Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File:                     EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier:          D1Ga6j16UCMzAumSrYKkT6y7kRs4ldZORzzXDSHcItQ=
Subject key identifier:   72:EC:B9:4E:27:AB:DF:96:8C:79:2C:F9:20:B2:69:D5:1D:CA:2A:0C
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer:       /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial:       01A08B3169105A69AD00B14C5E29CA5FC284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number:          1A6A
Signing time:             Thu 10 Sep 2026 12:01:06 +0000
Manifest this update:     Thu 10 Sep 2026 12:01:06 +0000
Manifest next update:     Fri 11 Sep 2026 12:01:06 +0000
Files and hashes:         1: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: daHypuUlPgUKcflskbGkdQJdMOUX2Egq6CP56co4lUY=)
                          2: Fp2rP9f8h4s7LTys-x4d-gNWxf0.roa (hash: ZlkJjYzvWT1Lb5OA0ekCu3QX+ItjNmKk/ECN2neoOvw=)
                          3: X1Ccfwu0f8o1S3I__oAjVih9pOs.roa (hash: BOF7vZ8IxC3rdADiLdeYXZTXBlmG6yDKryNzv+AIWEU=)
                          4: gWB4iaMM96HatxSBLmxCY8CzZxE.roa (hash: XwPX3f6mTdmL46PvAX+CuulPFlnUy0yUOKFFavRIR4I=)
                          5: j7L1ostSvElAwTMB1uojEg_dQ7w.roa (hash: JQYdvzJNJrmmLe3yn0kVwTjbXr/+QZt9rLJ/NpUV64o=)
                          6: vUEAM-YPMOE_bnpwdo0XUZOektc.roa (hash: zwIeH3cOS34rB1Ez6T+f1Zfu0JaPz2Ntp3EY+zq8h/o=)
                          7: w8mU3t4eAhYelsDgAgrn-6wqLH4.roa (hash: G03HiosMHcQEOceRbwXH5r6VxkCMOBEGzj+w28Sw620=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 12:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:31:69:10:5a:69:ad:00:b1:4c:5e:29:ca:5f:c2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
        Validity
            Not Before: Sep 10 12:01:06 2026 GMT
            Not After : Sep 11 12:01:06 2026 GMT
        Subject: CN=72ecb94e27abdf968c792cf920b269d51dca2a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:d7:90:c7:d5:1b:ad:2c:27:83:03:f0:1e:
                    6b:a6:4e:15:60:9a:f7:57:0c:ed:2a:8d:ca:13:d2:
                    47:80:b7:50:85:f0:e9:be:71:2c:77:bf:ab:eb:c0:
                    28:3f:b3:83:e6:4d:a0:95:bd:2b:97:31:2b:10:21:
                    72:5d:7f:d8:2c:f9:ff:14:5d:fe:f2:20:d0:58:76:
                    50:86:d5:e2:d2:11:00:08:f6:31:de:04:f1:9a:fe:
                    61:c8:fc:ca:77:11:f1:c3:bc:6d:0e:02:9d:e9:3d:
                    5d:97:a7:10:da:05:b7:79:48:ad:81:c2:6d:d1:1e:
                    be:0f:f9:d4:8d:51:a6:ad:58:d3:64:93:99:58:f3:
                    00:4c:15:0f:a2:54:51:5c:4f:bb:ee:45:1f:a6:8c:
                    cc:6b:75:37:ca:0b:b6:2a:cc:01:ce:d6:99:61:be:
                    a1:e1:bb:c4:7a:6c:98:40:b1:49:1c:99:95:d1:41:
                    60:9b:ed:c7:ac:cd:6c:9c:89:c5:d3:8f:4a:97:fa:
                    c0:af:97:5c:a0:01:3b:62:1a:9e:75:4d:8d:98:2d:
                    88:bc:7d:a9:e0:be:12:6d:2e:3f:fb:79:36:2c:d5:
                    67:cb:3c:cf:37:cb:d0:93:e3:a8:64:cf:c4:fd:82:
                    18:bb:83:47:8f:9b:68:d7:58:28:ce:30:8d:8a:fd:
                    03:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EC:B9:4E:27:AB:DF:96:8C:79:2C:F9:20:B2:69:D5:1D:CA:2A:0C
            X509v3 Authority Key Identifier:
                keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bc:ab:06:63:ce:ac:f0:bf:2b:77:ae:4c:67:48:bb:e0:f2:
         0d:17:d0:97:7a:97:49:ee:f3:45:b4:af:71:68:6e:d9:fb:10:
         21:4a:bf:15:68:53:a9:fc:2b:7e:e9:8b:36:e1:d6:55:2a:be:
         b7:5d:d5:aa:8e:2c:2d:87:2f:70:b4:9e:e6:4b:71:7d:dc:7d:
         42:87:2f:4e:69:6f:35:f7:8e:41:9e:4c:ad:ab:8f:d0:9d:4e:
         53:57:fa:10:62:5a:ac:23:aa:b4:ba:b8:7b:12:4e:29:d8:7f:
         2e:f2:1b:46:0c:1c:93:b5:9a:5d:34:81:69:c8:68:88:f2:83:
         1d:ce:f3:f9:18:99:f7:a8:bf:0c:b6:ff:7f:c1:0c:17:ac:9b:
         0e:35:8a:0c:ea:57:01:f3:2e:c5:e3:c9:ec:d0:94:8e:51:ed:
         f9:57:53:35:ed:3d:dc:19:b2:a8:87:d7:ea:69:6f:f1:c4:6b:
         59:76:96:6f:ab:dd:d1:4e:9e:ea:75:aa:df:b1:df:fb:9b:ed:
         72:1f:6f:a0:d6:8d:7a:02:02:0b:15:7f:7e:d1:0f:dd:34:59:
         89:4a:8b:97:62:ab:66:ff:9e:68:0d:b1:84:7b:c0:75:c1:51:
         a5:fc:9b:f8:ae:59:ba:0a:37:fd:12:78:1c:6d:6c:09:9b:ef:
         0d:c4:4a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:20:19 2026 by rpki-client