Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.mft
File:                     eIg7YYtrAGVxBZ8c86EfylqHXjY.mft (raw, json)
Hash identifier:          azpgtEdLxyNQEmLaO2F+38xP4Tc1+P+yDRRYk8JLzHg=
Subject key identifier:   F9:02:4A:8F:78:0C:A5:3F:DE:E0:57:B3:4F:90:DB:A8:DC:97:0A:3C
Authority key identifier: 78:88:3B:61:8B:6B:00:65:71:05:9F:1C:F3:A1:1F:CA:5A:87:5E:36
Certificate issuer:       /CN=78883b618b6b006571059f1cf3a11fca5a875e36
Certificate serial:       01A0DB71B73FB2144E40FEB08EE2ABE87861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIg7YYtrAGVxBZ8c86EfylqHXjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.mft
Manifest number:          1E
Signing time:             Sat 26 Sep 2026 02:00:57 +0000
Manifest this update:     Sat 26 Sep 2026 02:00:57 +0000
Manifest next update:     Sun 27 Sep 2026 02:00:57 +0000
Files and hashes:         1: 47xkWnrIUB_j1TqpoRepDZ7NLpc.roa (hash: EdLvqub2w6o7cqpTXnk7ZfHL9LQiKqXm0wipsfY473A=)
                          2: QiwnNNOVeGs7cGV74UrLTMRIryk.roa (hash: LxMeRxrO9SVWS/nhHbMWcxGVg8DoiI2RkXKJ+Tb5EHM=)
                          3: eIg7YYtrAGVxBZ8c86EfylqHXjY.crl (hash: s8gfbE4mTTLCaQxjJu5VErBsOUCWiR92YFHJum3+hfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIg7YYtrAGVxBZ8c86EfylqHXjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:71:b7:3f:b2:14:4e:40:fe:b0:8e:e2:ab:e8:78:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78883b618b6b006571059f1cf3a11fca5a875e36
        Validity
            Not Before: Sep 26 02:00:57 2026 GMT
            Not After : Sep 27 02:00:57 2026 GMT
        Subject: CN=f9024a8f780ca53fdee057b34f90dba8dc970a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:06:34:6f:fe:ad:1c:9e:f2:db:d5:c8:43:
                    22:2d:7d:94:12:26:a8:fc:d8:ec:47:36:f7:d2:b3:
                    b9:27:c6:3c:4f:ff:6d:cd:d4:e3:f9:58:a0:cc:1f:
                    97:99:01:84:66:a5:1d:88:79:ec:34:d5:7b:e4:10:
                    d8:60:65:e3:8b:cd:00:a2:a3:c1:4d:06:f5:80:f5:
                    6e:0c:07:26:68:b7:bb:fb:ae:64:5e:14:c4:ce:73:
                    52:9e:e4:9e:44:2d:15:d0:bb:d0:32:bb:0b:f3:b4:
                    ac:b1:b2:c5:fc:a5:d9:9b:7b:cb:25:37:36:05:ce:
                    fc:54:3a:c6:16:92:2c:ac:4f:8e:1c:81:35:15:36:
                    96:95:0d:75:37:6d:f6:e7:0a:b4:a0:99:fe:40:3f:
                    89:6d:c5:ec:05:87:3c:bc:28:e1:c3:0b:7f:79:e6:
                    38:db:65:b6:ce:49:c1:b8:f7:db:0b:2b:ab:cc:32:
                    b4:57:df:bd:a6:4d:50:a0:9d:e9:f9:a0:a6:7f:1d:
                    95:15:2c:a9:43:1f:3c:ba:a1:99:4a:99:20:6b:d9:
                    b4:71:db:d1:a8:83:04:70:37:d9:14:24:08:d2:ad:
                    8a:5e:a8:6b:e8:1a:25:f2:9b:01:ba:f6:39:6c:15:
                    9e:5c:1a:d8:a0:8f:df:65:bb:1a:20:86:ad:d0:e6:
                    63:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:02:4A:8F:78:0C:A5:3F:DE:E0:57:B3:4F:90:DB:A8:DC:97:0A:3C
            X509v3 Authority Key Identifier:
                keyid:78:88:3B:61:8B:6B:00:65:71:05:9F:1C:F3:A1:1F:CA:5A:87:5E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIg7YYtrAGVxBZ8c86EfylqHXjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:0b:cc:17:a3:eb:c4:a3:da:cd:c2:9d:0b:84:3f:07:e0:1e:
         60:0a:1e:d8:78:9b:bf:c5:dd:a2:f4:3b:2e:7f:70:ca:bf:54:
         ec:6d:23:aa:8e:69:44:93:e6:02:5a:75:a3:4b:1e:f1:9c:88:
         48:bc:b5:bb:7f:d4:11:66:f3:92:6f:bf:a9:3b:e2:b6:21:05:
         bc:97:34:13:3b:07:d3:91:e0:ea:c8:46:e8:24:74:9e:37:22:
         1b:ae:2c:07:19:09:c4:c0:45:12:69:df:59:1f:3c:b9:79:8a:
         80:28:b4:95:0c:77:50:01:70:fa:65:61:17:70:55:19:04:aa:
         85:e8:6c:13:50:19:2c:ee:06:af:23:50:d2:05:8f:14:28:c4:
         e4:37:27:f6:f2:17:87:d6:87:56:8f:44:74:5a:56:20:04:a1:
         7f:07:9e:6a:f7:30:ce:d4:39:fb:a9:d7:45:a1:f9:57:53:73:
         ab:25:73:91:1e:e4:a6:e2:f8:00:16:79:5a:c4:a1:f3:4f:f3:
         32:66:c3:4b:59:6e:5e:86:9b:fb:91:88:3e:6f:32:5f:23:ea:
         41:62:cc:5b:7d:b1:5a:22:4f:39:33:7b:26:bb:03:69:b5:1f:
         e8:16:26:bf:82:f2:63:9d:26:ec:23:34:c8:73:e1:73:db:26:
         78:0b:e1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:04:27 2026 by rpki-client