Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
File:                     QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft (raw, json)
Hash identifier:          l2pU6q/ROx/9yqj+qlmK9ts5IrZfKdopDQInXNl8yZw=
Subject key identifier:   73:82:BC:A3:03:50:62:CB:C1:FD:B7:13:5A:FF:25:2B:1D:C2:5D:C0
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Certificate issuer:       /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial:       01A1DE70875C36232D7D130CD2F3A1920844
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
Manifest number:          1AFC
Signing time:             Sun 15 Nov 2026 09:01:18 +0000
Manifest this update:     Sun 15 Nov 2026 09:01:18 +0000
Manifest next update:     Mon 16 Nov 2026 09:01:18 +0000
Files and hashes:         1: 7o1SWwCM_cXOFE762glcqqrc0g8.roa (hash: sE4Y/ceaKQXMuGNY66ML+K4wpI2dw3LerD1iYOVm02w=)
                          2: B-qwXhZhNqP7Rd9rrzrlnItTqvU.roa (hash: xAVVZn3+u5SiYc0g3K3z0LHTfUSG0q/VqxbfyLSsAU0=)
                          3: QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl (hash: 0YxvGaMZcQgW7eDfF/apI6ORyBSSLBCNuFs5SC8UQAk=)
                          4: RBn0x09QP17HKTcUk35SeRs4wcQ.roa (hash: K/tTO8Tdy7lEQRLsArj6GBa808uE/Om7+O6QXLd3MN8=)
                          5: hE8C31w_RpAXSBqCw_OOMk-JFm8.roa (hash: HNil33scanjIhVtVF2DLJ+3VEH2NbJtgfLv8Zd42M2M=)
                          6: qsZILvHhUD5atVe56CMbQMX9BQA.roa (hash: nOyOuxZrTHnD4A9JzbbAHdCO/Q5zojodi32HnVLBWNs=)
                          7: rSeeEXcys4r1L0eNRKcLfqv4AwQ.roa (hash: k3IT1blcLOwKvPoRomK4b+Py9VtjJ31MfrlWEqMTSvE=)
                          8: ysOgSedTzNHk11K4jKIf8bjTvJY.roa (hash: sn0AlxCtP5/CYV/E85JBe+P2cnutzVIoTcXj+Kz8kMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 09:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:70:87:5c:36:23:2d:7d:13:0c:d2:f3:a1:92:08:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
        Validity
            Not Before: Nov 15 09:01:18 2026 GMT
            Not After : Nov 16 09:01:18 2026 GMT
        Subject: CN=7382bca3035062cbc1fdb7135aff252b1dc25dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1c:9c:16:46:11:00:99:8b:0f:55:af:39:fd:
                    bb:dc:e7:fd:0d:15:45:c0:cb:24:9b:f4:55:b5:c9:
                    29:eb:8f:b4:62:ac:e0:1f:0b:b9:ca:62:72:dc:e5:
                    a5:10:bc:d2:a7:ca:1b:a0:d9:af:f5:2b:8d:26:d2:
                    e1:f7:08:9b:ca:92:bf:96:79:5b:e7:93:a2:4f:cf:
                    a6:21:16:aa:e0:33:d0:87:63:44:26:8f:ec:90:19:
                    9b:44:5e:10:c5:2b:4b:02:14:cd:17:1f:29:c3:6f:
                    f0:f1:5e:d9:89:74:61:fa:85:78:f4:46:39:7e:6e:
                    70:57:7d:19:5c:48:5e:4e:7b:75:d3:5e:4b:3d:34:
                    ca:51:6d:8e:15:0a:3e:de:e4:f7:eb:4e:0f:0e:25:
                    2f:3d:78:96:43:85:99:ab:64:de:4f:ad:58:f4:f6:
                    7b:ff:09:07:35:c2:1e:7c:46:0b:27:b4:7a:48:ad:
                    27:33:5c:e8:c0:76:e0:02:ba:09:6a:1f:13:d0:b7:
                    08:57:23:0c:bc:00:b6:81:b8:11:d6:34:e7:ba:97:
                    e8:be:b4:0f:72:78:26:95:e4:66:06:17:e6:18:00:
                    f3:9f:99:da:3c:63:44:10:69:e8:31:39:99:71:96:
                    40:91:9d:5a:50:8f:7e:6b:4d:6e:04:72:00:19:8f:
                    f7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:82:BC:A3:03:50:62:CB:C1:FD:B7:13:5A:FF:25:2B:1D:C2:5D:C0
            X509v3 Authority Key Identifier:
                keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:af:7d:81:39:25:7f:b5:63:ac:32:4b:b1:2a:a2:9d:74:0a:
         f0:81:5b:43:db:b3:7d:3d:cf:a9:26:8e:cf:10:55:fe:3a:ce:
         7b:9d:1b:20:70:c0:fb:f3:12:f8:71:e1:bb:02:dc:16:09:60:
         e7:2f:4c:d3:b9:7d:33:c8:6b:67:c1:7f:52:3f:b3:fa:cc:6c:
         f4:a4:18:8f:28:aa:7d:2f:59:a2:29:d6:0f:1e:cf:e3:e5:99:
         a1:a1:5c:a7:a8:74:6a:59:ab:4b:66:d1:07:07:3a:ed:c0:9e:
         73:0a:69:f0:d1:64:14:1a:33:0a:5d:b6:4b:e2:97:a2:b7:14:
         bf:be:98:d2:87:27:b5:75:f9:ed:a4:5f:b3:a1:e7:9b:b3:dd:
         03:b7:d9:79:ab:ef:64:73:70:d8:55:19:87:08:25:90:82:45:
         2c:34:bd:4f:39:fb:9c:b7:87:39:49:44:82:e9:71:5c:60:73:
         df:1c:1f:a1:91:63:28:e4:d5:9c:31:10:ff:0e:5e:c6:99:bf:
         f8:b5:e2:de:b7:9c:ee:3e:85:cd:83:10:9e:93:be:49:7c:d3:
         ed:76:a9:f5:c5:8b:a1:e6:5b:19:ab:64:da:9d:01:c9:bd:4c:
         92:92:dd:e1:42:8a:94:ff:7a:cd:0e:14:01:7a:06:b5:9c:f6:
         45:5c:e7:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecIdcNiMtfRMM0vOhkghEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNDJkM2Y5YjMxMTI2ZTA4NTAyNjU3MTVjOWZjMzIxNzRi
NTU3YTQwHhcNMjYxMTE1MDkwMTE4WhcNMjYxMTE2MDkwMTE4WjAzMTEwLwYDVQQD
Eyg3MzgyYmNhMzAzNTA2MmNiYzFmZGI3MTM1YWZmMjUyYjFkYzI1ZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxycFkYRAJmLD1WvOf273Of9DRVF
wMskm/RVtckp64+0YqzgHwu5ymJy3OWlELzSp8oboNmv9SuNJtLh9wibypK/lnlb
55OiT8+mIRaq4DPQh2NEJo/skBmbRF4QxStLAhTNFx8pw2/w8V7ZiXRh+oV49EY5
fm5wV30ZXEheTnt1015LPTTKUW2OFQo+3uT3604PDiUvPXiWQ4WZq2TeT61Y9PZ7
/wkHNcIefEYLJ7R6SK0nM1zowHbgAroJah8T0LcIVyMMvAC2gbgR1jTnupfovrQP
cngmleRmBhfmGADzn5naPGNEEGnoMTmZcZZAkZ1aUI9+a01uBHIAGY/3MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOCvKMDUGLLwf23E1r/JSsdwl3AMB8GA1UdIwQY
MBaAFEFC0/mzESbghQJlcVyfwyF0tVekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVVMVC1iTVJKdUNGQW1WeFhKX0RJWFMxVjZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hZTE5NTMtYmZjNC00MmI1LTk1MGIt
OWM5OGQxMTE5N2I3LzEvUVVMVC1iTVJKdUNGQW1WeFhKX0RJWFMxVjZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9hZTE5NTMtYmZjNC00MmI1LTk1MGItOWM5OGQxMTE5N2I3
LzEvUVVMVC1iTVJKdUNGQW1WeFhKX0RJWFMxVjZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgK99gTkl
f7VjrDJLsSqinXQK8IFbQ9uzfT3PqSaOzxBV/jrOe50bIHDA+/MS+HHhuwLcFglg
5y9M07l9M8hrZ8F/Uj+z+sxs9KQYjyiqfS9ZoinWDx7P4+WZoaFcp6h0almrS2bR
Bwc67cCecwpp8NFkFBozCl22S+KXorcUv76Y0ocntXX57aRfs6Hnm7PdA7fZeavv
ZHNw2FUZhwglkIJFLDS9Tzn7nLeHOUlEgulxXGBz3xwfoZFjKOTVnDEQ/w5expm/
+LXi3rec7j6FzYMQnpO+SXzT7Xap9cWLoeZbGatk2p0Byb1MkpLd4UKKlP96zQ4U
AXoGtZz2RVznTA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:47:52 2026 by rpki-client