Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File:                     ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier:          nEqoA8YXS8TQMIq5aqp49i221zNAK5AKQZi3yVzDRIE=
Subject key identifier:   6D:62:E4:9A:C6:B1:03:DD:60:6F:94:D2:D7:BC:63:AC:39:CE:C2:5E
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer:       /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial:       01A08A8D7125B32249228E40A9F68E41D01E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number:          1909
Signing time:             Thu 10 Sep 2026 09:02:00 +0000
Manifest this update:     Thu 10 Sep 2026 09:02:00 +0000
Manifest next update:     Fri 11 Sep 2026 09:02:00 +0000
Files and hashes:         1: Ala0VEiwCJ-XgbkKMuOQm4WQGUM.roa (hash: kHPaxmGFnvypL4VtsE3od5qxMzTcY3hqjMVSes+1x+o=)
                          2: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: d4LV6/zIdGlKtXc6EBb7i1fcSsHFyUpQQJW1c74tjTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 09:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8d:71:25:b3:22:49:22:8e:40:a9:f6:8e:41:d0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
        Validity
            Not Before: Sep 10 09:02:00 2026 GMT
            Not After : Sep 11 09:02:00 2026 GMT
        Subject: CN=6d62e49ac6b103dd606f94d2d7bc63ac39cec25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:62:b5:16:41:ff:a3:ce:0c:17:fb:8a:f4:
                    5b:03:47:e0:18:94:2f:a4:33:6d:d4:b9:1a:d8:f3:
                    c0:e8:ea:a7:51:5e:e4:7b:8a:92:31:ce:60:3a:12:
                    87:c3:d6:c5:4d:e3:b6:fe:2d:88:c5:cd:4d:36:6c:
                    60:94:6d:5d:39:dc:42:47:04:c6:66:86:47:d5:16:
                    d0:83:7d:f1:43:4e:2b:6d:d1:9a:0c:a7:b9:71:27:
                    01:b6:d1:9e:63:6b:0f:75:0b:6b:a9:0a:35:79:26:
                    dd:56:ed:79:f4:6f:fe:83:58:f2:70:da:db:2b:b8:
                    b8:a4:89:43:ce:ab:5d:b3:d2:a4:a8:bf:c3:76:6d:
                    cb:7c:9c:22:67:ef:31:6a:2a:d6:7e:43:16:d3:dd:
                    c1:c5:82:8b:65:2f:37:a0:d8:fe:9c:e2:b1:7c:80:
                    a4:5b:09:9b:61:7d:6f:2a:8c:90:52:b8:f6:22:48:
                    e8:f4:94:1b:47:3f:2a:3f:f4:25:6b:45:50:b8:2f:
                    dd:26:a5:58:4d:51:1f:18:6a:ad:29:48:55:ad:76:
                    9b:e9:18:7e:bf:ce:38:d0:e8:1f:41:99:6c:c9:47:
                    3b:1c:91:ed:a3:71:87:c0:05:58:d4:6a:84:d4:af:
                    0d:ef:d2:f4:98:ed:19:98:41:07:02:3b:1a:51:4f:
                    38:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:62:E4:9A:C6:B1:03:DD:60:6F:94:D2:D7:BC:63:AC:39:CE:C2:5E
            X509v3 Authority Key Identifier:
                keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b6:a0:fc:8a:3c:d6:7e:33:62:bc:cd:9f:27:66:04:94:b1:
         26:e7:a5:4a:eb:17:84:49:6b:3b:74:4d:30:3e:3e:1f:d7:83:
         eb:2c:85:de:f8:3e:61:a1:63:53:db:69:34:ca:fd:bd:6e:68:
         20:0d:02:56:86:a6:26:bc:b0:e4:eb:55:54:2d:a8:43:00:e2:
         03:17:a7:52:64:f7:be:9b:df:d7:57:26:ec:a3:d2:70:3e:06:
         84:a3:5e:46:04:5e:e6:83:c7:d5:6a:19:3c:00:9c:96:32:ed:
         0e:90:14:ba:c1:0d:03:42:67:7c:73:11:0c:d6:0a:59:f5:22:
         67:a7:30:ba:f7:d5:93:9d:c8:26:42:d9:c6:46:ba:4a:3e:c9:
         e4:28:4c:a7:6e:ab:77:bd:ce:01:7d:9f:60:03:01:0f:ea:38:
         57:61:25:5e:20:02:e0:c0:54:6e:af:8f:db:76:a7:15:4d:f5:
         9d:65:50:f2:e3:76:dd:a8:d7:d7:73:c5:f2:fa:66:02:de:3f:
         31:0b:a3:01:8c:3a:0a:53:14:14:69:0f:86:4b:be:a4:b4:d0:
         68:ac:15:ce:0e:72:23:53:82:28:cc:73:06:dc:ba:d3:0f:1d:
         07:b7:5d:07:42:15:ca:2a:3c:91:4e:5f:89:2a:fe:b4:ca:e4:
         11:69:82:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:44 2026 by rpki-client