Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
File:                     EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json)
Hash identifier:          jjJ/0VDBPVm8CbyIt+spQAXOUnmmv6fJpDUKh7Z/yig=
Subject key identifier:   89:92:EF:3F:80:B9:AF:DA:7C:2C:6B:B6:4F:6B:69:26:7E:93:24:41
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       01A1570ADC1CEC40D023061557C82705EA9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
Manifest number:          1B7F
Signing time:             Tue 20 Oct 2026 02:01:31 +0000
Manifest this update:     Tue 20 Oct 2026 02:01:31 +0000
Manifest next update:     Wed 21 Oct 2026 02:01:31 +0000
Files and hashes:         1: 1-wR4cTw3cnRKpfnM4kFkDlqOmpM.roa (hash: uANSR1y8ArwMRJWs9G2MLV5dcv0JI9ZhZL82nYHfPJ4=)
                          2: 1yQrs5HP9XIaoTvb72_pfqznw5g.roa (hash: yz35x7CqiZJ94ld5AFj0y0ZNW6s7eAQtnm0UEs/oenI=)
                          3: 3ueobkuqCRrYHcS_Ra615Z2wF5U.roa (hash: K0AzKxQwm7htko0KmC5TywH8R8BPhkqCaEM5jSmKm3g=)
                          4: 3xzArYOAxgWc4aUVyuLW5cctBic.roa (hash: 1e/deWnq1m7f4YnRkd3T/eFSvZzxSX+ubkiEGm+dFs0=)
                          5: 964mey1ll-AqSTVqRVFMkmj9R7A.roa (hash: /W32m1FUs/kl31E7I7cB+ItUJPiLNdIiU90WMvkjKtY=)
                          6: B3lzECI8w3HbbNBrJuEUc9_EF5k.roa (hash: rCmQl/ONc/o8391GBO724j7HH/p+HUU/e7ohTDKTGvw=)
                          7: C0pO8vmI8i0pyw-YO-sHomGs8Lw.roa (hash: 6noZcpiWmpaT21H7qsONWigBYFMG0N39ym2hGf7vBbs=)
                          8: CFjoGu1xIkRD4AXMx7qb8Qjapqw.roa (hash: JzMpItX6WpyBwW2pJ22HiX4G0oRhcgR43KfhB90tGRs=)
                          9: DJFcihK3KyDMA5inHd8qVc8pMd8.roa (hash: 7aHvIhUD1Pwu4HtX5DwhI19v0UPceOldhZKd58QrEWA=)
                          10: D_g2kJlELMuoefn2HH3Y2o0l5YQ.roa (hash: dyiFDNNm4intjG5QxyjFGbaTlhBNt77Zx7ofZH6deL8=)
                          11: Dt8fw0fBEcEty4mj1leXNAQgZ9s.roa (hash: y8aICBxGhhhT6yCX7J0nu8TCySSKB7GMI2H8C1V8oWQ=)
                          12: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: 6jpny5FVUBg52yobw+YJBZGzoNalLEGp36irP1ajspw=)
                          13: N7wIAVShGLQyli3xNuOZyqJnQO4.roa (hash: AgMVywaJAsy8gUEhbniXUCBpJabLSJ38CmQWxUFEkEI=)
                          14: NkUv8tT-ajiDpIriTdTmg1rESxQ.roa (hash: seqVba1oO6/3hfFI32i0NdWB9EI7RH+MCROkDPZc0ZY=)
                          15: OfJWGzh3EJhJDnotwpPBu62vy1g.roa (hash: MhO2XX5OLieGQFxwEuA3XpaP5smjhsn06HFUwLnfiN4=)
                          16: PS0PsdnY-HZeeZ1Z52R3bkK0Hfw.roa (hash: 8DMzuZuwaB5js5sn1MRMLjpEkzq82jGppMDxBhQkY2I=)
                          17: QI6P2rjg0KTEHj0abHLeX5NrCNw.roa (hash: cNfX9kMj7jm75WwWsewudy5zy4Y1MC/doZUI28Cxpqs=)
                          18: TVQnbaL3VCztBv4q7ycrZZTOHOc.roa (hash: bC6KDiPDLB7pjAOZ1rB1QtdHfKPoray7E8FKc5HGj+g=)
                          19: U2pLLOkiHMn0rCPB16cgMVj-e5k.roa (hash: NZC/aPt8M4oyJlk7EBhhsouZdc1pvAlNzS2p5zGb/cI=)
                          20: UVz7Jz-vRbmjv60CUdJRwlL5d9k.roa (hash: 2loeiAsnCgkFA+e/zul6V4oJZslxwq6RTKrln0d3znk=)
                          21: X9pqJ_bWAmfpFd9hCW3HufAy5B4.roa (hash: SE7pkhcUNXRDeV5ZRqQnZ58B47F0LyM4s+/68mhkYxQ=)
                          22: Xunso7a2e65k6yGHHSuy_k4MqO0.roa (hash: PyHnhleskous7Yw+GHgIcGsK90j+qnC/2w/Fvu+6MGE=)
                          23: _-TiV1qoAPPw8SPSrMcBVzTznwE.roa (hash: Pvgk+aRssPeQ+g6cPNxNpBek3/VhtaCOTsYLRLNNB4o=)
                          24: cZX0XiKgTVRStj-qdJuTen7BOJ0.roa (hash: EC0B5N4ujSfAORvQJwcrZWB4mhWoJIUXusoMRH6vkfU=)
                          25: k-6qmVeKEUGc-0cz5Hnsx9hmUPE.roa (hash: 5Ng2eom8lxcHR5nDEgtd/5I+6rVuKWoiMkhVtoQFVJM=)
                          26: moww7p-LOqTrUFdCMgiOcUbWkq8.roa (hash: 0LuJenOzhHfNNzAchlSo36Em1kGuq8Y2UA268LygX3g=)
                          27: pA1ysw7euEwsawBt3WsvgzNCTVc.roa (hash: IHFmvwJcfsynVr/cn/JAzWiobBCXWx/OYDSpOIF4AC0=)
                          28: shFmXFepoVkoPuQaH7iwNirZ3XU.roa (hash: jDkMxVrrv2BYtLq4CSplaeMuVqAXK6DpU5S2779dHHY=)
                          29: tuOyzSJGsdbEh4RXvNAltEvaihU.roa (hash: G2o6sCc5sztEjyYV0w4l3dxyOyYv/hTu3DhW9esUzC8=)
                          30: tuh9bTDNsuijEEF_1hjMDBzb60Y.roa (hash: NaMz9HaNco8VZFC2aGISUfFdhyLdNpp7L/OREqXeFJg=)
                          31: uX4xjA4a9NlDQbfRFcZwVkyWUus.roa (hash: f6MBYwHAEYsVkFoRtsJQxmJ3Dq5gG+hbXJYYbrTiM9Y=)
                          32: v-hy-AA0bMP0YRPYj1qavNzCvXY.roa (hash: 7R193xmOU591Bwip4tiZ71RqXjAryXJbfj2mjnypeSE=)
                          33: vcKGcg7yfm5OJBRmK9UMG7YPxlE.roa (hash: lC2nvLTapMxLzuBLLcR7m2BlyD8SVIXqzMfLdXwZD5U=)
                          34: vuRjeq6Hw4CRVKhaZ9mJU5QQ-8w.roa (hash: IY4BrewFqRlekR75+D0bMoN40ONA0lrT3ykyZO92GIg=)
                          35: wJhBirIGDG5CpWVFPtacVacZOVI.roa (hash: 3n/bwQkmOj6Btxw1bOnJ8wdv1zKEZOjjavJjnLqf2ys=)
                          36: wOT7IZMsm5x7gOeHRQ2TeKPsneo.roa (hash: XWPZK9lqHn6jVyfOlaTnmEq4ouLn7+wTN51iKWqUouQ=)
                          37: xUFWVXWG8jvZRSVOePtSKH6GSXc.roa (hash: SPlD00845Cci2SPbrzXpwUia+Xpnie29kSvO/GdHQ7U=)
                          38: yV7jKZqczgrPDGRpe_5ykccZCz0.roa (hash: CXmYu488BCna3Chnev81BlIc+TedhSwGv5Tq+LkVCsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 23:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:57:0a:dc:1c:ec:40:d0:23:06:15:57:c8:27:05:ea:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: Oct 20 02:01:31 2026 GMT
            Not After : Oct 21 02:01:31 2026 GMT
        Subject: CN=8992ef3f80b9afda7c2c6bb64f6b69267e932441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0b:06:2f:90:bf:74:98:22:48:a0:64:d8:40:
                    4c:c6:38:06:c7:c2:f3:f3:88:f3:98:cb:0c:5c:04:
                    6b:81:d4:a3:f6:1a:a1:02:37:1e:eb:98:9a:50:ad:
                    26:3f:63:ee:29:5c:9a:37:a2:c4:53:b6:08:bb:6c:
                    c5:44:e8:ab:52:9c:ad:10:87:c4:41:3e:18:39:0e:
                    59:76:04:6a:45:88:61:ea:92:e8:6e:fd:ed:20:f9:
                    79:23:01:12:96:fc:f8:c1:72:e0:1e:59:c7:5f:17:
                    b7:81:af:6f:34:17:a6:e6:26:b0:55:32:03:42:5b:
                    f9:8a:31:86:63:22:78:da:f8:e8:fe:a0:02:34:8a:
                    07:2c:21:33:f2:8d:48:c8:c7:7a:61:7a:41:70:ca:
                    2c:d2:ae:52:95:a8:ce:3f:dd:0b:4d:3a:cc:cc:c0:
                    02:aa:94:4d:39:15:b2:62:a1:5d:b3:20:92:a7:ba:
                    40:f6:6e:eb:04:ce:5d:16:80:7d:eb:b3:f8:1f:a0:
                    8e:bd:51:b8:63:44:e9:48:3a:c0:bf:67:07:85:dd:
                    48:50:a8:74:91:07:3e:2d:c7:4f:92:3e:6d:d0:d8:
                    9e:1d:0d:a3:16:9e:83:db:a1:13:47:5c:cc:8a:8c:
                    31:c9:a5:34:fd:f1:63:cd:20:06:9d:3e:06:3a:19:
                    f7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:92:EF:3F:80:B9:AF:DA:7C:2C:6B:B6:4F:6B:69:26:7E:93:24:41
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:6e:a6:35:1b:0c:5c:3a:76:ca:d9:89:25:64:f2:86:3d:35:
         5a:5c:f4:5a:4a:50:40:05:85:a8:27:92:1d:39:40:9e:7a:94:
         19:ef:22:ce:f3:83:34:14:a9:4b:a0:2e:6e:c0:f4:48:88:20:
         6d:f1:df:62:dd:d9:69:5f:99:70:a1:da:76:27:b5:ef:33:e9:
         6a:f1:6e:96:a4:10:7b:56:e7:2b:3b:98:bd:71:47:48:e3:60:
         d6:84:7f:58:bc:32:65:63:19:8c:80:79:82:1a:ad:b8:b5:dd:
         42:9e:86:73:e8:c8:df:ba:2e:9d:1a:8d:cc:81:34:a4:0d:6b:
         67:91:e1:70:c6:9c:ac:e1:33:03:7d:96:c2:10:c1:5e:28:3e:
         db:ab:76:8b:6a:a6:cf:26:01:2a:3a:45:16:a8:fe:01:99:ae:
         f4:fb:54:2c:0f:13:47:be:f8:c9:4c:a8:57:d9:a3:b2:ed:96:
         e1:15:d5:c5:06:48:ee:5a:15:c8:97:b5:66:79:2e:7d:30:91:
         16:73:64:f1:21:89:18:6b:0a:b5:22:ce:a3:10:de:68:e7:ff:
         22:91:71:45:14:74:65:ff:01:a1:d8:4f:e8:41:7d:9c:00:e8:
         8b:bc:02:11:ee:97:93:34:df:59:65:cf:4a:c6:86:b7:fc:7b:
         a9:1d:4d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 09:30:57 2026 by rpki-client