Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File:                     ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier:          OkSQhoUMo2cLjmbwfXoFBSQ0UspjakxjdL23K1Dj7/s=
Subject key identifier:   0F:AD:12:8C:A6:64:C5:D0:D0:32:91:F9:59:61:F3:73:0B:49:BE:03
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer:       /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial:       01A12240F26AD3590ED6B003281F54D65447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number:          1A97
Signing time:             Fri 09 Oct 2026 20:00:43 +0000
Manifest this update:     Fri 09 Oct 2026 20:00:43 +0000
Manifest next update:     Sat 10 Oct 2026 20:00:43 +0000
Files and hashes:         1: 1-r7_fUEpPJ7LUjRWlFNkAxAOLSs.roa (hash: QA7GMjXjaXuTwdxfPne5d0+pqwIBxuYEEIDse7vYIO0=)
                          2: ES59hOIvPLDzVlJ0I-0JDt9aHrQ.roa (hash: uICrLcYcQwJ8TrC2iTXXi0SFYCmHd+cO9NYWiYi1hEQ=)
                          3: LyXo3omYYFGu0x-1vxCVc0jOXXk.roa (hash: tP3+/CoTgyHttLpNnNbTKpXPtaBjJcLwdaSRY8FXziI=)
                          4: Ux0GK8vhew9-6Io06jn8phMnWko.roa (hash: nIk3ffbMCGpJ8s89KtcodgQ7duWnbnupf2+qt/z+NVY=)
                          5: XOGzJgiv8zAvESFhap-saZBvegs.roa (hash: eulsgNSz45FKPDyCpVhnxj2XCa1xVua9poOew9IQNuQ=)
                          6: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: Wi7DvzxFJpuKb8Q9bTxbCS3xZnWrDQbalLmTJyQtiSA=)
                          7: npu-xEBPXBXxkjcFkM42ClvBry0.roa (hash: oFDGroXu7G/kMj4/zbhdw+C0K6I1N4oL3NK6l6o4+Dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:22:40:f2:6a:d3:59:0e:d6:b0:03:28:1f:54:d6:54:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
        Validity
            Not Before: Oct  9 20:00:43 2026 GMT
            Not After : Oct 10 20:00:43 2026 GMT
        Subject: CN=0fad128ca664c5d0d03291f95961f3730b49be03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c3:25:bc:9c:05:dd:08:89:e4:bb:0e:a0:1a:
                    9d:e5:78:e8:5d:1f:65:c6:20:3a:b0:fb:aa:c8:a4:
                    06:1d:52:78:b0:21:df:db:30:8f:59:a5:44:6c:24:
                    7e:28:a0:90:66:91:0c:4d:9a:9a:ef:84:53:27:02:
                    78:19:ff:a9:1b:65:9b:ea:87:45:f1:c1:bf:f9:40:
                    b7:90:23:29:9f:62:a0:95:de:ab:0b:fd:aa:4c:f2:
                    1b:b6:cb:0e:c6:3c:c6:10:d9:ea:dd:81:18:0c:62:
                    11:e8:02:78:a8:47:5b:ae:f5:8c:4a:78:9f:74:8f:
                    7b:f3:df:48:95:f6:b1:34:12:85:d6:09:09:ba:5d:
                    30:77:29:eb:44:5c:f2:eb:60:cc:f7:31:d4:37:c1:
                    2e:06:3e:c0:a9:3c:97:0f:66:65:7d:10:ec:9e:2a:
                    d8:7b:dc:38:80:40:90:05:b7:1b:60:f2:24:8d:d1:
                    27:6b:20:3a:d5:c0:35:69:f5:0b:2c:b2:78:08:64:
                    36:d1:ae:99:13:5e:b0:ea:69:48:e2:0e:0d:8d:f1:
                    d6:38:98:38:e5:5e:da:98:da:47:9e:e5:6e:67:33:
                    ba:68:fc:85:88:05:4a:0b:ad:0f:cc:6b:3a:cc:e9:
                    ed:9e:3a:2c:d7:46:11:75:9a:c3:e7:1e:de:50:19:
                    f2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AD:12:8C:A6:64:C5:D0:D0:32:91:F9:59:61:F3:73:0B:49:BE:03
            X509v3 Authority Key Identifier:
                keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:62:d4:77:30:52:4c:e7:c2:d3:a7:5c:16:79:c9:28:ca:0d:
         87:b6:9f:e8:2a:48:cd:12:49:2c:89:7e:37:24:05:d8:35:3a:
         58:fa:61:bf:b9:11:a3:25:e6:65:66:ae:1b:9b:83:71:e5:36:
         de:7d:b0:3a:8a:d3:20:9c:63:3b:69:87:6d:01:b7:84:00:c7:
         c9:5a:3b:24:a2:ac:22:ce:fd:a6:3c:07:2b:2d:e9:b9:c3:76:
         1b:00:2a:75:27:66:0a:16:1a:3d:eb:68:97:bd:39:01:00:5e:
         70:8e:95:e0:16:49:e1:c2:a4:f9:6c:25:60:31:c2:ee:ed:de:
         82:d6:cb:8d:25:b7:b8:fb:7d:b0:cc:e3:54:96:50:da:fb:cb:
         37:31:10:7d:2c:50:42:c8:93:e6:01:08:93:4b:6a:5a:61:0e:
         eb:6f:6b:64:1f:6b:04:fd:b7:f9:d0:8b:63:fc:81:ed:66:e4:
         69:48:f2:09:c9:07:ca:ad:7e:a4:dd:e1:3d:8f:fb:11:a7:58:
         4f:19:c6:93:c6:8f:8b:60:b1:bf:5b:7a:4b:53:61:4d:80:99:
         55:62:55:6a:40:c0:66:1b:22:49:0d:83:18:e0:a7:0d:b5:ec:
         3b:05:ba:9d:34:08:17:34:1f:b6:81:de:38:35:bc:d0:c2:36:
         d9:e0:28:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:34:44 2026 by rpki-client