Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
File:                     E82HAn19OjuffEukSV5J4hrVpLs.mft (raw, json)
Hash identifier:          b1Id/ZI2VjdDS8maFCvV/0+SVy9MiYBajZ6UTJSTmJs=
Subject key identifier:   F7:74:F0:BB:3F:71:95:06:2F:1E:92:B0:26:72:CE:EB:3A:33:65:3D
Authority key identifier: 13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
Certificate issuer:       /CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Certificate serial:       01A11A196EB1710319E2803157DBB649F022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
Manifest number:          1670
Signing time:             Thu 08 Oct 2026 06:00:36 +0000
Manifest this update:     Thu 08 Oct 2026 06:00:36 +0000
Manifest next update:     Fri 09 Oct 2026 06:00:36 +0000
Files and hashes:         1: 6uylP13BjyxFcLc744MJm8y5W0U.roa (hash: MZGBxQNHUnKkJtWwdESchmnXllj9tvS5hzujCo2mmtE=)
                          2: E82HAn19OjuffEukSV5J4hrVpLs.crl (hash: o7+g4+cuRyKDppePZRh8JDEDrGI+aV6aTFu+JwlsAXY=)
                          3: LFtuG7P8iCtOMJ-_HIpVvd27MIk.roa (hash: +FNhZHEAVTu13uveNE5cM1cVHyXcnYJhiraSKz/AoYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:19:6e:b1:71:03:19:e2:80:31:57:db:b6:49:f0:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
        Validity
            Not Before: Oct  8 06:00:36 2026 GMT
            Not After : Oct  9 06:00:36 2026 GMT
        Subject: CN=f774f0bb3f7195062f1e92b02672ceeb3a33653d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:87:a4:35:02:05:df:d1:ea:00:04:e1:7e:09:
                    7b:fd:89:d7:47:7c:bf:05:08:98:60:7c:8c:c9:38:
                    91:15:66:69:a2:6f:18:44:8e:5d:64:92:33:04:e7:
                    6c:40:84:1f:d0:d2:37:40:b1:2e:b7:b1:25:5c:92:
                    99:fa:73:5a:9c:3d:03:45:dd:8d:82:4e:62:17:9d:
                    b0:a2:91:79:78:c7:f2:38:78:6b:d5:39:b8:dc:d8:
                    42:19:93:9d:cc:48:49:95:7e:46:16:b9:fa:1f:df:
                    94:9e:6b:41:6d:9e:32:35:a0:09:8d:c2:b4:15:03:
                    c9:45:b3:a4:9c:09:6e:28:bb:6f:f9:19:c7:4f:b5:
                    c3:82:03:b3:8a:0f:fc:62:60:94:6c:e5:1d:68:6d:
                    14:13:fe:b0:01:06:8f:be:a0:96:1e:2f:71:c6:9d:
                    30:8b:cf:75:56:99:c5:0b:7e:e4:98:95:e5:86:df:
                    76:16:18:88:af:03:6f:99:4a:0b:2c:69:14:52:40:
                    ec:5f:72:6e:dd:7f:f3:b6:3e:f2:f0:4e:ec:3c:7b:
                    fb:63:ab:bc:36:e1:54:35:fa:10:ff:0f:95:03:31:
                    51:0e:e6:e9:67:86:5a:21:b4:91:22:ef:0f:83:5f:
                    dd:0c:df:29:2f:64:f2:99:c0:86:ee:42:b6:85:f7:
                    02:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:74:F0:BB:3F:71:95:06:2F:1E:92:B0:26:72:CE:EB:3A:33:65:3D
            X509v3 Authority Key Identifier:
                keyid:13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:63:21:9c:8e:14:3e:88:47:ee:f8:b8:b7:51:fe:ae:30:39:
         75:97:e4:0d:c2:e5:af:d4:d5:6f:08:a9:47:f0:8c:56:00:33:
         51:e4:08:62:a2:eb:a2:3c:4d:9d:db:af:a2:0a:65:e9:89:6d:
         ff:b1:d9:0c:dc:13:0c:3a:33:3c:4c:42:5a:0b:d8:a5:27:ef:
         d6:1b:93:41:99:5a:7e:62:ed:27:0a:ce:99:13:aa:8e:31:be:
         74:2b:f9:c3:9e:1b:8c:a9:b1:6e:5f:a1:74:35:49:f6:bc:df:
         6d:ec:08:30:7a:77:0a:46:21:49:d7:28:e7:c1:58:22:d6:c0:
         40:8d:98:7b:eb:bb:e2:38:df:b1:e6:69:dd:e4:14:81:e9:12:
         ac:64:3a:c5:ad:7d:b7:c6:c6:18:aa:ca:51:0b:ad:84:ba:97:
         79:b0:97:d1:1f:7e:88:45:e5:8e:f7:a7:22:d0:ba:b2:01:c8:
         0d:fe:8f:a5:b8:dc:96:a5:2b:8a:3a:52:6c:45:f6:26:57:32:
         d3:d7:1f:58:34:9c:f0:64:56:ea:2e:48:d4:5d:c8:02:46:40:
         84:20:a0:d3:d6:98:c7:ee:dc:a7:48:d5:27:4c:24:d5:50:df:
         70:f7:17:b2:3a:17:c2:a4:94:1d:d2:ce:35:d2:d7:1e:ee:a1:
         5a:59:bc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:07:29 2026 by rpki-client