:86:0e:38:66:76:
                    a6:63:f4:72:c9:77:4a:8b:ea:3e:f4:8f:aa:d0:53:
                    3f:31:0e:12:a5:ea:61:95:5e:26:2c:bd:fc:d5:87:
                    c4:a9:f4:c3:5a:9d:7a:6f:cd:40:af:b0:e3:09:a1:
                    40:db:74:12:9e:f5:8d:73:8c:a3:f2:5f:09:e0:da:
                    a9:ee:63:9e:f7:97:c8:d1:74:e2:4c:d9:ca:d9:16:
                    f6:91:59:f0:7f:70:94:69:a9:b4:32:46:51:5c:2c:
                    92:09:78:82:a9:8b:e8:fc:6e:b2:19:36:75:97:d6:
                    53:e3:35:05:80:da:62:fc:53:57:1a:ea:52:26:25:
                    1c:d2:8b:fe:e6:8c:6a:e3:cc:aa:e9:e6:23:e7:b5:
                    ea:da:d8:b4:f9:52:5e:08:ad:52:d0:20:53:7b:1a:
                    17:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1B:D6:0D:68:19:25:81:C9:39:DD:65:EF:EC:AF:C7:96:0A:70:74
            X509v3 Authority Key Identifier:
                keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:7e:05:e1:a3:76:a2:47:39:f8:bc:5d:7d:a3:4f:69:a7:ab:
         43:12:86:9a:29:e9:8d:47:bb:43:0f:e0:f8:66:ea:4b:a6:a3:
         32:88:6b:5e:06:9b:d8:0e:e5:ef:9b:0c:c1:fc:f8:12:dd:b2:
         9f:42:ff:24:a8:83:7d:81:f7:e1:3d:07:10:e4:5a:6b:f1:3c:
         57:e0:97:5a:80:59:a5:20:81:dd:e1:e7:96:e1:f9:ba:bb:2d:
         e6:02:9e:77:d8:6a:f3:3d:3b:a9:32:94:09:25:82:f9:cf:1d:
         e3:ea:31:df:8c:ed:59:5a:cc:4e:93:a9:6f:b6:f3:b9:32:f7:
         37:f3:0a:b4:c4:5e:f3:13:ff:bd:f1:7d:fc:86:4a:19:ad:dc:
         8b:b6:06:94:f3:e3:f3:55:b6:a3:b0:41:18:67:5a:23:c6:9c:
         f7:c6:20:3f:65:3c:26:86:8a:ac:76:97:e2:15:56:4b:21:7c:
         2e:57:79:eb:5b:db:d6:0e:ac:fa:ab:c9:c2:19:5d:f3:7f:0d:
         25:82:df:c9:03:db:fc:96:c3:2e:b8:b3:1a:fa:6b:58:82:78:
         5e:8f:cf:dc:dc:89:c9:b3:a2:dc:d1:b7:c8:0e:6e:21:56:f1:
         ca:5a:ff:67:df:1a:b3:87:15:f5:a5:92:d9:43:54:91:5b:61:
         42:40:e5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 01:52:07 2026 by rpki-client