Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File:                     Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier:          dTb7eTti5QnfK1sjxyRKsFRPCO/H678uoyYm9kfF2ns=
Subject key identifier:   FB:1F:95:C6:D1:F7:79:3A:9C:69:C7:89:52:F1:AD:F8:99:A7:8E:33
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer:       /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial:       01A0FC7DC4822768319C84AD680348C664BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number:          155C
Signing time:             Fri 02 Oct 2026 12:01:35 +0000
Manifest this update:     Fri 02 Oct 2026 12:01:35 +0000
Manifest next update:     Sat 03 Oct 2026 12:01:35 +0000
Files and hashes:         1: AOYNyLogCuZgfBQZ_rhFiasTEas.roa (hash: zOItC91i7X4F3quOK9yoQD+KspwFkw26V76frNAHPSc=)
                          2: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: 3zlwf5hP4RhYj5/TaVsLTvh5qxI70kbAt/nPpQVnlSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 12:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fc:7d:c4:82:27:68:31:9c:84:ad:68:03:48:c6:64:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
        Validity
            Not Before: Oct  2 12:01:35 2026 GMT
            Not After : Oct  3 12:01:35 2026 GMT
        Subject: CN=fb1f95c6d1f7793a9c69c78952f1adf899a78e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:00:a3:6e:65:c7:92:5c:91:2b:0b:7d:e1:1e:
                    a1:5c:ba:e0:ad:c9:7d:f4:0d:ab:10:15:86:74:40:
                    50:97:f6:cc:d3:30:7b:bb:8d:b5:14:4c:e6:a3:3a:
                    89:f0:a2:de:b4:2c:d5:f0:77:51:09:c0:8e:90:c8:
                    43:95:98:2c:fc:33:fb:ee:31:4b:50:e6:1d:c1:a8:
                    b3:01:ce:15:73:6f:fd:f4:11:76:58:93:ef:ab:c6:
                    c0:49:e8:25:52:86:40:71:a0:a6:da:45:2e:0a:9c:
                    c1:2d:7f:81:37:4f:82:da:48:28:33:8c:be:92:9c:
                    15:5d:50:d2:1f:0e:90:4a:a3:a2:e8:84:c7:e0:eb:
                    f6:eb:d2:d2:89:74:c9:85:18:0a:8b:06:64:62:3e:
                    3f:e4:8d:a8:cf:ac:0c:7d:63:82:a7:8b:c7:43:ee:
                    10:d4:d3:99:2f:d9:ca:5b:bb:56:31:0f:c0:52:e8:
                    17:4d:66:a5:ce:01:d3:58:3d:ef:f4:b4:57:3f:f1:
                    40:f1:97:24:24:7a:bf:d4:af:23:8b:eb:a5:e7:1d:
                    ce:8f:04:e0:02:c5:2a:03:95:3f:2d:c6:ff:46:cb:
                    48:24:37:24:bf:af:d9:b3:f0:1e:de:97:c8:09:ba:
                    03:88:8f:82:04:4b:bc:a9:be:5d:0e:2e:f7:fd:fb:
                    c8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1F:95:C6:D1:F7:79:3A:9C:69:C7:89:52:F1:AD:F8:99:A7:8E:33
            X509v3 Authority Key Identifier:
                keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:53:d5:09:3d:39:25:4f:63:cd:3d:16:92:1c:9f:f5:35:aa:
         31:b5:4b:3d:4d:c1:2f:2f:77:56:a7:a2:db:5e:80:13:d3:1d:
         c0:74:8d:50:3d:ad:d7:64:52:d8:89:bc:37:57:5b:a1:66:50:
         ce:2e:dd:8f:44:07:12:59:9e:e8:6e:30:36:9c:bf:16:bb:74:
         3a:dc:28:4e:bb:0c:ef:84:f4:51:16:57:60:02:2c:a5:70:59:
         dc:b4:fd:5e:74:c7:35:3f:a1:f8:dc:6e:1d:ca:7c:6f:06:91:
         ea:ba:a1:24:c4:ea:b3:ca:25:bc:46:33:20:94:89:74:c7:bb:
         58:56:8f:6f:02:32:91:c3:51:2a:e6:d3:a7:9c:18:54:53:67:
         6c:cf:6d:55:ba:e0:9f:48:f0:f2:24:59:f1:0f:fe:95:b1:74:
         a4:2c:30:bb:17:ad:e7:79:43:fa:fc:68:dc:d1:b2:23:ed:c8:
         ce:3b:d0:07:67:09:f2:3e:c6:12:34:95:cb:24:4b:d5:8c:d0:
         0f:31:66:dc:9b:f5:06:49:04:40:72:2a:a8:be:a9:2f:ef:be:
         f3:79:88:fc:32:28:cc:99:a7:37:82:65:11:7b:e1:af:9f:b3:
         de:44:c8:6e:49:e6:95:56:eb:15:a1:3a:c4:e4:55:90:f6:f9:
         53:8b:8b:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD8fcSCJ2gxnIStaANIxmS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzN2E1YzdlN2M3ZWFiMjM5MjM3MmZjMzhkNDhjN2E5Nzdi
MjRhYmQwHhcNMjYxMDAyMTIwMTM1WhcNMjYxMDAzMTIwMTM1WjAzMTEwLwYDVQQD
EyhmYjFmOTVjNmQxZjc3OTNhOWM2OWM3ODk1MmYxYWRmODk5YTc4ZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQCjbmXHklyRKwt94R6hXLrgrcl9
9A2rEBWGdEBQl/bM0zB7u421FEzmozqJ8KLetCzV8HdRCcCOkMhDlZgs/DP77jFL
UOYdwaizAc4Vc2/99BF2WJPvq8bASeglUoZAcaCm2kUuCpzBLX+BN0+C2kgoM4y+
kpwVXVDSHw6QSqOi6ITH4Ov269LSiXTJhRgKiwZkYj4/5I2oz6wMfWOCp4vHQ+4Q
1NOZL9nKW7tWMQ/AUugXTWalzgHTWD3v9LRXP/FA8ZckJHq/1K8ji+ul5x3OjwTg
AsUqA5U/Lcb/RstIJDckv6/Zs/Ae3pfICboDiI+CBEu8qb5dDi73/fvIlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsflcbR93k6nGnHiVLxrfiZp44zMB8GA1UdIwQY
MBaAFEN6XH58fqsjkjcvw41Ix6l3skq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ZmFhZTYtOWYzMC00MmVkLWIzNzUt
NTVhNDNhYWI4ZjczLzEvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83ZmFhZTYtOWYzMC00MmVkLWIzNzUtNTVhNDNhYWI4Zjcz
LzEvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlPVCT05
JU9jzT0Wkhyf9TWqMbVLPU3BLy93Vqei216AE9MdwHSNUD2t12RS2Im8N1dboWZQ
zi7dj0QHElme6G4wNpy/Frt0OtwoTrsM74T0URZXYAIspXBZ3LT9XnTHNT+h+Nxu
Hcp8bwaR6rqhJMTqs8olvEYzIJSJdMe7WFaPbwIykcNRKubTp5wYVFNnbM9tVbrg
n0jw8iRZ8Q/+lbF0pCwwuxet53lD+vxo3NGyI+3IzjvQB2cJ8j7GEjSVyyRL1YzQ
DzFm3Jv1BkkEQHIqqL6pL+++83mI/DIozJmnN4JlEXvhr5+z3kTIbknmlVbrFaE6
xORVkPb5U4uLhA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 06:22:37 2026 by rpki-client