Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
File:                     EiTl7_GrwObYvwKeT3MuCrcbwWo.mft (raw, json)
Hash identifier:          /8bzSSOJYylJSZY2kU84uDMR57j6PadQy9PRybY8J8o=
Subject key identifier:   F8:F3:5C:97:C9:29:B6:0F:76:C4:24:4B:0E:AF:FC:34:F8:3B:F5:F7
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Certificate issuer:       /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial:       01A16D243A0D24000515517387A73844B01F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
Manifest number:          1AC8
Signing time:             Sat 24 Oct 2026 09:00:52 +0000
Manifest this update:     Sat 24 Oct 2026 09:00:52 +0000
Manifest next update:     Sun 25 Oct 2026 09:00:52 +0000
Files and hashes:         1: 7DKhg71ZB3nnMpauf53JDjRxvcE.roa (hash: JaQt7Bz1hiKlJT1Mi9uSBQ4bdQnONHvQK2D4cbBsnd4=)
                          2: EIlUot-POus86QxUL7xC47CEgA0.roa (hash: fGvFxEuJQZrOhf41jYSYuT3rCT2fv3AUTCj1Ro27Idg=)
                          3: EiTl7_GrwObYvwKeT3MuCrcbwWo.crl (hash: cvV84sP0kID0uAGhjfM6kdvV3VKWRZk3Y86V2Lvwbe4=)
                          4: IUysQoBsRWVOL5sdLOOClz3M4Tc.roa (hash: Q0b0Ej5B0Uf7P54rUhyCPtXaonVa+DMphvbAdFQOd6c=)
                          5: _D31CaslokzBzJb570s1tCqC6rU.roa (hash: vPfarYHxZRzOYIcHGYTZOf+++xHO9r+2vS0OJV7F/0s=)
                          6: hMkkOV3vcdpEBCz-ov_DfQAHhD8.roa (hash: E0l9RjnNf9Lrz/LeJVfSiJ9Bu3PLC8j0ZQdTbyOvhkY=)
                          7: iIvK0GriwCR5-e0INxYXsaN5HeA.roa (hash: y+xjj91MYcyeEl9ZZP8msaIhf1Zsnrl/qJUlt2VVY1Q=)
                          8: sL9_3JSSE2xT5n7OAXMAHMxKq1g.roa (hash: vGCCVcEYQcDBKDtRD4+hEi2hrb6nrXfbvM90L9lRcO0=)
                          9: xC4HZY2FAIOZlVLev_OryihHWUo.roa (hash: t5wlokLTk+K42yuANt3hwr4tFRZLOSrgIWyKhOKmoyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 09:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6d:24:3a:0d:24:00:05:15:51:73:87:a7:38:44:b0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
        Validity
            Not Before: Oct 24 09:00:52 2026 GMT
            Not After : Oct 25 09:00:52 2026 GMT
        Subject: CN=f8f35c97c929b60f76c4244b0eaffc34f83bf5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b5:e7:5b:68:03:31:19:11:33:55:55:88:16:
                    ec:a7:55:04:3f:23:0e:fd:7d:a8:3e:c3:8b:2f:93:
                    bb:c5:66:a6:19:b8:89:0f:fd:12:76:56:5b:56:7f:
                    c7:73:20:12:b5:49:d2:68:f3:4c:d5:2a:2d:bf:58:
                    74:8f:37:22:f2:4c:7e:5a:49:d5:05:16:6b:5d:45:
                    69:81:b6:90:5a:ca:b6:ca:18:86:b7:ea:46:65:42:
                    58:43:80:e1:0d:96:e9:c1:4b:3e:0e:0d:fa:8b:58:
                    66:c1:18:66:46:60:d6:e3:b0:21:b0:80:f4:e5:1a:
                    85:31:2e:23:29:ce:70:21:6d:82:aa:ea:5e:41:a9:
                    c1:3b:01:92:aa:21:2d:2b:2a:b8:6b:92:bb:8f:d8:
                    73:ff:32:fb:d9:a9:e2:b7:d1:99:10:e1:d7:98:51:
                    ad:ea:cf:06:2b:1a:c5:e4:2e:9e:47:4a:df:fd:c7:
                    f0:f5:c0:d9:45:4e:5f:1b:53:6c:84:a9:5e:bc:d6:
                    27:b9:4e:d0:57:59:f2:f9:96:e7:56:9a:0e:8f:97:
                    31:25:3f:7a:18:0d:ae:99:6e:da:b8:4d:45:aa:30:
                    75:07:92:40:81:e8:f2:30:d2:0b:49:59:ac:e6:dd:
                    a6:a8:74:19:c6:b1:4e:df:2e:37:8b:d5:e7:c2:4d:
                    f1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F3:5C:97:C9:29:B6:0F:76:C4:24:4B:0E:AF:FC:34:F8:3B:F5:F7
            X509v3 Authority Key Identifier:
                keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:19:b3:08:92:de:28:62:d5:1e:91:12:38:45:da:06:b0:56:
         f0:77:55:b4:76:47:95:c1:ba:b7:b9:fd:ce:81:54:b9:b6:31:
         45:4f:99:d7:02:86:ce:e2:21:dd:13:91:3d:e7:36:38:20:42:
         ae:ab:83:1f:48:d3:8e:51:94:4a:90:d2:55:6b:79:6b:74:47:
         35:e5:29:3e:5e:e3:30:b1:40:2e:54:52:5f:d7:bd:19:fd:93:
         32:c4:1f:6a:02:4d:6c:6d:50:0b:76:bd:91:73:72:34:4b:a9:
         b1:52:ee:ed:06:36:18:ad:c4:9b:78:cd:67:cd:5b:f6:66:bf:
         1b:fe:d4:3b:df:63:f6:3c:2c:e9:1d:96:dd:c0:2a:09:f2:59:
         a3:5a:0b:a5:96:41:e7:4b:ae:af:d7:12:f8:20:5d:d8:68:1e:
         fb:21:e9:0c:64:ed:64:5d:4f:cd:ac:29:cb:45:23:4f:fa:f8:
         9e:05:fb:74:95:6f:96:d3:77:d7:44:c9:a6:1f:77:d9:fd:ed:
         01:e3:0d:c3:42:33:04:d0:62:f1:66:1f:b7:ac:03:f5:df:04:
         fe:00:8a:0e:ce:fa:6a:6c:4e:8f:6f:6c:c6:cf:ce:2d:0a:bb:
         51:de:ed:88:1e:89:ba:a3:52:73:3d:59:0f:66:f6:1a:f1:9b:
         d6:9b:37:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFtJDoNJAAFFVFzh6c4RLAfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMjRlNWVmZjFhYmMwZTZkOGJmMDI5ZTRmNzMyZTBhYjcx
YmMxNmEwHhcNMjYxMDI0MDkwMDUyWhcNMjYxMDI1MDkwMDUyWjAzMTEwLwYDVQQD
EyhmOGYzNWM5N2M5MjliNjBmNzZjNDI0NGIwZWFmZmMzNGY4M2JmNWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLXnW2gDMRkRM1VViBbsp1UEPyMO
/X2oPsOLL5O7xWamGbiJD/0SdlZbVn/HcyAStUnSaPNM1Sotv1h0jzci8kx+WknV
BRZrXUVpgbaQWsq2yhiGt+pGZUJYQ4DhDZbpwUs+Dg36i1hmwRhmRmDW47AhsID0
5RqFMS4jKc5wIW2CqupeQanBOwGSqiEtKyq4a5K7j9hz/zL72anit9GZEOHXmFGt
6s8GKxrF5C6eR0rf/cfw9cDZRU5fG1NshKlevNYnuU7QV1ny+ZbnVpoOj5cxJT96
GA2umW7auE1FqjB1B5JAgejyMNILSVms5t2mqHQZxrFO3y43i9Xnwk3xgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjzXJfJKbYPdsQkSw6v/DT4O/X3MB8GA1UdIwQY
MBaAFBIk5e/xq8Dm2L8Cnk9zLgq3G8FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEt
NTM4NmIxZDk2M2JjLzEvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEtNTM4NmIxZDk2M2Jj
LzEvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtBmzCJLe
KGLVHpESOEXaBrBW8HdVtHZHlcG6t7n9zoFUubYxRU+Z1wKGzuIh3RORPec2OCBC
rquDH0jTjlGUSpDSVWt5a3RHNeUpPl7jMLFALlRSX9e9Gf2TMsQfagJNbG1QC3a9
kXNyNEupsVLu7QY2GK3Em3jNZ81b9ma/G/7UO99j9jws6R2W3cAqCfJZo1oLpZZB
50uur9cS+CBd2Gge+yHpDGTtZF1Pzawpy0UjT/r4ngX7dJVvltN310TJph932f3t
AeMNw0IzBNBi8WYft6wD9d8E/gCKDs76amxOj29sxs/OLQq7Ud7tiB6JuqNScz1Z
D2b2GvGb1ps3Xw==
-----END CERTIFICATE-----
Generated at Sat Oct 24 18:47:08 2026 by rpki-client