Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
File:                     egbjCszbF6JVRzu2wiTx_BVFjos.mft (raw, json)
Hash identifier:          0lA9r9prhFgXxgprz4kTeQP8HmdUuGVO1MOHZ+74cQU=
Subject key identifier:   59:1A:C9:12:6A:7C:CF:63:2A:BD:22:08:58:46:39:5B:10:BB:06:64
Authority key identifier: 7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
Certificate issuer:       /CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
Certificate serial:       01A1238AC084F0231C795AF5DD04369F6AC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
Manifest number:          15B0
Signing time:             Sat 10 Oct 2026 02:00:58 +0000
Manifest this update:     Sat 10 Oct 2026 02:00:58 +0000
Manifest next update:     Sun 11 Oct 2026 02:00:58 +0000
Files and hashes:         1: 9b2UfpLnOIg6wXjfE2QTm6ttJNo.roa (hash: 12XtUm4bHDNcF8dyo1Lq9YsB0tLtgpBaDpNiSMD4cTU=)
                          2: egbjCszbF6JVRzu2wiTx_BVFjos.crl (hash: JPmKhrdpfWIXyhdJ+UIatLRYBmpEb3shOo1tCnLA4b4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:8a:c0:84:f0:23:1c:79:5a:f5:dd:04:36:9f:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
        Validity
            Not Before: Oct 10 02:00:58 2026 GMT
            Not After : Oct 11 02:00:58 2026 GMT
        Subject: CN=591ac9126a7ccf632abd22085846395b10bb0664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:01:81:7f:02:68:08:c1:7b:6a:68:02:06:
                    0e:39:43:d1:62:a7:ff:85:20:91:61:ac:71:56:6c:
                    03:f1:72:8f:05:81:60:00:a7:8c:40:0c:6c:08:13:
                    ca:e9:c6:87:ce:63:68:ef:b6:60:a7:3f:b9:c8:38:
                    34:09:9c:05:64:af:10:fb:3c:5d:21:82:dd:b2:d6:
                    2b:98:70:2c:80:b5:28:f2:7d:7e:67:99:3f:9d:fb:
                    f5:46:e3:b3:72:c8:a9:6c:34:cd:fc:bc:76:74:fa:
                    15:ea:fd:a5:c3:cf:95:31:83:ca:b5:b7:76:8e:84:
                    6b:0d:96:60:06:93:0d:e9:76:5c:16:2d:6e:ee:a0:
                    36:27:53:f3:cf:3f:8e:88:80:b5:d5:d9:5a:00:1e:
                    ac:8d:79:ba:be:5a:70:ca:fa:8a:ba:d6:62:32:13:
                    b3:5a:6d:79:fe:a4:42:4c:d6:75:c4:d4:6f:1a:68:
                    8f:cc:a3:cc:f0:f9:65:15:14:41:bd:3c:d3:c1:be:
                    2d:50:5a:54:61:47:a3:04:a3:3b:80:81:a4:f5:54:
                    8f:5e:2d:7c:2e:34:4d:22:72:f8:ca:17:f1:ea:eb:
                    97:43:d0:df:25:e6:44:b2:1d:3f:43:4a:3b:34:1d:
                    b1:8b:f5:c8:fe:4c:9e:0e:25:ef:76:dc:1b:65:db:
                    0b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1A:C9:12:6A:7C:CF:63:2A:BD:22:08:58:46:39:5B:10:BB:06:64
            X509v3 Authority Key Identifier:
                keyid:7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:41:2b:e2:2d:f5:d8:c1:9f:42:19:34:28:69:c6:ed:5d:74:
         64:f2:45:1e:34:ec:8a:8e:cb:95:0b:e4:b8:1c:a1:79:19:30:
         0f:ca:d2:af:3f:87:b9:ef:af:79:72:ce:25:ff:7d:04:16:d2:
         62:5e:83:d8:48:87:a3:f5:c4:1e:ea:e1:44:da:00:da:83:88:
         02:45:14:d3:9c:15:ff:d8:30:dc:c4:26:87:34:08:75:1e:ee:
         ac:bc:a8:d2:1c:7b:0c:6b:fb:bc:0b:95:f7:24:bf:a0:8d:db:
         ae:6e:4f:65:80:4c:d9:6e:fa:ec:29:77:fe:37:ff:06:d8:ce:
         fb:f5:8b:ec:57:15:bb:ad:06:5d:b0:2b:34:b6:ae:3c:66:2c:
         f4:4a:1c:97:6f:84:28:b1:a5:5c:0d:87:79:bf:d8:ac:b2:a5:
         91:8c:43:3e:a7:aa:93:72:89:27:18:c5:e2:68:c2:5b:df:fa:
         b5:48:d3:37:72:e5:87:21:80:d6:61:7e:d8:56:74:7c:51:1c:
         cc:da:11:dd:4d:e0:1c:17:ef:ab:45:0e:ec:4e:a8:16:fa:69:
         fe:1a:f8:6e:ab:c7:58:6b:9c:71:a5:2f:b8:07:77:6f:b1:aa:
         4c:20:92:5a:57:ec:3f:d9:9b:a4:b4:79:bf:8e:7a:3f:f5:c8:
         d6:d6:56:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:38:51 2026 by rpki-client