Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          GVo9cw6RYMQMRAzYrvlx9RvpKpGY6kKC3yefsGMMaGU=
Subject key identifier:   13:41:67:9A:E5:27:63:B5:E2:6B:8C:05:2B:04:7D:7D:2B:09:FA:ED
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       01A0FAFD084580997AE4CF8BF629FBB58AFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1ACF
Signing time:             Fri 02 Oct 2026 05:01:21 +0000
Manifest this update:     Fri 02 Oct 2026 05:01:21 +0000
Manifest next update:     Sat 03 Oct 2026 05:01:21 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: qWy55GZnzT5i+neP4H4Bks07XB7Zsw+Hzi9D8QVy2B0=)
                          4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=)
                          14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=)
                          17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 05:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fa:fd:08:45:80:99:7a:e4:cf:8b:f6:29:fb:b5:8a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Oct  2 05:01:21 2026 GMT
            Not After : Oct  3 05:01:21 2026 GMT
        Subject: CN=1341679ae52763b5e26b8c052b047d7d2b09faed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:af:4a:78:4f:a2:30:75:fa:f7:9d:ef:e1:73:
                    a5:66:57:47:cd:00:39:ac:50:43:d0:9a:75:3f:55:
                    f6:e3:69:1e:24:78:f6:27:4a:75:ce:67:12:53:1b:
                    c2:e4:5b:66:fe:3d:54:8d:5f:75:5f:9b:42:f8:e2:
                    db:6f:e3:0f:2c:3d:31:22:6d:61:23:52:f5:e8:3c:
                    19:a9:71:59:df:69:1a:a0:49:a3:ee:1b:e2:28:45:
                    7e:1d:44:d9:93:5d:ea:cc:cd:bb:40:53:60:dc:36:
                    6c:d3:c8:c6:f5:31:eb:e5:92:0d:b7:9d:57:e2:85:
                    3c:fc:60:15:07:35:7e:c2:24:75:b3:c3:f3:e9:da:
                    c0:0a:42:1a:23:e5:05:24:85:60:d6:4d:9b:8c:50:
                    75:10:da:b4:3b:34:6f:24:04:aa:4f:a9:b0:95:f1:
                    ff:e8:4d:e3:03:fe:42:16:fb:d8:96:f9:34:3b:26:
                    2f:9a:df:94:33:ce:1d:d4:3e:6d:bb:db:08:9e:cf:
                    73:17:3d:43:2e:a7:17:72:6b:c3:91:5c:2a:72:8a:
                    9d:09:d5:a3:59:30:a9:74:dc:ab:07:d8:54:50:e4:
                    41:2a:38:76:6a:2b:ae:de:b5:d3:37:fe:95:27:be:
                    ec:42:d4:03:67:40:d3:39:de:ca:da:24:5e:8d:bc:
                    be:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:41:67:9A:E5:27:63:B5:E2:6B:8C:05:2B:04:7D:7D:2B:09:FA:ED
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b7:a7:2d:57:2e:4f:81:99:95:6b:92:50:31:22:7c:bd:c1:
         83:b2:5e:a2:8c:b9:e6:52:d3:7d:3b:8d:97:af:20:f0:43:01:
         53:cb:42:25:69:c9:6d:eb:a0:65:25:fa:ec:a2:2a:d0:50:50:
         e4:ea:b2:b1:2c:db:73:28:1e:d1:7e:0b:d8:80:a0:f3:b2:2c:
         55:6a:ee:67:1e:53:71:83:86:d1:b4:43:28:12:e1:7c:43:9e:
         bf:bb:2f:3d:a7:cd:89:db:f5:54:34:27:d5:3c:c2:ae:2f:c7:
         2c:67:22:24:84:cc:ed:f8:87:fb:a3:47:c2:29:b0:0d:8c:c1:
         8e:74:ec:3d:ea:a7:90:51:6b:89:d8:70:4b:03:60:b1:62:b7:
         cc:e2:1a:5f:fa:88:89:24:18:91:45:d7:43:9f:0f:25:a2:25:
         3a:c1:59:9d:84:bd:46:f8:d1:c8:c4:45:e5:f6:b7:fd:0e:47:
         14:87:c8:31:59:0e:91:f8:27:2c:87:4b:76:1a:6b:a9:c2:ee:
         fe:de:be:7e:82:10:ce:73:42:33:6a:e5:26:29:dc:92:37:c2:
         4f:67:84:ec:66:6d:f1:c0:5b:ab:12:12:f5:e9:76:e5:56:92:
         46:05:f2:90:22:f1:d3:57:6c:7a:08:fd:74:93:f7:d2:f2:99:
         35:90:f2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:54:32 2026 by rpki-client