Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
File:                     QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft (raw, json)
Hash identifier:          5ilLqskNtnSUQNUwztkPMBq/bmhoMLaIA8tR2XVDoF4=
Subject key identifier:   FB:A6:2C:00:19:70:68:4F:40:17:61:05:DB:F7:F7:31:1A:05:DA:4D
Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
Certificate issuer:       /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Certificate serial:       01A100FEAD9E56544FFCA98091758C8B89A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
Manifest number:          19D8
Signing time:             Sat 03 Oct 2026 09:00:52 +0000
Manifest this update:     Sat 03 Oct 2026 09:00:52 +0000
Manifest next update:     Sun 04 Oct 2026 09:00:52 +0000
Files and hashes:         1: 3tPs-hmvMWYpJTDa0LrNchR-BRU.roa (hash: P08I5J8BvFgxh/ROUQBVKnGBWnHnTyxFTFLzZS6Bx/Y=)
                          2: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl (hash: XXN1ZsbWXxuTU66FxocQmTG3CeT6hmweUy5ZHj/2e5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 09:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:fe:ad:9e:56:54:4f:fc:a9:80:91:75:8c:8b:89:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
        Validity
            Not Before: Oct  3 09:00:52 2026 GMT
            Not After : Oct  4 09:00:52 2026 GMT
        Subject: CN=fba62c001970684f40176105dbf7f7311a05da4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:01:f4:51:32:31:ea:a0:10:9a:9f:a4:75:bb:
                    6f:79:0d:3d:f1:2d:02:fa:2b:6e:0c:c0:8a:d2:ad:
                    45:e1:f9:96:db:ce:fa:75:a6:3c:c6:ca:2b:dd:6e:
                    47:cc:e4:ab:29:0d:b4:54:56:1e:15:95:96:a0:74:
                    fc:73:ae:fd:a2:67:4a:99:93:8e:19:2c:a5:44:a3:
                    c3:11:39:05:03:ec:d6:85:9c:45:93:fd:8b:e8:ec:
                    9f:26:ef:63:69:5e:fc:49:e4:84:b1:80:f0:0e:36:
                    4c:d0:5b:7b:b5:5d:3f:62:c8:03:26:04:e7:92:1e:
                    34:e4:1e:d1:d0:e6:64:e1:11:5c:7c:1b:81:68:b9:
                    c0:a6:2d:6b:d2:ad:a1:06:a5:62:f5:ee:e4:d1:3a:
                    fa:24:f9:15:4c:c8:a8:90:e6:91:ba:c4:7d:c6:d4:
                    e5:0f:c9:82:87:1a:e9:0d:c3:c6:cd:d6:d4:f4:f9:
                    ce:4b:a0:ad:ba:6f:54:e3:fe:1d:7c:e3:6d:1e:69:
                    5e:8f:13:bf:4e:b4:5e:1c:68:87:a6:12:2f:a6:d1:
                    6e:15:9a:9b:58:b5:49:9c:56:8f:f3:1e:57:2f:3e:
                    d3:00:b0:d7:59:c3:ad:dd:fd:ea:9b:58:7d:f2:07:
                    04:3f:dc:fb:a5:58:6b:d4:62:d3:eb:30:b3:e8:a8:
                    be:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A6:2C:00:19:70:68:4F:40:17:61:05:DB:F7:F7:31:1A:05:DA:4D
            X509v3 Authority Key Identifier:
                keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:28:80:93:31:a3:49:5e:09:cf:4a:80:f3:c7:9f:21:5f:03:
         4b:81:36:dd:c5:f2:c5:ea:5d:d8:f0:5d:8a:92:69:27:40:30:
         d1:e0:64:f7:45:b3:d1:61:90:25:d0:72:1c:32:9e:a2:86:0a:
         8b:97:9d:d2:7f:cc:5b:9e:11:14:cc:0b:4f:b0:0e:36:78:83:
         ee:26:e8:10:48:72:cd:46:c8:0e:14:12:10:13:e2:cd:3f:2b:
         28:ae:88:f3:25:6f:b1:18:f3:d8:a1:48:09:ad:3a:9b:50:a8:
         ab:f7:08:7e:9f:c8:61:f9:73:c6:e4:9b:59:b3:6e:c6:29:73:
         5e:df:9c:3c:e4:ae:55:96:18:1e:00:a5:36:2a:c3:06:cf:8a:
         2b:58:7c:56:aa:82:c2:c3:5d:00:c5:f1:b7:1e:67:7e:d7:37:
         5d:89:7c:3c:00:be:2b:36:e4:af:19:82:a6:a8:9f:cc:7e:8c:
         af:59:01:d3:80:8c:bf:a5:f0:61:6a:40:dc:bb:16:e0:b8:09:
         82:b0:94:66:34:f6:21:a1:75:86:04:0f:b9:a9:ad:23:52:0c:
         30:06:50:44:db:ee:75:a8:85:6e:22:97:a8:ee:f3:c8:a6:15:
         d0:e5:3d:8b:fe:01:a7:a0:ea:ed:8b:fc:8e:cf:f9:53:1c:bd:
         3b:6d:94:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEA/q2eVlRP/KmAkXWMi4mkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwY2I1OWE0MThlYWRmYTVkYzg2OWY1NmYxODQ3ZmIyNWQ5
ODdmYzYwHhcNMjYxMDAzMDkwMDUyWhcNMjYxMDA0MDkwMDUyWjAzMTEwLwYDVQQD
EyhmYmE2MmMwMDE5NzA2ODRmNDAxNzYxMDVkYmY3ZjczMTFhMDVkYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQH0UTIx6qAQmp+kdbtveQ098S0C
+ituDMCK0q1F4fmW2876daY8xsor3W5HzOSrKQ20VFYeFZWWoHT8c679omdKmZOO
GSylRKPDETkFA+zWhZxFk/2L6OyfJu9jaV78SeSEsYDwDjZM0Ft7tV0/YsgDJgTn
kh405B7R0OZk4RFcfBuBaLnApi1r0q2hBqVi9e7k0Tr6JPkVTMiokOaRusR9xtTl
D8mChxrpDcPGzdbU9PnOS6Ctum9U4/4dfONtHmlejxO/TrReHGiHphIvptFuFZqb
WLVJnFaP8x5XLz7TALDXWcOt3f3qm1h98gcEP9z7pVhr1GLT6zCz6Ki+IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPumLAAZcGhPQBdhBdv39zEaBdpNMB8GA1UdIwQY
MBaAFEDLWaQY6t+l3IafVvGEf7JdmH/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU10WnBCanEzNlhjaHA5VzhZUl9zbDJZZjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85MjRjNzctYjI4My00YTUyLTkwOTQt
MTFmMWI1YTRiMGRjLzEvUU10WnBCanEzNlhjaHA5VzhZUl9zbDJZZjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My85MjRjNzctYjI4My00YTUyLTkwOTQtMTFmMWI1YTRiMGRj
LzEvUU10WnBCanEzNlhjaHA5VzhZUl9zbDJZZjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCiAkzGj
SV4Jz0qA88efIV8DS4E23cXyxepd2PBdipJpJ0Aw0eBk90Wz0WGQJdByHDKeooYK
i5ed0n/MW54RFMwLT7AONniD7iboEEhyzUbIDhQSEBPizT8rKK6I8yVvsRjz2KFI
Ca06m1Coq/cIfp/IYflzxuSbWbNuxilzXt+cPOSuVZYYHgClNirDBs+KK1h8VqqC
wsNdAMXxtx5nftc3XYl8PAC+KzbkrxmCpqifzH6Mr1kB04CMv6XwYWpA3LsW4LgJ
grCUZjT2IaF1hgQPuamtI1IMMAZQRNvudaiFbiKXqO7zyKYV0OU9i/4Bp6Dq7Yv8
js/5Uxy9O22ULw==
-----END CERTIFICATE-----
Generated at Sat Oct 3 15:52:30 2026 by rpki-client