Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
File:                     eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft (raw, json)
Hash identifier:          YO9GJQCQ4r0/IEM41S8nQjvZEEW1LEJqoBta1n1osK4=
Subject key identifier:   C2:00:BC:FD:A8:91:F5:12:DF:2B:87:65:68:78:EA:7B:1D:CD:67:DF
Authority key identifier: 7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1
Certificate issuer:       /CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
Certificate serial:       01A17C602F1F99706D3F085E86348EFCD98E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
Manifest number:          1AC5
Signing time:             Tue 27 Oct 2026 08:00:40 +0000
Manifest this update:     Tue 27 Oct 2026 08:00:40 +0000
Manifest next update:     Wed 28 Oct 2026 08:00:40 +0000
Files and hashes:         1: 1-gfSrWkkPBhxthfW3JrHoJC9spI.roa (hash: Rnl0mmrjcLaqzVvTvP650dcar9MAaD9eI+jcraf6cdQ=)
                          2: eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl (hash: 8eUPLsLGV9fGCsjqNz1oHx+FgBoomH/hOnv8UxLfKCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:60:2f:1f:99:70:6d:3f:08:5e:86:34:8e:fc:d9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1
        Validity
            Not Before: Oct 27 08:00:40 2026 GMT
            Not After : Oct 28 08:00:40 2026 GMT
        Subject: CN=c200bcfda891f512df2b87656878ea7b1dcd67df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b6:c6:94:de:ef:51:28:85:f5:6f:b3:5b:5f:
                    d4:d5:38:ed:58:42:fa:1e:70:4b:d8:9d:f7:d3:96:
                    f5:2f:a8:9d:04:8b:9c:1a:f2:97:ca:3f:67:ee:7c:
                    8c:70:26:f3:fd:77:50:d0:1f:47:cf:4d:09:0e:93:
                    5a:ad:74:38:6e:ad:72:88:76:2a:e1:09:5a:2d:f2:
                    3f:d8:28:96:17:03:76:01:15:06:99:0a:ad:d4:83:
                    d1:ba:e6:ee:2b:6d:e0:a6:da:26:d3:fc:b6:3b:92:
                    cc:55:d7:ce:0e:59:18:db:bb:bb:97:0f:1a:7b:9d:
                    33:9f:c8:88:5b:c3:7c:68:cd:16:07:46:33:e8:ec:
                    cf:64:cb:43:f2:1e:7e:e8:89:8c:80:a5:e5:d9:56:
                    0b:5f:81:f6:b4:0b:79:b3:c6:13:08:38:61:66:ab:
                    07:e3:d6:48:14:a4:fc:f4:83:53:b8:d1:ee:a4:e2:
                    58:cb:08:c9:10:91:9d:a4:9e:de:3e:93:36:8a:d9:
                    65:e4:63:f1:68:20:9f:6d:b8:13:12:6f:f4:77:78:
                    e5:3c:bc:3a:7d:0f:a4:3e:21:7e:98:cb:36:e4:a6:
                    27:55:44:82:ea:d3:83:b4:a9:ac:92:dc:13:16:42:
                    86:23:03:df:2e:48:d6:14:83:c3:ad:ff:46:fe:55:
                    37:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:00:BC:FD:A8:91:F5:12:DF:2B:87:65:68:78:EA:7B:1D:CD:67:DF
            X509v3 Authority Key Identifier:
                keyid:7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:2d:60:8a:6a:3c:cd:1e:26:91:13:b6:28:f4:2f:f9:d0:61:
         2b:8c:f1:c5:6b:a0:8d:6e:f0:8f:44:4f:de:c9:ad:60:cc:94:
         ef:7d:d5:9c:2c:22:3f:a3:9f:35:6b:c0:f1:7e:85:07:07:42:
         65:29:b9:15:f6:fe:4c:83:45:dd:37:71:d4:c9:bf:38:e0:99:
         13:27:1a:d8:9f:d1:d5:ab:d2:00:86:40:f5:fe:f7:61:b3:d6:
         3e:b2:ef:35:a4:42:29:53:ee:91:bb:da:ef:ed:ef:29:35:90:
         4e:e2:11:1a:50:c1:d8:e4:82:0a:ba:74:7f:10:cb:bf:67:69:
         e4:f3:fb:78:35:ac:a5:b4:4d:13:ad:96:0b:b9:e3:e3:bf:f4:
         6e:0e:1d:65:f8:c9:f7:56:89:a6:10:6a:36:a5:7f:e2:47:ef:
         a2:76:df:31:0d:8f:0f:b3:7a:0b:63:21:0f:f8:93:dc:51:29:
         8a:82:aa:58:85:65:07:fc:18:32:2a:c3:4c:e2:06:cb:96:7b:
         e4:84:68:bf:58:04:2a:c6:3d:94:1c:58:31:a8:fb:e3:f5:5b:
         37:e6:fb:91:6e:5a:f2:e9:9c:e2:22:21:2c:5e:38:87:88:25:
         54:54:f3:3d:fb:24:03:74:12:60:07:a5:b3:ed:bf:b6:9d:2c:
         3e:ff:4e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:10:52 2026 by rpki-client