Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
File:                     ECeophKZuAo-cdGpgUJ-wAuEnRc.mft (raw, json)
Hash identifier:          +9ot6V1FMyyT9a7ZIQcSn6WtjHyhsmR4iiyKmNhiKxk=
Subject key identifier:   4F:56:06:47:55:3B:D5:CB:AC:21:4A:7D:11:D4:BE:E9:46:2C:91:74
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Certificate issuer:       /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial:       01A17D056A88EED2882672C427669DAF58BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
Manifest number:          0A1C
Signing time:             Tue 27 Oct 2026 11:01:09 +0000
Manifest this update:     Tue 27 Oct 2026 11:01:09 +0000
Manifest next update:     Wed 28 Oct 2026 11:01:09 +0000
Files and hashes:         1: ECeophKZuAo-cdGpgUJ-wAuEnRc.crl (hash: 4uMSWaWeGu6azVKI4giW7+9RJE5LXBoibYBlTarF6mU=)
                          2: NOejcwmPh5BJOHrok8-5R_pK-VA.roa (hash: U6upQkLae5Oi+4csWaNnpSyW7MitDHPojVhGt/0UX1M=)
                          3: VW0Lme2J_yQgUbH90ybvFY78qnw.roa (hash: /vPzz6J6ZRJW/sdj+JpNDbQ6TuWqQBuE3w6F2Mg6BOY=)
                          4: _BcnufwZCW7iXb3pQbGLXXwf_xo.roa (hash: GSjQZe7rnL/Y2iRKRElHvN0TAcPhSGgI4zSSehXhXpI=)
                          5: fthEES7ULueds3FNvYJDhxIkkoY.roa (hash: an/1lrGy32ibi55SrdxYeDyCH0x0JUXmE2+DfK+SDWY=)
                          6: ia3F-LgyjS2O_SDcYVaJOR4gNYk.roa (hash: KOIBwS2FoeIdHxBdEglt6oXyrVyFY6fE/gEORDqk87o=)
                          7: t6obyvkvAWPwFEeDPBbwJkGA0EY.roa (hash: jrevurtFPJMJbx/BHh2rtiqxJidgW6sTzXSqt13Fl+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:05:6a:88:ee:d2:88:26:72:c4:27:66:9d:af:58:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
        Validity
            Not Before: Oct 27 11:01:09 2026 GMT
            Not After : Oct 28 11:01:09 2026 GMT
        Subject: CN=4f560647553bd5cbac214a7d11d4bee9462c9174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9d:0c:dc:11:0a:f3:57:42:52:9a:a5:5c:f9:
                    59:1a:e1:d9:68:07:71:cb:3d:1c:17:5a:58:c4:5a:
                    e1:1c:c3:2f:89:5d:5a:cf:4a:3b:3f:e6:13:2a:9a:
                    38:40:b1:6e:a0:0d:6c:81:1b:13:f5:c0:d6:e3:5d:
                    5d:75:c2:83:9d:6b:fa:c0:91:39:09:1d:b3:49:b5:
                    8f:bb:f1:d2:bc:10:b2:0e:e4:09:d6:73:43:4e:66:
                    a4:2b:4c:35:a3:2b:69:ae:9d:d0:8a:c1:be:ce:66:
                    f2:92:22:bf:06:69:62:53:5f:c4:bc:42:4b:9b:5e:
                    fe:6f:72:5b:78:57:5f:50:45:82:81:1a:46:5e:b7:
                    ce:00:be:51:e1:e2:e8:ea:ae:c3:2b:3a:1e:ee:d6:
                    85:f0:03:a5:0b:de:f5:21:f0:2a:e9:51:02:db:b2:
                    48:97:a4:31:92:35:9a:b5:8e:4d:7c:1f:08:2d:01:
                    4a:e4:7e:fa:67:65:9a:6c:3d:48:6c:e0:ec:95:5f:
                    55:56:3a:1c:da:fc:54:a5:77:5c:ed:0a:9c:2e:f8:
                    8c:ce:4c:57:78:b7:95:52:f5:6a:28:4f:fd:fc:6d:
                    cf:49:40:bd:53:53:f9:06:6b:a7:53:c2:e0:31:98:
                    4a:0d:5f:e7:44:bb:9d:d7:53:5e:39:21:d8:35:94:
                    61:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:56:06:47:55:3B:D5:CB:AC:21:4A:7D:11:D4:BE:E9:46:2C:91:74
            X509v3 Authority Key Identifier:
                keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c9:19:7a:60:c5:4d:96:40:35:e3:c5:d7:46:f7:a8:91:a0:
         91:f8:11:80:d7:f6:74:94:60:3d:7c:a7:ba:c8:0f:9a:eb:b2:
         5d:2c:38:7b:af:02:6b:b3:10:b9:a2:e2:11:0f:ea:4e:cb:7f:
         b8:f1:0b:3c:7c:4e:30:8f:db:24:1c:b5:1d:98:c8:2b:20:43:
         04:50:a2:89:23:18:df:fa:91:6b:b1:f7:66:7e:2e:e6:51:fa:
         9b:a4:90:25:fc:38:98:58:a8:8e:db:2a:03:37:d9:d2:4e:e6:
         ec:7c:fb:fa:73:68:4c:23:97:bc:4d:81:1f:c4:5c:ca:90:91:
         d6:e5:a6:b7:e1:86:13:eb:c2:4c:93:2a:4c:59:48:cb:09:7d:
         95:97:24:e3:9c:4d:69:64:fc:28:3f:54:23:df:f7:a6:08:48:
         25:a2:89:c4:e9:4b:1d:9f:8b:d2:5b:94:c7:3e:67:d2:f4:3d:
         d2:74:58:83:a4:eb:5d:02:c3:8a:e1:7f:48:93:5b:fc:7a:03:
         ee:d4:dc:a6:de:ff:0d:b9:07:e7:06:3a:e4:cc:ff:a4:b5:19:
         02:14:17:d4:56:7b:f1:04:12:8d:ea:db:b1:57:aa:1f:01:04:
         99:39:15:39:b3:83:a4:11:59:89:0b:6b:4d:ea:9d:b5:b8:13:
         d2:20:3c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:23:10 2026 by rpki-client