Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
File:                     EGwPOVQQ8obIV2V219L3gwS16Do.mft (raw, json)
Hash identifier:          IGUNGLpHlA5/fPcI7t832keUl24q8M8iJBicb8T4A5I=
Subject key identifier:   77:8C:E6:72:00:97:35:40:06:AD:A8:8A:EF:42:94:15:5A:B3:47:0E
Authority key identifier: 10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A
Certificate issuer:       /CN=106c0f395410f286c8576576d7d2f78304b5e83a
Certificate serial:       01A13E9499C7D7028CD0967AAEFE96EEC78E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
Manifest number:          1AA3
Signing time:             Thu 15 Oct 2026 08:01:28 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:28 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:28 +0000
Files and hashes:         1: 9i5swc1J4tp7c1o23nouETORP2E.roa (hash: 7qCRSDMfyDVi133KELa0mQ4/QYn5UTkZYhIQJwFytHg=)
                          2: EGwPOVQQ8obIV2V219L3gwS16Do.crl (hash: 3uN+GqAtgcpYG3ytLF9ljGZkDtCM3mTbw+oHQgBIJdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:99:c7:d7:02:8c:d0:96:7a:ae:fe:96:ee:c7:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106c0f395410f286c8576576d7d2f78304b5e83a
        Validity
            Not Before: Oct 15 08:01:28 2026 GMT
            Not After : Oct 16 08:01:28 2026 GMT
        Subject: CN=778ce6720097354006ada88aef4294155ab3470e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:99:13:27:d2:46:07:b4:d8:75:1a:b2:0f:39:
                    e8:87:50:94:7a:f5:07:4c:d9:5f:3c:76:20:8a:4b:
                    90:a3:0c:9c:4e:c8:12:8e:54:31:56:ab:1d:b9:ae:
                    ea:4f:41:30:b2:84:81:c1:ab:ab:c7:a7:47:7b:80:
                    15:54:d1:52:7f:54:aa:8f:5a:18:29:08:6f:48:16:
                    e3:a4:97:94:14:48:95:ac:b2:9d:e5:67:65:d6:2a:
                    5b:f0:5a:c1:ee:93:49:32:b0:dc:ef:c9:5a:79:2b:
                    37:3a:60:69:b2:1f:f5:7a:2a:91:ef:c9:a2:60:75:
                    be:42:da:77:4e:5a:e3:44:58:7b:52:2d:fe:67:96:
                    38:2e:ef:01:18:e6:82:5a:b0:33:be:75:26:bd:f5:
                    4c:b5:99:34:65:4b:09:26:12:1f:ac:fe:3c:67:b3:
                    45:53:a5:f7:c7:b8:7d:4e:d0:2b:3c:09:8c:89:80:
                    5d:88:9a:65:3b:62:21:74:8f:f5:bb:4b:d3:5d:0f:
                    6d:3d:0a:4e:e6:2e:87:38:74:97:ec:2b:37:6e:18:
                    ee:44:e3:0f:88:97:0b:9f:12:45:eb:ae:7b:30:a1:
                    57:cc:df:59:40:6f:ed:5c:43:0d:e5:31:cd:ff:24:
                    1a:0f:ec:93:50:ef:63:79:0a:2b:a0:c1:ac:09:5b:
                    c4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8C:E6:72:00:97:35:40:06:AD:A8:8A:EF:42:94:15:5A:B3:47:0E
            X509v3 Authority Key Identifier:
                keyid:10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:1b:b0:15:8a:58:f3:ba:0d:7a:61:7a:78:e6:7f:8a:c5:eb:
         71:a4:30:7d:55:11:bb:18:dc:08:d6:1f:d5:8c:84:90:6b:22:
         01:39:fd:01:22:62:81:0d:0d:a7:d0:c6:d9:3b:62:12:b4:50:
         77:23:72:b6:19:85:3b:32:fb:15:89:26:5b:fe:ae:90:21:75:
         a4:0a:36:7f:46:9f:b5:44:6c:68:25:ab:d8:17:f6:8b:39:a9:
         10:77:d2:82:cd:ac:f7:05:f2:93:28:26:50:2c:f8:3c:8e:34:
         59:d9:3c:c4:9a:cd:c2:a9:3f:97:49:2b:a4:3f:78:2a:e2:13:
         4e:d5:17:2e:4f:1d:18:96:93:e3:f8:ca:b5:e0:68:28:74:62:
         94:62:fd:6f:e1:f7:9c:7d:c7:69:63:c1:62:2a:51:bf:6f:02:
         10:12:e9:32:8e:b4:47:83:a0:fe:ec:00:54:d9:d6:ec:7c:d7:
         af:76:74:3c:85:cd:ed:62:cc:b3:ba:4c:0e:36:d1:8b:d1:9e:
         88:b0:c7:6f:f9:c1:b5:d0:a0:3d:c6:86:ea:3c:99:51:59:18:
         0c:1d:ea:51:61:43:e7:8c:7d:5f:e4:f8:fb:4f:39:e8:08:e4:
         65:f3:2c:1b:33:b4:36:25:26:f8:42:05:6c:67:7f:88:81:c3:
         b7:66:13:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+lJnH1wKM0JZ6rv6W7seOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNmMwZjM5NTQxMGYyODZjODU3NjU3NmQ3ZDJmNzgzMDRi
NWU4M2EwHhcNMjYxMDE1MDgwMTI4WhcNMjYxMDE2MDgwMTI4WjAzMTEwLwYDVQQD
Eyg3NzhjZTY3MjAwOTczNTQwMDZhZGE4OGFlZjQyOTQxNTVhYjM0NzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZkTJ9JGB7TYdRqyDznoh1CUevUH
TNlfPHYgikuQowycTsgSjlQxVqsdua7qT0EwsoSBwaurx6dHe4AVVNFSf1Sqj1oY
KQhvSBbjpJeUFEiVrLKd5Wdl1ipb8FrB7pNJMrDc78laeSs3OmBpsh/1eiqR78mi
YHW+Qtp3TlrjRFh7Ui3+Z5Y4Lu8BGOaCWrAzvnUmvfVMtZk0ZUsJJhIfrP48Z7NF
U6X3x7h9TtArPAmMiYBdiJplO2IhdI/1u0vTXQ9tPQpO5i6HOHSX7Cs3bhjuROMP
iJcLnxJF6657MKFXzN9ZQG/tXEMN5THN/yQaD+yTUO9jeQoroMGsCVvEJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeM5nIAlzVABq2oiu9ClBVas0cOMB8GA1UdIwQY
MBaAFBBsDzlUEPKGyFdldtfS94MEteg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUd3UE9WUVE4b2JJVjJWMjE5TDNnd1MxNkRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zOTNkMzYtNzdiZi00YWUyLTkzMjQt
MzQwZjQzMzU4NGQyLzEvRUd3UE9WUVE4b2JJVjJWMjE5TDNnd1MxNkRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zOTNkMzYtNzdiZi00YWUyLTkzMjQtMzQwZjQzMzU4NGQy
LzEvRUd3UE9WUVE4b2JJVjJWMjE5TDNnd1MxNkRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxuwFYpY
87oNemF6eOZ/isXrcaQwfVURuxjcCNYf1YyEkGsiATn9ASJigQ0Np9DG2TtiErRQ
dyNythmFOzL7FYkmW/6ukCF1pAo2f0aftURsaCWr2Bf2izmpEHfSgs2s9wXykygm
UCz4PI40Wdk8xJrNwqk/l0krpD94KuITTtUXLk8dGJaT4/jKteBoKHRilGL9b+H3
nH3HaWPBYipRv28CEBLpMo60R4Og/uwAVNnW7HzXr3Z0PIXN7WLMs7pMDjbRi9Ge
iLDHb/nBtdCgPcaG6jyZUVkYDB3qUWFD54x9X+T4+0856AjkZfMsGzO0NiUm+EIF
bGd/iIHDt2YTeA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:43 2026 by rpki-client