Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File:                     Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier:          khTbt9ssvwRDKqeqi2EJhqRTGRbFEiuh/3vhdNkJSqI=
Subject key identifier:   6A:A9:05:55:76:46:A0:37:4D:FD:00:32:08:F7:B6:D2:4B:AB:68:85
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer:       /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial:       01A12AD6C27F573CA294247023FE8D0E0B7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number:          1A9F
Signing time:             Sun 11 Oct 2026 12:01:19 +0000
Manifest this update:     Sun 11 Oct 2026 12:01:19 +0000
Manifest next update:     Mon 12 Oct 2026 12:01:19 +0000
Files and hashes:         1: 7kcTDPtrsAccIFtq7M7wM_oA42o.asa (hash: jfkqgTwMmeuO5g0zs7rfVVOHUNY0M+VynB68Y9zU2I4=)
                          2: PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa (hash: nvE+bb5C5rtF8YiUnSsjumFKZwx9bfJMyTTo8X52rsc=)
                          3: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: HhAGq2Ere5HtxlJ1/INC5wvQUoO2wYMW3/Vj4Dd7sbU=)
                          4: kKPUL3XL5kfL6DXSXiFlJFUqzf8.roa (hash: MqfgECWtHRXZOaXWHtLXuKHhrTsYhuIDOqY4suEA3jM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:d6:c2:7f:57:3c:a2:94:24:70:23:fe:8d:0e:0b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
        Validity
            Not Before: Oct 11 12:01:19 2026 GMT
            Not After : Oct 12 12:01:19 2026 GMT
        Subject: CN=6aa905557646a0374dfd003208f7b6d24bab6885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7f:de:88:6d:95:c2:2f:31:7e:46:bd:7d:28:
                    04:52:c5:57:b5:25:70:b9:7e:88:40:72:e4:68:2b:
                    aa:99:bb:d7:12:52:78:7a:b0:f2:78:45:c5:39:b9:
                    04:5e:ba:61:be:0e:07:0b:41:40:f1:a8:77:d5:e0:
                    f3:6d:65:66:4c:3a:ca:0b:d2:42:86:ae:27:36:e1:
                    28:f3:5a:ed:86:91:89:13:25:ce:ac:d7:fe:f6:7e:
                    21:ab:23:8a:41:7c:2f:77:c1:7e:1b:b0:a5:fd:3e:
                    8d:f8:7e:b9:18:79:89:c1:ca:52:e7:0f:62:5f:b9:
                    08:96:31:7d:a1:7e:ca:0e:8d:74:3f:85:99:57:70:
                    b9:a9:db:c3:4c:33:ff:f0:48:4e:b1:ce:18:95:36:
                    f5:8b:bd:a0:0d:eb:6c:53:01:3e:fb:b1:82:f4:78:
                    57:b3:17:22:c2:ae:b5:77:ad:50:c4:6c:63:c3:e7:
                    11:f9:96:8f:07:40:9c:c0:0c:02:8c:0d:54:fe:77:
                    11:f8:12:35:48:25:7a:b9:bc:9b:3a:f4:62:9b:b9:
                    55:ec:49:25:b4:d8:95:f1:47:3a:ab:cf:c5:72:d3:
                    5a:90:9c:05:73:31:40:20:43:ca:d8:b6:5d:f6:84:
                    13:f4:c0:43:11:f1:51:41:92:45:93:7c:e0:19:11:
                    47:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A9:05:55:76:46:A0:37:4D:FD:00:32:08:F7:B6:D2:4B:AB:68:85
            X509v3 Authority Key Identifier:
                keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:0c:62:3a:80:23:89:16:e7:a1:54:05:89:cd:79:d5:ae:53:
         c5:4c:29:e3:88:d7:95:d2:f3:01:50:8f:c8:ad:06:39:33:d8:
         f0:72:c5:34:62:ac:d4:f6:4a:76:3f:13:25:01:31:d2:b9:1b:
         29:78:76:c1:9f:a3:a9:44:a7:b7:77:8c:0e:04:d1:af:98:26:
         3b:37:1e:00:ee:8b:cb:6d:55:66:e9:17:15:35:85:f4:c7:26:
         06:e6:fc:cf:03:9f:e2:ac:d4:1e:41:9c:0b:dc:98:05:65:72:
         d1:3a:2a:50:bd:d4:bb:56:be:ec:38:5a:a0:92:55:da:0d:a7:
         9a:51:ea:79:9a:42:b7:cc:a6:97:df:33:cf:b0:77:e1:c0:af:
         77:47:be:4e:ab:ec:e8:b4:6b:77:b5:13:71:51:4b:d0:05:8c:
         c9:dc:51:46:9a:cf:07:54:1c:38:88:e7:c4:e9:cc:00:8b:0f:
         22:8f:8b:98:9f:65:d5:c0:2a:7a:da:d5:ab:3f:39:ea:85:94:
         11:c3:f6:e6:8f:d8:fe:fb:74:2b:ef:a1:b8:79:90:ce:df:0d:
         f3:72:1a:12:bb:09:04:10:b5:78:09:f1:13:14:d8:49:06:5d:
         b3:a5:3f:95:9a:28:a4:e6:c1:fe:a1:40:85:33:c2:05:d7:39:
         77:5d:7b:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEq1sJ/VzyilCRwI/6NDgt7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOGRmOTk4MjRjZTY3YjBjYjVmODdmYzQ2NTk5ZTEzYWRl
YTU3MDIwHhcNMjYxMDExMTIwMTE5WhcNMjYxMDEyMTIwMTE5WjAzMTEwLwYDVQQD
Eyg2YWE5MDU1NTc2NDZhMDM3NGRmZDAwMzIwOGY3YjZkMjRiYWI2ODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3/eiG2Vwi8xfka9fSgEUsVXtSVw
uX6IQHLkaCuqmbvXElJ4erDyeEXFObkEXrphvg4HC0FA8ah31eDzbWVmTDrKC9JC
hq4nNuEo81rthpGJEyXOrNf+9n4hqyOKQXwvd8F+G7Cl/T6N+H65GHmJwcpS5w9i
X7kIljF9oX7KDo10P4WZV3C5qdvDTDP/8EhOsc4YlTb1i72gDetsUwE++7GC9HhX
sxciwq61d61QxGxjw+cR+ZaPB0CcwAwCjA1U/ncR+BI1SCV6ubybOvRim7lV7Ekl
tNiV8Uc6q8/FctNakJwFczFAIEPK2LZd9oQT9MBDEfFRQZJFk3zgGRFH9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqpBVV2RqA3Tf0AMgj3ttJLq2iFMB8GA1UdIwQY
MBaAFEKN+Zgkzmewy1+H/EZZnhOt6lcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEt
ZjIyNzQ5NjVjMDk1LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEtZjIyNzQ5NjVjMDk1
LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwxiOoAj
iRbnoVQFic151a5TxUwp44jXldLzAVCPyK0GOTPY8HLFNGKs1PZKdj8TJQEx0rkb
KXh2wZ+jqUSnt3eMDgTRr5gmOzceAO6Ly21VZukXFTWF9McmBub8zwOf4qzUHkGc
C9yYBWVy0ToqUL3Uu1a+7DhaoJJV2g2nmlHqeZpCt8yml98zz7B34cCvd0e+Tqvs
6LRrd7UTcVFL0AWMydxRRprPB1QcOIjnxOnMAIsPIo+LmJ9l1cAqetrVqz856oWU
EcP25o/Y/vt0K++huHmQzt8N83IaErsJBBC1eAnxExTYSQZds6U/lZoopObB/qFA
hTPCBdc5d117gA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:47:30 2026 by rpki-client