Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
File:                     q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json)
Hash identifier:          S+PI/KDCRruCjNx+4WoqcYm/2sYx1Ea/F05aPE2MKuM=
Subject key identifier:   38:EB:4F:64:13:65:D1:AA:CD:4C:6D:BC:F7:88:64:D0:6F:8E:2A:6A
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Certificate issuer:       /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial:       01A1DEA7C859546EA4AE16BD335BC1556511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
Manifest number:          1B4D
Signing time:             Sun 15 Nov 2026 10:01:40 +0000
Manifest this update:     Sun 15 Nov 2026 10:01:40 +0000
Manifest next update:     Mon 16 Nov 2026 10:01:40 +0000
Files and hashes:         1: 0fgHNVCctmMI1V-BS5_kF5EsiOU.roa (hash: eNuhCbiq7TJi88XjDE039hLZRz8ipxup9WRLp8sp1DI=)
                          2: 7_6SFXfZMrzFSdtu3xDOw0gJ8JY.roa (hash: hG4yO49oHj9b8DfZFiphyKQ8y3qDFd1bbzb1jH4CrQU=)
                          3: DF7ZMArr7YQkP6JCvTXnJ48GG1g.roa (hash: h0YoBkA2Ma+7OTVVfQXFtJdLdFlpvKYuPy7+Y+Jklhw=)
                          4: Ep-mQB2FAsp8xVwfqHWWTFWTlYM.roa (hash: CcqzWZ6bMIWysh3kKgYdOQMLPUZ4shI2ek8KjLM+54s=)
                          5: GujJ-FoV2NxCphoiy9ei8Zxbj94.roa (hash: 5qyX0xcJQK2tt6fcmxtTs5x5YBwoFGMWlBym7IBYHmk=)
                          6: MuQyieCgxPJT0SRv6Xj_GxkiB-I.roa (hash: 0pzaFGjjnJFM3Mi6/Z0qJhoLAoydrAANnuMwOCc5Kso=)
                          7: P7wv0TBgiECiEBUf1EgkMnv47Po.roa (hash: rqQESPX4LWrWYgKl1zOfXltaaGJ18DHxc3dAwU1KR9k=)
                          8: Q1yzAo5L9w5IHv0JqXbg9yCMMcU.roa (hash: qLGf0LLtEidrk4nWv5exOU1LPTUa9MuB+3L8YC0+hbc=)
                          9: QLx_bFpLJ0q7OGCLe6wvYzJoLrw.roa (hash: XQYgd3zzuTttV8zp0GzxyEY68F4NaIMjIG/jCEfOzec=)
                          10: RjNeSA3OdSgfuKyXCw4On9Hfwig.roa (hash: TGS0IFEq2/Ak8/1sB2LyNa9KTXiGL21lniik5j5gU80=)
                          11: T5XQh9j95-eHLk4tIkpyKU927L4.roa (hash: YLS+fL7b3BgU8PYEgqxRvmWh3Kk8TcAGqvr6h5p+gtg=)
                          12: TDSIuL-UCZDNweCSbeoQaq_Kz94.roa (hash: xmfP7+f8gMkStgz64Ovg93ThSGH8dnAhDslP+tZj6oY=)
                          13: X_eS7uT76Tv6lToj2nDNeg9sgYo.roa (hash: rlOOw1Hh+1Gv0+quXstdSdljOaXwuIQS08R8cOH2H9E=)
                          14: YRVJ0Gjf3ToFSXg4tQ2csynme1g.roa (hash: +3oRd6tn6dDyNGcRR/+Wdu79deA/W9QRUODpof/4dqI=)
                          15: YVly3HyFx4cO-VDnGW8-TlLZp8c.roa (hash: zmddt2tM/OfIW2jjFDZBhz9+RtNwb/OeGPoKv5WQBq0=)
                          16: f_U1wlpu2o8G1EDSBfG2v3CJsrU.roa (hash: mBEZgenCoBMKSBIbKUgW3oXM9LSYHALYDi8zO9xe4lk=)
                          17: gkBIXWPDqd5iHgTo6Oq_RIYuttI.roa (hash: TAAZ/5Q3PgiVYAsyiVs0eY43VCN4PWzuxjaw3+oWC3U=)
                          18: l8R7A1sksjUkbsqqgmFV4yhnwoY.roa (hash: tOD+/L6A4hjUPcMiH0jbILCqY006lQVa6EOA+rm4RSY=)
                          19: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: +dE0PQDTib8GzB1TNdh0IoJv5+9bbG5mbHiIXyhvrRQ=)
                          20: qHqVroTNd8mAZUTP-4LLTihEjRA.roa (hash: LFqfsvqUg1kryv3SdZmfz1fPpVN8XkzwNYvHfBdV5dM=)
                          21: r97T0zrjjPPADnFxgjfEjKH0-vI.roa (hash: uvIm3GKMAsVoII3IPG7UtxMh0NuDqi6V1N2PDdGwnIM=)
                          22: sIdlwG_KvJyr9jN9d5KfNvyl-ws.roa (hash: HSdj5IIYXsemUlbbPFPUMMU0DovDtEclq0qz0Z73zr0=)
                          23: z2b5HqrBbNton83_qG8fiGl3ipE.roa (hash: /MzZQY5wAz0d5qSw7Z9ljmH3Z0SZhJHz2o3BPZIFhmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 10:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:a7:c8:59:54:6e:a4:ae:16:bd:33:5b:c1:55:65:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
        Validity
            Not Before: Nov 15 10:01:40 2026 GMT
            Not After : Nov 16 10:01:40 2026 GMT
        Subject: CN=38eb4f641365d1aacd4c6dbcf78864d06f8e2a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:78:f7:01:43:62:4d:84:7b:f2:8a:30:4d:a1:
                    85:e8:e8:e9:03:21:f5:32:39:66:2d:3c:b3:fb:4e:
                    90:74:96:3d:6c:59:f3:a5:cc:23:ff:61:6f:39:94:
                    48:d1:39:97:0b:d4:71:df:36:2d:88:47:25:9c:2a:
                    bf:80:98:4b:7b:be:44:5f:fb:da:74:87:6e:f8:fc:
                    64:d1:a8:f0:a8:1d:09:cf:51:92:eb:41:2c:c8:69:
                    2d:ea:b4:75:43:0d:9d:95:cb:21:86:3e:fa:0c:5a:
                    ff:7f:3e:31:0b:57:24:8f:dd:66:75:dc:c2:5b:d8:
                    2a:9e:0b:0b:76:45:0c:50:9a:be:aa:76:d2:b2:cc:
                    3c:8a:18:e2:e9:c1:ff:75:4c:41:bd:e6:09:93:67:
                    f4:c5:06:86:8b:e8:38:90:da:64:df:c2:9d:8d:b0:
                    ac:9f:c1:66:aa:d3:b6:86:80:75:68:ed:ea:92:60:
                    c5:b9:11:9d:44:1e:d5:a3:ee:55:4e:69:0e:18:e4:
                    b5:90:5e:78:f8:b1:a5:fc:dc:77:53:b7:b8:d3:99:
                    1c:c6:3b:7f:d6:b4:fa:3c:7e:3f:b4:3a:a5:ff:58:
                    5e:30:cd:3c:68:94:05:6f:8b:c1:21:71:bf:37:88:
                    83:f1:17:3a:c3:13:c0:2a:06:af:02:91:08:1a:83:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:EB:4F:64:13:65:D1:AA:CD:4C:6D:BC:F7:88:64:D0:6F:8E:2A:6A
            X509v3 Authority Key Identifier:
                keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9b:89:e9:cc:03:38:cf:36:a9:d9:de:fc:d3:31:99:bb:f4:
         89:19:5f:13:5d:86:19:25:03:61:1e:06:fb:3c:45:5b:66:c0:
         58:33:fc:26:d4:69:3a:29:96:95:8a:75:d1:cd:66:c5:c8:c4:
         c5:a0:e3:62:f2:1b:00:27:34:68:36:23:2f:46:82:ce:ce:c3:
         0e:93:2a:01:a2:be:6a:19:2e:da:92:ba:5a:bd:6f:e7:3a:9a:
         1a:03:1a:23:80:51:ae:74:66:79:83:d2:de:7c:5d:5f:a2:ac:
         25:73:ec:f3:78:6b:84:4e:bd:ac:81:c4:6b:e9:49:79:2e:33:
         d7:9a:69:ac:98:47:53:c2:ff:b3:15:ba:ac:44:9e:b7:48:4f:
         9b:c2:16:e4:78:67:5f:e8:7c:94:71:3d:c6:f8:d4:74:27:6d:
         76:5d:aa:d9:d9:49:4f:25:c5:47:ba:65:7b:54:0f:d8:ba:b0:
         39:34:e1:df:a1:02:8b:14:87:58:e5:81:58:b4:02:ee:3a:23:
         b6:00:91:cb:f7:f7:41:58:cc:0c:0b:dc:4d:f6:12:73:0e:b3:
         6c:f6:79:90:b8:50:d5:c8:e1:ba:ec:81:1d:84:0a:8c:8e:62:
         d7:9a:87:e0:6c:0f:98:2f:b1:aa:ae:b8:f8:74:4a:29:e2:11:
         61:65:a4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:39:24 2026 by rpki-client