Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File:                     Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier:          qfhxi5euqEzPefNiS0myaoE3S0xlFLYzNsTVhYHdhHs=
Subject key identifier:   DD:FC:F8:DA:A9:AF:4D:A0:CE:13:37:B9:78:52:86:EF:EB:ED:53:A6
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer:       /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial:       01A128432114F92C4A785183624723A568D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number:          0CAC
Signing time:             Sun 11 Oct 2026 00:00:50 +0000
Manifest this update:     Sun 11 Oct 2026 00:00:50 +0000
Manifest next update:     Mon 12 Oct 2026 00:00:50 +0000
Files and hashes:         1: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: rO+wYB8aWn/dJ8nhqRQG6LxdLyeIjwSsbcYVBiAH29k=)
                          2: tzxRcibemA94VnMAm0dv4MlqbUA.roa (hash: VBIKKEa5Iy0UgSH1dlBF7tfkGRCcGJgtuhRAaqjOCP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:43:21:14:f9:2c:4a:78:51:83:62:47:23:a5:68:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
        Validity
            Not Before: Oct 11 00:00:50 2026 GMT
            Not After : Oct 12 00:00:50 2026 GMT
        Subject: CN=ddfcf8daa9af4da0ce1337b9785286efebed53a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:fe:3a:8b:69:3e:9a:03:c3:6a:64:b7:ba:
                    d3:64:55:ef:4c:4b:17:f8:91:9e:4f:d4:f8:a0:05:
                    19:db:8d:20:b7:1e:a4:8f:8d:86:7d:58:58:0e:6b:
                    83:ed:30:62:1b:5f:da:ba:b4:86:d2:09:6b:ab:64:
                    0d:fc:31:77:de:af:b1:9e:85:a0:53:24:6b:41:2e:
                    15:37:d2:4b:75:94:4d:70:14:a1:92:45:dd:d2:b1:
                    62:76:51:2e:a3:b9:55:39:70:45:25:96:25:ae:0a:
                    21:0b:0f:17:e3:57:6a:9d:1a:e2:84:84:2b:c9:7f:
                    d6:ef:53:9b:dd:2b:63:8d:01:b5:82:22:90:74:62:
                    82:bc:27:f0:d4:86:84:5f:28:16:7d:28:39:23:f4:
                    e3:df:36:b1:97:b1:a0:7e:4f:b2:6d:9c:c7:a8:ce:
                    fc:ae:d3:1d:d3:60:d8:39:c9:57:ef:11:9e:4c:11:
                    cc:36:71:65:1d:47:cb:83:63:51:3c:14:29:3a:2d:
                    cb:ec:bb:10:ea:a4:7f:22:5f:28:ea:71:e5:03:c0:
                    7e:67:3d:37:46:04:1b:c3:58:5f:88:ac:86:e5:53:
                    91:1e:6a:67:33:62:6d:65:9e:35:d0:15:32:03:3c:
                    f3:f4:05:09:44:ff:f2:71:29:b0:62:9b:d4:9c:ac:
                    f5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FC:F8:DA:A9:AF:4D:A0:CE:13:37:B9:78:52:86:EF:EB:ED:53:A6
            X509v3 Authority Key Identifier:
                keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:68:67:2d:85:d1:52:7b:f1:c6:38:93:33:77:95:8f:6e:61:
         27:21:6b:c3:ab:e2:e7:f9:8a:39:b9:4b:e9:f9:22:ac:40:8d:
         10:3a:e9:12:0c:54:d0:71:ab:fe:04:33:3b:0f:93:a7:eb:38:
         bc:36:2b:7d:d9:37:be:d0:72:b2:f7:35:28:c4:d9:81:a8:3c:
         59:7d:61:f4:93:48:74:30:3c:7f:ef:65:a3:fc:e4:ee:8f:9c:
         4c:7d:53:c5:4b:c6:84:18:92:ee:67:1b:ed:71:d2:8b:df:b2:
         83:40:17:56:f3:3a:69:f9:6d:64:86:06:7c:21:c5:28:da:05:
         b4:02:6d:5a:6a:a2:bd:f3:67:31:e5:da:8b:d9:eb:0e:7a:46:
         28:59:a3:0f:af:7c:5d:38:8c:f8:4f:0a:21:6a:42:2c:82:87:
         f3:2a:49:ed:65:0a:68:d7:db:72:da:a4:ce:c2:92:0c:d6:bc:
         81:0d:b9:9d:15:d6:65:70:b6:8c:48:5c:1e:64:0c:10:06:69:
         fe:ef:58:fc:2c:49:cd:3e:a9:27:b5:69:a0:c3:77:70:52:0b:
         06:14:a3:57:28:5b:86:a9:76:75:af:81:a2:60:09:08:10:da:
         33:4f:24:92:c7:cd:d7:e6:f2:4c:0f:7b:c9:0f:6c:ad:70:75:
         48:36:36:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEoQyEU+SxKeFGDYkcjpWjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMWU0OWUxYzc1NWZkZTAzOGJkMTg3NWM3ZjM5N2E1Njg2
NDYwMTQwHhcNMjYxMDExMDAwMDUwWhcNMjYxMDEyMDAwMDUwWjAzMTEwLwYDVQQD
EyhkZGZjZjhkYWE5YWY0ZGEwY2UxMzM3Yjk3ODUyODZlZmViZWQ1M2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeH+OotpPpoDw2pkt7rTZFXvTEsX
+JGeT9T4oAUZ240gtx6kj42GfVhYDmuD7TBiG1/aurSG0glrq2QN/DF33q+xnoWg
UyRrQS4VN9JLdZRNcBShkkXd0rFidlEuo7lVOXBFJZYlrgohCw8X41dqnRrihIQr
yX/W71Ob3StjjQG1giKQdGKCvCfw1IaEXygWfSg5I/Tj3zaxl7Ggfk+ybZzHqM78
rtMd02DYOclX7xGeTBHMNnFlHUfLg2NRPBQpOi3L7LsQ6qR/Il8o6nHlA8B+Zz03
RgQbw1hfiKyG5VORHmpnM2JtZZ410BUyAzzz9AUJRP/ycSmwYpvUnKz10wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN38+Nqpr02gzhM3uXhShu/r7VOmMB8GA1UdIwQY
MBaAFEIeSeHHVf3gOL0Ydcfzl6VoZGAUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWg1SjRjZFZfZUE0dlJoMXhfT1hwV2hrWUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82Y2JiMGUtZjQ1NS00NTczLWE5Zjkt
MzhkNjcxNmIyMDA1LzEvUWg1SjRjZFZfZUE0dlJoMXhfT1hwV2hrWUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82Y2JiMGUtZjQ1NS00NTczLWE5ZjktMzhkNjcxNmIyMDA1
LzEvUWg1SjRjZFZfZUE0dlJoMXhfT1hwV2hrWUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGhnLYXR
UnvxxjiTM3eVj25hJyFrw6vi5/mKOblL6fkirECNEDrpEgxU0HGr/gQzOw+Tp+s4
vDYrfdk3vtBysvc1KMTZgag8WX1h9JNIdDA8f+9lo/zk7o+cTH1TxUvGhBiS7mcb
7XHSi9+yg0AXVvM6afltZIYGfCHFKNoFtAJtWmqivfNnMeXai9nrDnpGKFmjD698
XTiM+E8KIWpCLIKH8ypJ7WUKaNfbctqkzsKSDNa8gQ25nRXWZXC2jEhcHmQMEAZp
/u9Y/CxJzT6pJ7VpoMN3cFILBhSjVyhbhql2da+BomAJCBDaM08kksfN1+byTA97
yQ9srXB1SDY2aQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 10:53:34 2026 by rpki-client