Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File:                     ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier:          IZzabdTo6VnmKmdIVoiikeDxCSBhCQ5bFmhuOkOFueE=
Subject key identifier:   53:B8:13:66:58:F4:EE:33:2A:98:35:57:B1:87:AD:7B:74:18:25:FB
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer:       /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial:       01A183ACCCC2F40C5FD9349D58DFD4AEF1F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number:          198A
Signing time:             Wed 28 Oct 2026 18:01:42 +0000
Manifest this update:     Wed 28 Oct 2026 18:01:42 +0000
Manifest next update:     Thu 29 Oct 2026 18:01:42 +0000
Files and hashes:         1: Ala0VEiwCJ-XgbkKMuOQm4WQGUM.roa (hash: kHPaxmGFnvypL4VtsE3od5qxMzTcY3hqjMVSes+1x+o=)
                          2: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: PbcL15VgMZwXwZNTljthaC2rZuIk69bzvsg6k4OU7S4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 14:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:83:ac:cc:c2:f4:0c:5f:d9:34:9d:58:df:d4:ae:f1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
        Validity
            Not Before: Oct 28 18:01:42 2026 GMT
            Not After : Oct 29 18:01:42 2026 GMT
        Subject: CN=53b8136658f4ee332a983557b187ad7b741825fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:46:81:6c:81:14:99:89:f5:32:e8:79:61:
                    5d:74:69:41:b1:6a:21:85:ee:89:8a:34:37:c2:70:
                    57:f2:99:ca:05:80:f2:bd:eb:16:df:8a:5d:c6:ce:
                    09:df:03:4e:70:41:65:ff:25:57:0c:74:7f:36:c8:
                    c1:a2:e8:aa:09:0f:91:f5:54:82:85:3c:67:82:ad:
                    8f:bb:ea:19:ce:74:6b:8a:fb:bc:73:8b:02:13:b1:
                    a0:76:07:db:de:34:f7:c7:26:a6:75:e4:79:d1:29:
                    12:84:fa:7f:6f:58:ac:0e:00:ca:58:ef:0c:d5:0e:
                    5d:08:f7:34:33:18:72:6a:49:96:51:e1:f8:cc:24:
                    2b:52:a8:ef:7e:00:18:96:73:d0:7b:e6:12:4e:a6:
                    11:2e:b5:00:9e:d4:61:bf:fb:5f:4c:2b:e0:48:47:
                    dd:68:60:7b:d7:3c:dd:96:e3:a7:b3:21:48:ab:80:
                    60:31:24:0c:e6:ba:0a:63:c5:56:42:b8:e0:2f:37:
                    9b:78:46:68:f5:6c:67:97:eb:4e:cf:e9:4c:21:2b:
                    2d:9f:2c:10:70:f0:82:1d:71:f0:14:02:d7:a0:78:
                    d9:8a:fb:80:46:a9:68:30:fa:72:46:e9:fb:b8:3e:
                    8e:07:fe:5f:9b:b4:fd:1a:9f:1e:97:9c:e3:fa:cf:
                    1b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B8:13:66:58:F4:EE:33:2A:98:35:57:B1:87:AD:7B:74:18:25:FB
            X509v3 Authority Key Identifier:
                keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:bd:43:a7:4b:84:eb:c3:93:5d:b9:ab:05:00:c4:e7:c9:ef:
         c4:f8:1d:f9:93:4c:27:eb:fc:db:01:23:ba:4b:eb:70:72:8a:
         fd:5b:fb:0f:a7:e7:0b:34:57:c2:72:87:f8:82:63:85:6e:9c:
         3d:58:45:12:d6:3e:76:c4:56:d8:a9:2e:e1:b4:8e:55:1d:d9:
         85:7d:4b:d7:8d:29:75:bb:ea:88:72:f7:a5:c9:e7:63:ee:89:
         96:ed:7d:8c:74:3e:73:12:d7:5d:83:59:42:ec:89:7e:20:f1:
         df:6a:81:3b:59:27:8c:e0:47:aa:65:12:a8:6a:dd:39:8b:c4:
         23:17:b2:c2:1c:e3:a5:fa:0b:1d:dd:44:e4:b9:11:b3:7f:50:
         f1:f3:f8:5d:6c:0b:a0:f3:8e:b1:f1:cc:1d:ce:3e:d2:51:ff:
         ff:b2:83:6c:4a:c4:e7:f9:b9:7e:ec:a5:58:f5:7e:8d:1a:a7:
         a2:da:97:a1:ee:bb:e7:2d:ed:d6:b1:a7:dc:9f:ef:c8:fc:43:
         95:64:d7:7a:29:dc:0f:60:b5:67:b7:9e:50:96:f8:25:84:43:
         62:a9:0f:5d:d2:21:eb:14:33:f9:ab:ee:77:85:59:93:ac:01:
         87:4d:9d:44:06:cf:6b:f4:a6:e7:6e:2b:d8:04:d5:63:c7:e7:
         6b:20:43:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDrMzC9Axf2TSdWN/UrvHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTlmNmEzODFjZTRhNWEzZWNjYjI0OTNhNjg0NjA5Yzk4
OGEwZmMwHhcNMjYxMDI4MTgwMTQyWhcNMjYxMDI5MTgwMTQyWjAzMTEwLwYDVQQD
Eyg1M2I4MTM2NjU4ZjRlZTMzMmE5ODM1NTdiMTg3YWQ3Yjc0MTgyNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvBGgWyBFJmJ9TLoeWFddGlBsWoh
he6JijQ3wnBX8pnKBYDyvesW34pdxs4J3wNOcEFl/yVXDHR/NsjBouiqCQ+R9VSC
hTxngq2Pu+oZznRrivu8c4sCE7Ggdgfb3jT3xyamdeR50SkShPp/b1isDgDKWO8M
1Q5dCPc0MxhyakmWUeH4zCQrUqjvfgAYlnPQe+YSTqYRLrUAntRhv/tfTCvgSEfd
aGB71zzdluOnsyFIq4BgMSQM5roKY8VWQrjgLzebeEZo9Wxnl+tOz+lMISstnywQ
cPCCHXHwFALXoHjZivuARqloMPpyRun7uD6OB/5fm7T9Gp8el5zj+s8bUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFO4E2ZY9O4zKpg1V7GHrXt0GCX7MB8GA1UdIwQY
MBaAFHmp9qOBzkpaPsyySTpoRgnJiKD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUt
ZWNhZjU1M2MzMWQ3LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85MTFiODMtMGMyNy00MDQwLTk3MGUtZWNhZjU1M2MzMWQ3
LzEvZWFuMm80SE9TbG8tekxKSk9taEdDY21Jb1B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXb1Dp0uE
68OTXbmrBQDE58nvxPgd+ZNMJ+v82wEjukvrcHKK/Vv7D6fnCzRXwnKH+IJjhW6c
PVhFEtY+dsRW2Kku4bSOVR3ZhX1L140pdbvqiHL3pcnnY+6Jlu19jHQ+cxLXXYNZ
QuyJfiDx32qBO1knjOBHqmUSqGrdOYvEIxeywhzjpfoLHd1E5LkRs39Q8fP4XWwL
oPOOsfHMHc4+0lH//7KDbErE5/m5fuylWPV+jRqnotqXoe675y3t1rGn3J/vyPxD
lWTXeincD2C1Z7eeUJb4JYRDYqkPXdIh6xQz+avud4VZk6wBh02dRAbPa/Sm524r
2ATVY8fnayBDHQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 22:50:34 2026 by rpki-client