Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          jOjJuLDhLAcxXW/yWMPS/5ULmCYAjugFkB4ZZ279Dx4=
Subject key identifier:   27:9B:E7:A1:48:7B:80:FB:36:D5:18:91:98:EB:47:A0:13:F0:AC:0D
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       01A0B199D0F93D928EDD3D85F667916EED95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1AA9
Signing time:             Thu 17 Sep 2026 23:00:42 +0000
Manifest this update:     Thu 17 Sep 2026 23:00:42 +0000
Manifest next update:     Fri 18 Sep 2026 23:00:42 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: ug1uyUXB5I4bb3+brVb5vieTpmk/3jd3VdshE0HM/PQ=)
                          4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=)
                          14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=)
                          17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 22:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b1:99:d0:f9:3d:92:8e:dd:3d:85:f6:67:91:6e:ed:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Sep 17 23:00:42 2026 GMT
            Not After : Sep 18 23:00:42 2026 GMT
        Subject: CN=279be7a1487b80fb36d5189198eb47a013f0ac0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:5e:e6:35:3c:43:96:bc:44:48:be:f3:46:
                    7c:39:96:54:62:1a:2d:b5:e5:87:ce:d6:4a:df:38:
                    71:73:f6:10:4e:c4:94:6b:11:ab:ec:f8:72:2b:e1:
                    8b:72:af:4e:dd:43:67:a1:9e:43:59:b6:ad:e8:51:
                    3e:ea:00:e7:f1:2c:3c:75:12:8b:d5:da:95:e6:09:
                    f4:50:97:2a:69:a2:07:f0:17:34:4b:bb:c4:9c:7c:
                    6a:d8:a9:3c:2d:b5:00:e4:7c:ec:5e:16:5b:ec:3d:
                    e8:58:bd:d2:5e:fa:9e:6a:a0:48:bc:52:4d:81:c3:
                    a3:bc:90:e4:8b:26:21:5d:dc:11:f6:9e:1f:53:37:
                    35:2f:f4:a2:0e:b5:dc:c9:df:fe:3d:30:3e:13:5c:
                    ff:c0:e9:aa:a0:63:4b:b8:68:17:0e:d7:9a:ec:49:
                    4c:da:95:6b:5e:41:90:fb:62:5c:0d:74:9e:40:b1:
                    ec:4c:ed:e3:06:07:b9:a5:19:8c:33:86:3e:5f:ba:
                    38:f9:f0:75:cd:8f:d4:95:be:8c:b1:17:a3:95:a1:
                    fd:70:58:25:7b:df:4a:dc:91:38:eb:bd:77:64:55:
                    48:58:c4:b4:cc:e0:f6:e4:49:2b:a5:f7:e9:4a:b8:
                    cf:57:6f:22:1f:c4:6a:46:0f:5c:a4:55:78:d4:32:
                    40:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9B:E7:A1:48:7B:80:FB:36:D5:18:91:98:EB:47:A0:13:F0:AC:0D
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:24:d2:4c:95:fe:cc:95:f7:88:fb:0e:de:75:74:19:a9:1d:
         29:a0:3e:c7:fe:be:76:eb:86:75:52:3e:6c:fa:ab:4f:3d:94:
         7e:39:02:b3:d6:20:5d:25:c5:0d:ed:97:06:f0:d1:16:4c:16:
         a7:38:09:9f:4d:93:93:b6:51:93:ac:8a:f7:d0:14:50:66:dc:
         65:7f:3d:47:d5:a3:d9:43:f2:cc:23:c4:eb:5f:32:2e:f9:d0:
         34:95:f1:c4:58:2e:59:e6:b7:6b:18:96:c8:ae:a2:a0:a0:8f:
         25:d3:3b:10:65:70:20:20:c3:28:34:3c:1c:8a:94:6f:fc:23:
         72:b1:d3:28:5d:25:19:6f:d8:3c:fe:2d:a5:30:a0:54:32:bd:
         f8:2c:b4:f4:dd:c7:3e:db:a3:5b:c9:1c:68:5c:2a:b4:11:61:
         aa:9e:c3:fe:53:ad:ad:06:8b:c1:bf:84:e5:8e:ff:e1:db:87:
         1b:8e:01:b8:09:00:72:bc:de:a7:4b:2b:ea:4c:5f:1a:3f:7f:
         e5:77:4e:8f:84:59:43:7b:6d:1d:04:bb:ec:a0:bf:3e:c0:11:
         de:93:72:0f:2d:26:d0:58:ac:b9:97:68:e8:3d:ee:fa:04:4f:
         e1:bf:e2:7a:19:2f:74:3e:7c:d9:91:1f:29:6f:56:91:6d:8e:
         62:28:47:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 07:43:39 2026 by rpki-client