Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
File:                     QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json)
Hash identifier:          uSPAV+QigOELNebb3eHZfNkcgY3bNS0UD/X7HPIREOA=
Subject key identifier:   93:0D:21:2A:C6:E2:78:9B:1E:9A:F9:CF:CA:0E:0E:6F:19:39:4B:B4
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Certificate issuer:       /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial:       01A1DCB8DF456B2A0C94A3754352931443E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
Manifest number:          1862
Signing time:             Sun 15 Nov 2026 01:01:05 +0000
Manifest this update:     Sun 15 Nov 2026 01:01:05 +0000
Manifest next update:     Mon 16 Nov 2026 01:01:05 +0000
Files and hashes:         1: OJirt1wFzwbAHrdg81cQDXpKVE4.roa (hash: ZrhMeJvZbCUyLVGp+g8LjIbIo+0t4e1qLJNqV5+TNAY=)
                          2: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: IsXbuxzXnRU8hQuJJkqWtDUTqis4HRfqxlCyTCx9TB0=)
                          3: UqFzq2RNZbWlDFVYyZprB1_1sEM.roa (hash: hO5jaxlS37jXDAccfSZYbNyHj2vkt1PuodFiaALX0Zg=)
                          4: g5msJEmtAZPPrNxROEFPbba5x4Y.roa (hash: v9nQWaRHu8tQFbTyot3EjdNkPUX42kWmDF8q/n+QqQQ=)
                          5: hgOUaLDuSDgtlA1yV7iafLhOlwA.roa (hash: XrD4uNDjxERXMxfbMB+mRGApe2Tpr/A7+Ol/LsFJK7o=)
                          6: jQ-BZ183u_LUlZapfx_6bO5Fcbo.roa (hash: evJDPjhd4Xd7GaOP8Tsnz8tSIn8B3VRESbVEgJ+Ho4g=)
                          7: pvcqoNvJFdWoEMg8QFJEzHm8z7E.roa (hash: zuVd/wlnRktcFRrJxR1l3ksJPeEonfLjGaEKrFvnF9w=)
                          8: qHPixUdDjxrc91U2LNL_GHETLss.roa (hash: 5esutnCHRhEckm/D5dPi2+exRvIyK9kg1fmZT+vC/MU=)
                          9: qUc0afIdRt8-UOWMIe3SQvVz1n4.roa (hash: /uRdEodyR9sUKrVW+MpbljN4of9z2bshibIE/GFUwdc=)
                          10: u4NX6hKZvEh_-TMWnB5C6f5ezPk.roa (hash: UZfjswVY8ckqGOGEovj9QQT567PHMAI/NKar7oipK5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 01:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:b8:df:45:6b:2a:0c:94:a3:75:43:52:93:14:43:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
        Validity
            Not Before: Nov 15 01:01:05 2026 GMT
            Not After : Nov 16 01:01:05 2026 GMT
        Subject: CN=930d212ac6e2789b1e9af9cfca0e0e6f19394bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:15:c0:d9:b7:7d:f2:b3:02:fa:f9:29:22:e5:
                    ca:46:d4:a7:fd:81:75:81:67:51:cb:de:f8:6f:19:
                    43:c0:8d:4d:b2:6b:42:ce:66:eb:b8:09:85:d3:57:
                    16:21:24:e8:9e:0c:5c:e3:24:c3:f0:a4:1c:4a:4a:
                    a0:7d:c8:cf:4a:cd:ec:90:05:c7:cd:a5:39:bb:a8:
                    bf:d2:63:ec:86:f2:e1:57:2b:c8:1a:0c:56:f1:93:
                    a1:55:23:3b:fa:6a:b0:27:5a:72:0c:c6:d1:6b:f4:
                    56:4c:da:84:b0:0c:ef:b0:67:b9:0f:1f:96:cc:2f:
                    2d:d1:2e:c4:3a:52:88:0a:07:d9:ce:5d:4f:a8:49:
                    b5:08:1a:59:e6:e0:1c:66:89:ba:d1:7c:8e:82:ab:
                    49:33:d7:92:c6:7f:f5:e9:5e:80:19:a0:8e:d9:88:
                    9f:dd:12:f0:be:ad:2a:f0:d2:f2:8c:9d:19:55:97:
                    1e:66:90:81:1d:03:0e:df:e6:dc:10:12:2c:8d:7f:
                    a5:1a:b0:af:7e:39:41:f1:c4:9e:92:76:da:fb:4b:
                    aa:f5:12:d7:66:cf:af:ac:32:e1:8e:d5:af:2d:a2:
                    94:78:6e:02:c2:ca:3e:f0:85:d6:e5:a7:19:b7:3f:
                    af:d3:e4:bb:b8:f7:a7:12:de:ab:be:30:80:e6:e8:
                    35:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0D:21:2A:C6:E2:78:9B:1E:9A:F9:CF:CA:0E:0E:6F:19:39:4B:B4
            X509v3 Authority Key Identifier:
                keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:30:34:eb:e9:f1:74:3d:8d:dd:4b:cf:ce:e3:9e:11:e8:6c:
         5e:54:1e:6f:25:e0:e7:a2:0d:f4:24:ee:cc:25:d2:0e:24:22:
         ed:e3:dc:d6:83:27:7f:fb:ca:67:ea:1b:b3:59:14:36:a8:56:
         06:76:56:fa:ca:b4:a1:4b:82:11:d6:2f:50:ba:6f:d8:ae:32:
         3e:c2:cb:b8:b7:9c:a2:a4:23:10:06:f5:f3:d9:8e:16:fa:3b:
         79:1a:72:9a:ad:ee:da:82:84:58:72:11:b3:e8:49:4b:bd:98:
         10:c2:ad:8b:26:fb:77:e0:1e:fb:28:e9:39:0c:34:e0:00:c7:
         fa:58:2f:39:a0:5b:06:ac:d3:7a:f3:26:18:d8:54:38:45:06:
         b9:ca:21:b7:c5:fc:84:fe:05:63:e8:5c:dd:c1:f9:11:10:87:
         95:bc:d4:db:73:78:47:49:60:20:0c:98:5c:b2:d1:50:32:87:
         c2:69:25:da:aa:41:e0:06:04:31:b3:e1:d9:28:24:0e:9a:1c:
         62:96:1a:f9:f0:d9:4c:9b:fa:f0:96:98:bd:07:41:ed:05:d4:
         00:12:d6:a4:ad:3a:32:0f:eb:9d:4d:63:a8:c0:8f:d0:37:1f:
         8c:43:e4:1d:9b:82:2c:fc:37:d1:fa:00:10:91:66:ee:cc:7e:
         f9:83:7e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:14:37 2026 by rpki-client