Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/24a689-595c-498b-a774-1333d9313201/1/sEGLTKBrJ88hRqnV34ozWsJv66Y.mft
File:                     sEGLTKBrJ88hRqnV34ozWsJv66Y.mft (raw, json)
Hash identifier:          9cN2f3AN0L5avB5568TOxuUa2aTa3Gzyez2eoXQXv4k=
Subject key identifier:   8A:3E:67:B0:35:AE:CF:E8:FE:43:E7:30:80:3A:64:9C:A4:83:A8:C5
Authority key identifier: B0:41:8B:4C:A0:6B:27:CF:21:46:A9:D5:DF:8A:33:5A:C2:6F:EB:A6
Certificate issuer:       /CN=b0418b4ca06b27cf2146a9d5df8a335ac26feba6
Certificate serial:       01A08C43AFABEC69B46CCBF8726786779193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sEGLTKBrJ88hRqnV34ozWsJv66Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/24a689-595c-498b-a774-1333d9313201/1/sEGLTKBrJ88hRqnV34ozWsJv66Y.mft
Manifest number:          0260
Signing time:             Thu 10 Sep 2026 17:00:41 +0000
Manifest this update:     Thu 10 Sep 2026 17:00:41 +0000
Manifest next update:     Fri 11 Sep 2026 17:00:41 +0000
Files and hashes:         1: 0piZVg6nYn1zr1D9tSdhmaFoiB0.roa (hash: 4/Aijc3U66ItVo2bUJk6n9moOAc6MXnBaHbZAgIrcwM=)
                          2: sEGLTKBrJ88hRqnV34ozWsJv66Y.crl (hash: ALN5QLpKuoWExac7t3j5oOewYz5SaqIEC79tp2vOgPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/24a689-595c-498b-a774-1333d9313201/1/sEGLTKBrJ88hRqnV34ozWsJv66Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/24a689-595c-498b-a774-1333d9313201/1/sEGLTKBrJ88hRqnV34ozWsJv66Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sEGLTKBrJ88hRqnV34ozWsJv66Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:43:af:ab:ec:69:b4:6c:cb:f8:72:67:86:77:91:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0418b4ca06b27cf2146a9d5df8a335ac26feba6
        Validity
            Not Before: Sep 10 17:00:41 2026 GMT
            Not After : Sep 11 17:00:41 2026 GMT
        Subject: CN=8a3e67b035aecfe8fe43e730803a649ca483a8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:47:0e:47:7e:43:76:53:99:64:fa:ae:80:
                    ac:58:29:3e:70:2a:21:2d:22:5b:d2:e2:07:f2:85:
                    c6:e1:cc:c9:af:b0:1a:f5:90:3b:4d:1e:38:84:9b:
                    40:0d:31:63:93:4b:a4:39:87:0e:7e:29:65:11:fc:
                    b4:4b:1f:2a:5d:d7:7b:96:e9:6c:81:cf:7f:a2:99:
                    47:79:a4:b4:b0:41:2c:da:c8:b0:58:18:7f:4c:ae:
                    92:2d:41:0c:e5:ff:c1:20:c5:6c:e1:f6:8a:be:d4:
                    bb:bd:64:01:60:78:08:a9:47:d5:b6:f5:0a:30:9c:
                    36:b6:6d:08:00:0f:a5:ba:52:47:9d:fe:fe:07:78:
                    79:3c:5e:03:b1:de:3f:30:b6:4a:3f:b5:45:6b:7b:
                    de:7c:a8:b3:26:25:b6:08:10:84:6d:d2:f5:93:8c:
                    21:f4:a1:6f:26:ff:e2:61:76:87:e0:26:b3:df:ec:
                    21:e0:e2:7e:61:c0:0c:a5:30:6c:60:b2:68:3c:24:
                    66:24:f2:84:0b:df:42:10:ad:7d:24:b3:a0:ee:5c:
                    ec:73:74:a9:c7:42:4f:3f:0c:fb:b8:30:cc:69:a3:
                    53:98:db:cc:44:f6:ea:15:a1:52:ca:38:f8:5e:59:
                    bd:fe:2a:e2:80:96:c7:64:20:8c:e7:41:c6:84:39:
                    2f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3E:67:B0:35:AE:CF:E8:FE:43:E7:30:80:3A:64:9C:A4:83:A8:C5
            X509v3 Authority Key Identifier:
                keyid:B0:41:8B:4C:A0:6B:27:CF:21:46:A9:D5:DF:8A:33:5A:C2:6F:EB:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEGLTKBrJ88hRqnV34ozWsJv66Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/24a689-595c-498b-a774-1333d9313201/1/sEGLTKBrJ88hRqnV34ozWsJv66Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/24a689-595c-498b-a774-1333d9313201/1/sEGLTKBrJ88hRqnV34ozWsJv66Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:56:03:f6:b1:5f:ac:c4:ad:53:17:a7:11:ac:d9:a0:5c:81:
         7a:e8:75:9c:97:f2:bf:12:fb:76:bf:f1:47:bc:61:43:14:e7:
         69:28:d6:f8:fa:91:cd:40:b2:83:91:28:d4:3d:c4:dd:75:8a:
         ab:7a:d0:37:5f:8a:0c:a8:11:ee:ee:36:86:67:0a:8f:1b:0c:
         ea:17:eb:1e:21:1f:61:db:19:e8:08:b9:3a:a4:c5:ae:c0:da:
         a9:fa:08:85:0b:cb:fd:b1:c2:36:18:24:76:92:98:d2:52:0e:
         49:1c:d0:fa:a1:7c:e3:ab:16:00:78:d4:6b:e5:ae:37:82:57:
         fa:2b:05:c4:3a:da:ec:60:15:e6:fc:fb:ca:e0:ec:e3:52:31:
         36:64:89:8b:2b:e1:e5:84:4b:ff:da:f3:06:04:ff:6a:ac:8b:
         0b:2c:d1:22:cf:12:53:3c:25:71:0c:e2:37:39:13:b9:14:87:
         77:af:b0:b9:4c:1d:72:49:e4:bb:b0:c5:18:02:e8:74:22:fb:
         16:a2:91:f5:34:28:be:c5:d7:f0:c8:60:d7:80:25:3c:2c:34:
         1f:a1:fd:63:e5:ee:01:86:9a:40:aa:f5:26:01:d4:f8:18:14:
         fc:4f:04:6c:ac:53:c5:c3:53:a1:d7:0e:98:e4:72:f6:57:af:
         0a:c3:88:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMQ6+r7Gm0bMv4cmeGd5GTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNDE4YjRjYTA2YjI3Y2YyMTQ2YTlkNWRmOGEzMzVhYzI2
ZmViYTYwHhcNMjYwOTEwMTcwMDQxWhcNMjYwOTExMTcwMDQxWjAzMTEwLwYDVQQD
Eyg4YTNlNjdiMDM1YWVjZmU4ZmU0M2U3MzA4MDNhNjQ5Y2E0ODNhOGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXZHDkd+Q3ZTmWT6roCsWCk+cCoh
LSJb0uIH8oXG4czJr7Aa9ZA7TR44hJtADTFjk0ukOYcOfillEfy0Sx8qXdd7luls
gc9/oplHeaS0sEEs2siwWBh/TK6SLUEM5f/BIMVs4faKvtS7vWQBYHgIqUfVtvUK
MJw2tm0IAA+lulJHnf7+B3h5PF4Dsd4/MLZKP7VFa3vefKizJiW2CBCEbdL1k4wh
9KFvJv/iYXaH4Caz3+wh4OJ+YcAMpTBsYLJoPCRmJPKEC99CEK19JLOg7lzsc3Sp
x0JPPwz7uDDMaaNTmNvMRPbqFaFSyjj4Xlm9/irigJbHZCCM50HGhDkvswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIo+Z7A1rs/o/kPnMIA6ZJykg6jFMB8GA1UdIwQY
MBaAFLBBi0ygayfPIUap1d+KM1rCb+umMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0VHTFRLQnJKODhoUnFuVjM0b3pXc0p2NjZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8yNGE2ODktNTk1Yy00OThiLWE3NzQt
MTMzM2Q5MzEzMjAxLzEvc0VHTFRLQnJKODhoUnFuVjM0b3pXc0p2NjZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8yNGE2ODktNTk1Yy00OThiLWE3NzQtMTMzM2Q5MzEzMjAx
LzEvc0VHTFRLQnJKODhoUnFuVjM0b3pXc0p2NjZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlYD9rFf
rMStUxenEazZoFyBeuh1nJfyvxL7dr/xR7xhQxTnaSjW+PqRzUCyg5Eo1D3E3XWK
q3rQN1+KDKgR7u42hmcKjxsM6hfrHiEfYdsZ6Ai5OqTFrsDaqfoIhQvL/bHCNhgk
dpKY0lIOSRzQ+qF846sWAHjUa+WuN4JX+isFxDra7GAV5vz7yuDs41IxNmSJiyvh
5YRL/9rzBgT/aqyLCyzRIs8SUzwlcQziNzkTuRSHd6+wuUwdcknku7DFGALodCL7
FqKR9TQovsXX8Mhg14AlPCw0H6H9Y+XuAYaaQKr1JgHU+BgU/E8EbKxTxcNTodcO
mORy9levCsOIjA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:40 2026 by rpki-client