Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
File:                     EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json)
Hash identifier:          eAl7vt77ucM4M/NI751ptycE3Z6A9HP9SLzHMrX1FRE=
Subject key identifier:   2E:04:AD:F5:F8:80:CE:C3:01:B8:83:3E:BA:F8:27:2C:CA:C9:3D:1D
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Certificate issuer:       /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial:       01A178B9EA80BD58E6CADB1E56685A2D3576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
Manifest number:          1BF8
Signing time:             Mon 26 Oct 2026 15:00:12 +0000
Manifest this update:     Mon 26 Oct 2026 15:00:12 +0000
Manifest next update:     Tue 27 Oct 2026 15:00:12 +0000
Files and hashes:         1: BgLIV9uICnmyyWhB50nr5Hx9brY.roa (hash: o61e3ghKRM139TJWeusWYuQb0EEuVVfyccorW0mfd4k=)
                          2: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: fRE+ppJD1S4Si3hrcQPh3kFP9dkTLqss0H1tfcPTciw=)
                          3: ExQa4_rJNaEHp9KaigvNnKDL6eU.roa (hash: 53Hf9NPeMQ6qfBPkcUTSGvezuAg+cEKzzFuOc90DUbQ=)
                          4: Gk-3Xu_izSB_f9RVT4Mx95fzdwQ.roa (hash: qSiZYwUebITVF7msT4gMb3T5zA9NBTdfmsfNp4wHc7k=)
                          5: LZKXm-bLhsbXiuFmWld_mUy97PM.roa (hash: rvRDsRBYcjc9lrQ+x4qRkImf0hKdqG8bKXCQWaD0Yuw=)
                          6: N_jMHQCV1JEhPPm_oX6qQTIggnM.roa (hash: b6P3PLFt3EOLGlIMTrF2szecfsvkbkLCpjvX/hBSTvE=)
                          7: euBXC6rwjNF3N0PD1PpJMyMwSCI.roa (hash: 0lWahyGCdWHgLVF3U4IuMMbV9OFbVd1ssMeGsLZit7k=)
                          8: iI-JIIREyrVCRNSoJRI3rD8eag0.roa (hash: zF9D3W/DKJlql6on+FQS1/CzfYptHarWetavG7c7Vrw=)
                          9: j3miBQqNH9MvtZNlx1-gjZqrqlE.roa (hash: smq4tHXaK2J5Z2RTwqeV0To7ZSM03HiBGbCe7Zo0HKc=)
                          10: ySs7SU4bjzILxeAanv2fHUaKWo4.roa (hash: vb17VAVAufTzdYM1PaHWAgbmbK4CVZyUxS9hbwz1Rb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:b9:ea:80:bd:58:e6:ca:db:1e:56:68:5a:2d:35:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
        Validity
            Not Before: Oct 26 15:00:12 2026 GMT
            Not After : Oct 27 15:00:12 2026 GMT
        Subject: CN=2e04adf5f880cec301b8833ebaf8272ccac93d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:25:fb:5b:55:ab:93:db:30:18:f6:9d:e5:
                    1a:07:49:6d:32:56:c6:6a:bf:46:27:3b:e5:97:71:
                    0f:97:5d:a0:47:03:d6:e2:d7:c6:3e:c2:d1:ce:80:
                    b9:9a:90:51:8d:e1:f6:34:75:90:2c:16:19:27:f6:
                    7f:80:ac:73:85:70:36:5b:92:66:b0:6e:7b:7d:96:
                    cf:e0:eb:8c:77:ee:ca:a5:74:7a:76:63:e0:b4:9d:
                    27:ec:07:9f:05:3b:38:9d:ba:04:22:ae:5d:d0:c7:
                    98:e6:a7:17:2e:c7:aa:0a:b1:f5:d8:88:1c:8d:bb:
                    d1:af:63:73:de:c2:5c:82:4f:3f:99:ad:fa:ae:80:
                    7e:d9:de:1e:fc:e6:8d:76:81:b5:f7:b9:10:77:20:
                    fd:cb:e4:ff:3d:db:51:2f:1c:d5:fd:20:2e:c2:73:
                    a3:29:b7:8a:59:5d:41:3b:3e:2e:be:52:f9:56:8c:
                    16:72:72:6b:cb:1d:72:c2:5b:dd:15:87:8c:e5:17:
                    ff:90:c2:26:1c:6e:6c:ed:ca:76:f8:ea:6b:ce:57:
                    64:9b:1a:6d:7d:09:0f:f0:a7:d1:3e:ec:63:3d:05:
                    22:f9:30:d3:5e:81:65:e6:54:69:87:48:af:d4:97:
                    8f:4f:61:d8:cf:51:a4:fa:41:83:48:8f:7f:92:f7:
                    77:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:04:AD:F5:F8:80:CE:C3:01:B8:83:3E:BA:F8:27:2C:CA:C9:3D:1D
            X509v3 Authority Key Identifier:
                keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d5:eb:f7:2c:0d:fb:25:1a:43:49:39:04:95:d9:76:88:c5:
         2c:16:91:eb:b5:d3:45:12:74:0f:09:a3:04:00:72:24:f9:c1:
         4c:a2:ce:05:d2:3c:a5:0a:8f:35:93:f3:1e:98:5e:d8:37:18:
         21:c9:4c:c5:9d:5e:9c:9d:91:63:a3:e5:cb:40:50:92:a7:f6:
         84:a5:32:f9:8b:f4:9b:b5:c0:f0:2b:7b:99:c0:35:2c:6b:a2:
         ad:f4:7d:4a:fc:df:93:ee:4f:d3:4d:67:22:56:3d:8d:b6:86:
         99:38:cc:35:39:cb:26:ac:c1:94:3d:0e:32:33:e8:5a:c9:9d:
         7e:41:82:6c:64:ee:7a:5e:81:f0:6c:09:9c:f2:77:5a:fa:b1:
         3b:e2:e5:fa:4c:8e:20:ef:ab:36:04:4a:c9:ba:25:9b:ea:0c:
         c0:2f:15:86:86:58:0c:f0:bc:20:27:b8:61:7c:c7:6a:1d:97:
         d5:8c:16:91:76:2c:ae:7f:61:4b:8b:ab:d2:98:ef:5e:3f:43:
         b3:93:67:63:78:8c:af:d7:c6:a7:a6:aa:07:54:42:10:47:cf:
         d3:e5:a1:ea:49:5e:13:56:d8:15:3f:a4:ca:e0:a2:9f:d2:6e:
         e7:ba:f3:ed:64:56:90:2c:24:8c:66:77:03:77:c3:94:13:56:
         5b:db:b9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:06:10 2026 by rpki-client