Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File:                     ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier:          pumuq2u2bk1XGLDi8Ym8I6RqoQnkb/VFlYAYdbLNlHk=
Subject key identifier:   69:70:C1:C8:3E:85:EF:CA:22:22:73:AB:36:59:CB:CF:6A:6C:77:C4
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer:       /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial:       01A06D9496C746445CFBDE1EFADE189378B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number:          1648
Signing time:             Fri 04 Sep 2026 18:00:49 +0000
Manifest this update:     Fri 04 Sep 2026 18:00:49 +0000
Manifest next update:     Sat 05 Sep 2026 18:00:49 +0000
Files and hashes:         1: L_eXFdCQUF-9eDxelAnxZKL6wnQ.roa (hash: 7d4nHmuLNm2MvlXBb1jvivzyW1JkmgHoj/AiRQe6d+Q=)
                          2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: 9LR8mgBNIMlvPVOfHxdnZbriEsJRCpzAz9zZnYTzd7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:94:96:c7:46:44:5c:fb:de:1e:fa:de:18:93:78:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
        Validity
            Not Before: Sep  4 18:00:49 2026 GMT
            Not After : Sep  5 18:00:49 2026 GMT
        Subject: CN=6970c1c83e85efca222273ab3659cbcf6a6c77c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:21:da:5c:be:72:8b:09:f8:cb:86:56:2e:62:
                    5e:99:40:dc:21:03:a9:e7:be:d0:4f:fb:4a:bd:25:
                    8c:bd:aa:55:27:87:b6:0e:3c:36:4b:d6:35:ef:41:
                    33:1d:62:a3:b5:af:1d:64:b9:91:ac:8b:53:70:22:
                    1b:32:86:47:aa:bf:44:54:19:6e:99:6b:c9:0d:f0:
                    c8:b9:81:2f:f4:3a:5f:2e:dc:98:fe:91:cd:8c:10:
                    bd:d4:c3:1f:45:8f:28:67:27:1c:c4:7f:51:a0:3e:
                    26:04:f9:4b:bb:1c:83:42:3e:a0:40:de:22:dc:f9:
                    df:83:7b:fe:c8:1a:14:ee:23:fe:bd:0d:84:b7:35:
                    3c:0d:95:ab:21:fa:62:47:72:66:e1:39:29:b5:d1:
                    e7:e7:00:a4:be:d5:73:bb:0e:23:93:39:8a:d9:0a:
                    34:1f:16:45:fc:e2:20:46:fd:66:a7:7e:b7:4b:cc:
                    00:da:ea:8c:2e:c1:f8:89:50:f2:b2:74:5e:28:ff:
                    a9:63:bf:91:7a:04:d3:64:d4:e0:61:87:e4:25:66:
                    a1:51:a3:b2:6b:1c:88:83:01:e0:a7:8b:62:00:18:
                    b8:33:bd:b5:fd:3a:df:cd:48:fb:9f:af:bc:97:1f:
                    7e:87:38:f4:29:d1:4a:34:75:f3:20:b6:d7:62:73:
                    90:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:70:C1:C8:3E:85:EF:CA:22:22:73:AB:36:59:CB:CF:6A:6C:77:C4
            X509v3 Authority Key Identifier:
                keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:19:3a:b4:b1:16:8f:96:38:de:fd:d3:69:c8:1b:a4:c6:63:
         73:f9:51:56:2a:7b:2b:41:77:8a:e6:28:06:8d:06:f4:2b:e1:
         cd:1e:43:2e:84:27:06:f1:fa:71:7e:85:85:2f:c4:86:72:82:
         fd:76:77:5c:63:f8:5d:16:2b:fc:31:cf:bb:2c:c0:31:9c:2d:
         bc:f6:9b:30:01:46:e0:72:08:d9:82:b6:f5:4f:fe:21:75:4c:
         0e:e1:11:43:2a:03:01:0a:8e:62:a1:12:83:01:aa:ba:5a:67:
         36:71:f2:a6:b3:ab:23:57:44:5c:ba:ed:d0:68:11:8b:71:bc:
         26:fb:1a:13:b7:7d:48:67:84:31:53:5f:46:ca:94:a9:57:b9:
         09:c2:34:3f:a8:c2:5f:ea:f9:99:91:54:58:42:48:0d:55:20:
         ff:8d:81:4f:75:b8:94:1c:bf:13:1b:4d:53:03:d0:22:ca:48:
         3d:7c:0c:84:74:73:74:b5:2b:e3:e2:1d:63:6a:b3:ec:7d:72:
         23:01:f7:d3:a2:6f:42:a2:7c:9b:25:98:aa:96:50:45:d1:9d:
         95:ea:b2:49:87:fc:2d:94:ef:1c:63:bb:af:3e:93:44:e8:44:
         7d:f5:a8:67:3a:ce:57:10:d5:da:f1:d8:f0:88:ab:90:32:b1:
         95:17:3c:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtlJbHRkRc+94e+t4Yk3i5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDc4YzVhYTIyNmEyNzhlOGIxOTA2ZjM3MWM2MGNmYzdk
ODdlOGUwHhcNMjYwOTA0MTgwMDQ5WhcNMjYwOTA1MTgwMDQ5WjAzMTEwLwYDVQQD
Eyg2OTcwYzFjODNlODVlZmNhMjIyMjczYWIzNjU5Y2JjZjZhNmM3N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiHaXL5yiwn4y4ZWLmJemUDcIQOp
577QT/tKvSWMvapVJ4e2Djw2S9Y170EzHWKjta8dZLmRrItTcCIbMoZHqr9EVBlu
mWvJDfDIuYEv9DpfLtyY/pHNjBC91MMfRY8oZyccxH9RoD4mBPlLuxyDQj6gQN4i
3Pnfg3v+yBoU7iP+vQ2EtzU8DZWrIfpiR3Jm4TkptdHn5wCkvtVzuw4jkzmK2Qo0
HxZF/OIgRv1mp363S8wA2uqMLsH4iVDysnReKP+pY7+RegTTZNTgYYfkJWahUaOy
axyIgwHgp4tiABi4M721/TrfzUj7n6+8lx9+hzj0KdFKNHXzILbXYnOQCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlwwcg+he/KIiJzqzZZy89qbHfEMB8GA1UdIwQY
MBaAFHpHjFqiJqJ46LGQbzccYM/H2H6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAt
ZDc2ZWM5Y2MwZDI4LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAtZDc2ZWM5Y2MwZDI4
LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxk6tLEW
j5Y43v3TacgbpMZjc/lRVip7K0F3iuYoBo0G9CvhzR5DLoQnBvH6cX6FhS/EhnKC
/XZ3XGP4XRYr/DHPuyzAMZwtvPabMAFG4HII2YK29U/+IXVMDuERQyoDAQqOYqES
gwGqulpnNnHyprOrI1dEXLrt0GgRi3G8JvsaE7d9SGeEMVNfRsqUqVe5CcI0P6jC
X+r5mZFUWEJIDVUg/42BT3W4lBy/ExtNUwPQIspIPXwMhHRzdLUr4+IdY2qz7H1y
IwH306JvQqJ8myWYqpZQRdGdleqySYf8LZTvHGO7rz6TROhEffWoZzrOVxDV2vHY
8IirkDKxlRc8mA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:53:32 2026 by rpki-client