Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
File:                     qexXvIRk_sLpobCY_840whqvnKY.mft (raw, json)
Hash identifier:          zuLguhaVqdydM4RywPlEH2t+R3f8EyKr/ohqQ9nbiA4=
Subject key identifier:   99:6D:88:48:2F:41:70:EE:48:BE:A5:74:C5:12:75:C1:FD:6C:77:5A
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Certificate issuer:       /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial:       01A128E90C1FF6399F2A039DE2AA1ED9F6A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
Manifest number:          1AA2
Signing time:             Sun 11 Oct 2026 03:02:03 +0000
Manifest this update:     Sun 11 Oct 2026 03:02:03 +0000
Manifest next update:     Mon 12 Oct 2026 03:02:03 +0000
Files and hashes:         1: CNslXorIhHcxu1ZmEwT8mrYvs6k.roa (hash: s1ROfgQwLlFxkAsbeS9eF9uhXnn1miGuc5wD3r3iLCo=)
                          2: ie_Pu7uiMx8GOXLlSXzf2113uw4.roa (hash: 0qiWVLbjFxTIJ5VjDihdh12+Gr4lOgtQTqIJcLMq4Wc=)
                          3: o4zZlyS221abBwGOsgbFYOgvgMI.roa (hash: TiMn5uiz7jjx9HbjbyRUh6Tq/Z12nqOsqsCynyTQnIw=)
                          4: qexXvIRk_sLpobCY_840whqvnKY.crl (hash: FK+OdZZzEnuT7FZEXCLWR3oDhQw3PuZr/fjWav/qa3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 03:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:e9:0c:1f:f6:39:9f:2a:03:9d:e2:aa:1e:d9:f6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
        Validity
            Not Before: Oct 11 03:02:03 2026 GMT
            Not After : Oct 12 03:02:03 2026 GMT
        Subject: CN=996d88482f4170ee48bea574c51275c1fd6c775a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:b8:44:64:a3:85:1c:74:67:33:6f:f3:e9:
                    f7:29:2b:14:8b:73:b4:87:f5:91:c1:e4:b6:c1:b5:
                    da:af:64:d9:e3:15:b5:9d:e5:c3:40:97:89:91:f2:
                    1f:ce:d5:73:b7:7f:2d:2a:f5:7b:fc:ab:c0:06:03:
                    1c:b4:61:bd:b0:6d:c9:12:25:6a:1e:71:f9:30:91:
                    20:40:ee:98:25:21:c9:12:38:10:72:5d:ca:be:65:
                    9f:00:21:5c:f8:75:d1:e9:d4:c4:79:e1:7e:4a:93:
                    4e:ba:41:67:6f:c1:e1:42:17:e5:22:49:cc:e8:3f:
                    d8:1e:54:57:d4:a2:c8:f7:cf:c5:63:32:52:6d:60:
                    66:9e:b2:83:a0:67:e6:60:96:55:36:3e:66:bc:e3:
                    28:10:46:55:6f:5c:b3:87:c1:90:d1:9c:84:18:10:
                    7a:44:89:19:17:3f:76:fa:f8:f4:49:24:59:3b:8c:
                    bd:e0:24:80:39:89:8f:da:32:43:da:b5:dc:b4:1f:
                    67:de:b5:ab:3c:a8:12:a4:9a:1c:1a:c8:2d:5e:6a:
                    98:a6:15:c3:57:28:83:5e:08:e0:f9:a2:d3:f1:54:
                    eb:bb:69:f0:eb:42:01:10:3b:e7:70:d8:e4:b6:b3:
                    21:05:45:5d:ff:84:d6:25:7c:0a:89:c9:5f:37:f3:
                    de:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6D:88:48:2F:41:70:EE:48:BE:A5:74:C5:12:75:C1:FD:6C:77:5A
            X509v3 Authority Key Identifier:
                keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c2:3a:85:13:b0:e9:a3:8d:16:88:bd:7d:94:57:6a:d8:50:
         02:65:fc:fd:c9:7f:af:40:3b:df:82:37:f8:87:af:49:30:2e:
         a2:78:66:f0:29:df:18:64:5c:3c:b4:54:6a:69:5e:e8:df:52:
         7d:e6:1d:4e:da:27:f2:25:45:a8:31:de:c4:8a:ff:2f:a3:87:
         5e:8f:95:51:35:b6:18:c5:a5:57:1f:30:11:75:dd:f3:b9:2a:
         e3:7e:5c:2a:28:09:ce:39:cf:52:98:c2:97:46:16:8f:e8:0e:
         fa:fc:ea:8f:d8:da:2c:45:ac:b0:06:db:09:96:90:37:e7:3d:
         49:b1:45:69:5c:e7:bc:18:c4:6c:b5:21:33:3c:af:0b:e7:37:
         43:e9:c0:a6:f8:f9:3a:29:2b:bf:56:e0:56:7b:fe:b0:20:18:
         43:c4:f8:53:04:f0:90:ad:c6:ef:36:a3:99:2f:0f:ae:be:f8:
         e3:9a:23:db:09:a3:e5:96:aa:2b:3e:f4:81:18:e5:ef:1e:c5:
         18:57:9f:4c:0a:0a:e7:b4:79:93:44:bd:9d:df:3a:57:3b:1b:
         46:75:13:77:a3:86:9a:1e:7a:a6:b1:6f:1c:58:f5:e8:6a:2b:
         28:87:65:87:c2:89:e8:b5:bb:7f:4f:9b:bc:14:9a:32:0c:52:
         bd:bb:2e:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEo6Qwf9jmfKgOd4qoe2fajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZWM1N2JjODQ2NGZlYzJlOWExYjA5OGZmY2UzNGMyMWFh
ZjljYTYwHhcNMjYxMDExMDMwMjAzWhcNMjYxMDEyMDMwMjAzWjAzMTEwLwYDVQQD
Eyg5OTZkODg0ODJmNDE3MGVlNDhiZWE1NzRjNTEyNzVjMWZkNmM3NzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAO4RGSjhRx0ZzNv8+n3KSsUi3O0
h/WRweS2wbXar2TZ4xW1neXDQJeJkfIfztVzt38tKvV7/KvABgMctGG9sG3JEiVq
HnH5MJEgQO6YJSHJEjgQcl3KvmWfACFc+HXR6dTEeeF+SpNOukFnb8HhQhflIknM
6D/YHlRX1KLI98/FYzJSbWBmnrKDoGfmYJZVNj5mvOMoEEZVb1yzh8GQ0ZyEGBB6
RIkZFz92+vj0SSRZO4y94CSAOYmP2jJD2rXctB9n3rWrPKgSpJocGsgtXmqYphXD
VyiDXgjg+aLT8VTru2nw60IBEDvncNjktrMhBUVd/4TWJXwKiclfN/PefwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJltiEgvQXDuSL6ldMUSdcH9bHdaMB8GA1UdIwQY
MBaAFKnsV7yEZP7C6aGwmP/ONMIar5ymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80MWI0MGMtZjNiNi00MGI4LTg0MGMt
MTlhM2M1NjQ5YjU3LzEvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy80MWI0MGMtZjNiNi00MGI4LTg0MGMtMTlhM2M1NjQ5YjU3
LzEvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYcI6hROw
6aONFoi9fZRXathQAmX8/cl/r0A734I3+IevSTAuonhm8CnfGGRcPLRUamle6N9S
feYdTton8iVFqDHexIr/L6OHXo+VUTW2GMWlVx8wEXXd87kq435cKigJzjnPUpjC
l0YWj+gO+vzqj9jaLEWssAbbCZaQN+c9SbFFaVznvBjEbLUhMzyvC+c3Q+nApvj5
Oikrv1bgVnv+sCAYQ8T4UwTwkK3G7zajmS8Prr7445oj2wmj5ZaqKz70gRjl7x7F
GFefTAoK57R5k0S9nd86VzsbRnUTd6OGmh56prFvHFj16GorKIdlh8KJ6LW7f0+b
vBSaMgxSvbsuyw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 10:38:34 2026 by rpki-client