Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
File:                     eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json)
Hash identifier:          N0GKvadaAHDuiA7MReLrHbzRu2hy0cMbuwrREj4+Rm4=
Subject key identifier:   16:5A:60:B1:C7:0F:F9:70:8B:4E:47:2D:A8:28:E9:4C:EB:5C:AF:0A
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Certificate issuer:       /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial:       01A1871AB32845862D5C058C3B2DD80ED5C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
Manifest number:          1714
Signing time:             Thu 29 Oct 2026 10:00:36 +0000
Manifest this update:     Thu 29 Oct 2026 10:00:36 +0000
Manifest next update:     Fri 30 Oct 2026 10:00:36 +0000
Files and hashes:         1: IkSWs7EkuQhyXRbP9F6EHBtTz1o.roa (hash: Byu4YYkguBqvjzQYm5SoI51Ex0ZiZOLUbV6kTS2GuBk=)
                          2: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: 05VolINdHZ2/lqMMuW/TO3L5qIAXJgSOFKH5I9imKhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 10:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:87:1a:b3:28:45:86:2d:5c:05:8c:3b:2d:d8:0e:d5:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
        Validity
            Not Before: Oct 29 10:00:36 2026 GMT
            Not After : Oct 30 10:00:36 2026 GMT
        Subject: CN=165a60b1c70ff9708b4e472da828e94ceb5caf0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:db:e9:1d:fa:ff:42:51:6e:38:49:b4:38:91:
                    89:ef:e3:12:4b:19:7c:55:93:07:68:8d:f2:02:16:
                    95:35:65:ed:bd:0b:f8:d1:ef:08:4b:3b:74:d0:2d:
                    9f:46:0b:60:67:db:cd:fe:d2:e2:5a:e7:a2:6e:a0:
                    ad:61:2e:5a:fc:c5:71:1a:e7:1e:a3:5c:9a:dd:ac:
                    11:68:f3:10:54:dd:07:fb:e5:d5:b6:8f:91:d9:10:
                    60:68:b3:2d:83:e7:35:9b:b6:ea:b2:3c:1d:87:9e:
                    c8:e0:c0:0b:78:9f:5a:41:ee:95:15:d2:0e:36:f7:
                    ca:0a:3c:86:74:c0:b9:5d:34:08:e5:08:60:2a:6b:
                    78:1d:a6:8a:15:af:af:c5:57:7f:49:48:16:8a:f5:
                    00:ba:d3:9b:89:f8:db:3c:02:8f:6a:90:c3:fa:88:
                    48:ff:c4:56:c7:d2:a1:bc:94:c1:c7:1b:88:cc:bd:
                    c9:14:0a:11:b8:15:0d:b6:5d:06:51:9a:5c:75:9e:
                    45:1b:5a:87:7f:4f:90:08:98:80:93:b7:0a:66:a9:
                    a9:7f:c7:90:ca:a4:4e:48:72:2e:94:76:57:6f:fd:
                    4a:66:56:a9:b5:78:85:87:24:d8:06:28:da:44:77:
                    5a:84:da:62:02:fb:86:98:a9:f3:d7:ce:c7:29:34:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5A:60:B1:C7:0F:F9:70:8B:4E:47:2D:A8:28:E9:4C:EB:5C:AF:0A
            X509v3 Authority Key Identifier:
                keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8b:1d:57:f5:83:ff:9e:bd:c5:c3:ef:2b:8f:97:08:49:b0:
         dd:25:28:1f:e1:99:cf:68:f1:cb:37:82:ec:5d:4a:5e:d5:3d:
         35:ed:2c:7e:af:77:25:50:90:a4:37:69:8e:a5:07:81:54:d8:
         b7:f0:89:32:58:45:69:29:87:6b:e2:2c:a0:4d:b2:a2:af:b7:
         91:6e:b7:d3:c3:53:69:e5:04:af:26:bf:cf:cc:da:ae:a6:ef:
         56:03:4f:7e:0f:fb:09:2a:6d:60:66:68:cf:54:44:3d:c4:09:
         8d:c6:fc:cf:1b:97:fb:50:79:c5:fe:c7:4b:fa:8a:61:7f:a3:
         55:38:31:0a:c8:bc:42:c5:59:c8:71:52:69:60:37:d6:40:eb:
         86:a4:b0:88:7c:3b:31:b2:17:b1:25:cc:41:3c:ca:86:85:01:
         37:55:e7:aa:63:56:44:e8:7c:75:20:5f:a4:37:c1:5c:d1:7c:
         34:e1:be:2a:38:13:71:55:a0:4a:bf:56:30:ca:c3:f7:fd:12:
         d7:80:02:0c:ce:cd:02:86:e6:92:2d:3d:4a:df:d1:b8:b9:2e:
         f1:ed:ba:47:3a:92:c6:2b:8b:a0:e0:45:c3:c4:9e:d7:34:65:
         0f:8d:01:82:74:8f:fc:c2:85:fc:51:cd:0c:03:61:3b:96:f5:
         73:96:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:14:51 2026 by rpki-client