Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
File:                     eQ0cp4dhMQrDmnFP9i87krLnfYo.mft (raw, json)
Hash identifier:          RtvD1g34j16Ize8dJIytQDZ4Pki5i1RVMyVRNaYf7HQ=
Subject key identifier:   30:74:C4:43:94:FD:5C:EE:98:99:3C:5A:4C:C8:C9:23:5F:3B:47:D7
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Certificate issuer:       /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial:       01A119ABA0E45963539070F6D142F4FC5640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
Manifest number:          1A94
Signing time:             Thu 08 Oct 2026 04:00:40 +0000
Manifest this update:     Thu 08 Oct 2026 04:00:40 +0000
Manifest next update:     Fri 09 Oct 2026 04:00:40 +0000
Files and hashes:         1: EYMrlefUd_XSaWfylZCHkmVeXK4.roa (hash: 8jOCsUwGr5s+6E9DbnoIutjLx2+bBNXxqyvTsEuVuEY=)
                          2: eQ0cp4dhMQrDmnFP9i87krLnfYo.crl (hash: Hbo7uZ0aNJMfICj2DIUYmSFswSRUBfdk8GBL7846zHY=)
                          3: xeqelJo79Mi4ptPjtrax6cg2B_s.roa (hash: t6o74vCypP/JXaPY7ExWQCtzzyBRmlLod50GjeunzUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:ab:a0:e4:59:63:53:90:70:f6:d1:42:f4:fc:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
        Validity
            Not Before: Oct  8 04:00:40 2026 GMT
            Not After : Oct  9 04:00:40 2026 GMT
        Subject: CN=3074c44394fd5cee98993c5a4cc8c9235f3b47d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:73:59:e8:6a:5f:17:5b:7a:20:14:91:b6:
                    b7:d0:bf:cc:23:23:e4:5b:4d:96:2c:3d:9b:52:66:
                    a9:d2:c4:7e:21:5e:c6:3b:cb:90:58:a6:cf:32:ae:
                    c0:86:2d:7d:5f:b0:d8:05:a5:4c:41:ea:e7:9b:ae:
                    ba:3b:32:39:a4:40:3e:2f:4e:63:b5:29:2c:17:5a:
                    0d:b5:9b:c9:c9:ad:60:60:19:78:7a:59:29:31:cb:
                    f1:2d:79:10:0d:57:be:ca:d5:d9:58:8d:95:1e:96:
                    e2:b6:46:f3:93:15:96:8f:17:c0:f9:be:71:24:13:
                    30:7d:c3:5e:b2:0d:2b:c8:c9:f6:4d:49:d3:6f:55:
                    80:3b:9c:50:7e:e1:c6:11:61:c4:fd:52:0b:ac:63:
                    fe:9c:be:d6:05:a0:be:47:ae:16:05:c0:9b:7e:8c:
                    e1:62:60:5d:45:48:c4:45:33:77:9e:42:ef:68:01:
                    4e:88:0f:9c:46:54:03:64:94:b7:96:5e:01:29:cf:
                    28:d4:a9:16:b3:43:7f:fa:48:7e:96:b7:1b:04:69:
                    50:d6:ac:58:47:d7:2a:0c:5e:b8:35:30:76:96:5e:
                    61:20:47:7d:ba:cd:15:78:7c:dc:ae:40:06:be:06:
                    12:2f:88:ff:c6:e0:7e:7c:aa:fb:62:e5:ce:b1:be:
                    70:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:74:C4:43:94:FD:5C:EE:98:99:3C:5A:4C:C8:C9:23:5F:3B:47:D7
            X509v3 Authority Key Identifier:
                keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ed:86:bb:c4:ae:bf:d1:5b:82:1c:49:86:cd:a2:06:08:bd:
         62:2b:d5:b0:e3:c1:ee:8f:8c:bf:5d:ec:54:45:43:d6:90:9e:
         5e:a0:78:6d:36:44:14:01:86:01:a0:23:c8:13:d5:13:04:dc:
         3c:d4:19:d6:08:74:c4:50:45:51:64:87:45:e3:97:6f:ec:f0:
         1f:2d:eb:44:f2:b6:80:6b:e7:d1:f0:30:f3:49:07:3c:2d:51:
         2f:ce:5d:dc:78:1a:55:c6:02:0a:c6:98:6e:27:77:d8:ac:de:
         3e:86:0e:31:9e:f2:6b:ef:22:2b:2a:f0:b4:45:0e:1d:c1:0b:
         f9:03:c3:0e:15:cb:6d:d3:f8:37:16:89:42:ba:af:07:5f:42:
         8a:99:29:1c:35:b9:f6:12:5d:00:7a:d7:c2:c9:01:41:f4:ea:
         8f:3a:a7:47:a2:17:22:c1:5f:1b:39:16:70:e6:e3:26:de:3b:
         fb:31:f5:c7:3e:25:f3:90:6a:4c:f6:09:c0:cd:8d:0c:64:a5:
         b5:bc:02:c0:46:95:26:f9:a9:d8:b0:c9:f9:68:02:b7:51:b8:
         b8:a5:46:75:14:6e:04:fc:d7:9c:1f:95:b1:8a:ec:6d:1e:6d:
         50:49:1d:97:fe:9f:4e:18:e8:b3:b4:be:2a:e1:07:b0:f1:30:
         84:b0:d6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:26:51 2026 by rpki-client