Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
File:                     eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft (raw, json)
Hash identifier:          BqQfaExs3vcOxRqolP/Qm3cRokldmqM1RPXgkN2YRsE=
Subject key identifier:   83:75:F8:7B:58:70:42:94:89:1E:E3:F7:02:35:A7:C4:40:44:21:4F
Authority key identifier: 79:E8:D0:49:0D:30:BF:94:4E:D4:D6:36:84:7C:58:D4:31:A3:8C:BC
Certificate issuer:       /CN=79e8d0490d30bf944ed4d636847c58d431a38cbc
Certificate serial:       01A178831A1A63A2C2E41B5B69F8F8AB5B06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
Manifest number:          1947
Signing time:             Mon 26 Oct 2026 14:00:20 +0000
Manifest this update:     Mon 26 Oct 2026 14:00:20 +0000
Manifest next update:     Tue 27 Oct 2026 14:00:20 +0000
Files and hashes:         1: eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl (hash: 7bUGhqdzYRJ6xY6XyiB0diJDcaWAvDCE9WXxHwSdlr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:83:1a:1a:63:a2:c2:e4:1b:5b:69:f8:f8:ab:5b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e8d0490d30bf944ed4d636847c58d431a38cbc
        Validity
            Not Before: Oct 26 14:00:20 2026 GMT
            Not After : Oct 27 14:00:20 2026 GMT
        Subject: CN=8375f87b58704294891ee3f70235a7c44044214f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2c:60:fb:2f:6e:cb:f9:0a:66:f6:5b:9c:d5:
                    4c:dc:39:fb:72:f0:49:8d:85:8c:65:61:83:f1:59:
                    f6:2f:75:44:7a:e1:46:84:3f:d2:90:8c:81:8b:68:
                    03:f6:e8:f9:a9:47:e7:46:8c:33:de:a6:e8:73:39:
                    4d:91:b1:81:e3:6c:d9:28:b2:3d:9b:97:e6:6d:a9:
                    74:87:b1:27:db:3c:d4:38:6c:e7:84:5a:03:e6:b7:
                    45:2d:24:1e:cf:54:e6:75:60:e0:ac:e3:5b:cb:82:
                    42:3c:7b:1c:66:bf:f7:75:4f:27:dd:ff:64:f2:7e:
                    04:03:0a:71:d5:0e:a3:06:5d:50:d7:9e:0d:ef:8b:
                    0b:37:a2:22:43:de:79:e8:f8:8a:05:ec:66:36:fa:
                    ae:93:ad:77:c7:a4:66:8b:02:2c:e5:a5:bf:9e:e1:
                    51:07:77:1b:07:e5:c1:1b:f3:66:4e:d6:aa:8a:1b:
                    92:5d:d2:a1:95:d2:b0:1c:32:fb:04:06:4d:9f:84:
                    a1:98:d9:e8:66:ed:5b:9b:45:af:56:9b:37:66:6d:
                    c5:88:be:b0:3f:6e:f0:a1:ad:e7:ac:e4:71:6b:ff:
                    4d:bf:52:5f:90:ce:20:46:b8:ae:38:fc:0f:84:d3:
                    14:b0:c6:2e:1b:7b:4c:63:5b:cd:e6:b9:d0:d7:12:
                    63:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:75:F8:7B:58:70:42:94:89:1E:E3:F7:02:35:A7:C4:40:44:21:4F
            X509v3 Authority Key Identifier:
                keyid:79:E8:D0:49:0D:30:BF:94:4E:D4:D6:36:84:7C:58:D4:31:A3:8C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eejQSQ0wv5RO1NY2hHxY1DGjjLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2941e7-6b0e-4e88-b7d8-4bd0c27d3aea/1/eejQSQ0wv5RO1NY2hHxY1DGjjLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:07:7e:4a:cc:cb:3d:3e:34:1c:b0:22:3c:8a:b0:0b:62:ba:
         e0:17:0f:5a:54:f0:64:35:e6:07:59:4b:eb:97:29:50:e1:37:
         a4:4b:14:a3:64:05:9c:12:61:77:2e:46:fa:a5:42:9f:d3:71:
         14:b6:b7:32:bb:74:36:c6:37:9b:da:a6:42:c8:d3:3c:f0:ea:
         c4:dc:92:6e:73:91:73:00:81:c4:82:9c:bf:ba:77:1c:17:da:
         c2:7e:8a:a3:77:78:ec:53:67:15:cd:6d:f8:37:5e:50:98:72:
         5e:d4:c1:56:17:3f:4d:7a:af:2b:01:c1:a8:4d:82:b8:e6:ae:
         29:42:7d:7d:bd:88:05:41:f1:4a:00:c9:81:5b:59:99:1a:61:
         a2:52:b2:7a:b6:80:40:af:ba:c1:d5:3c:50:a4:af:27:9a:e9:
         87:e1:c1:46:3b:40:f0:45:0a:c5:0d:04:ed:38:dd:cf:72:1d:
         e7:9e:5c:75:01:40:35:fa:90:bc:79:84:16:4f:47:25:ed:24:
         41:e2:b1:44:17:a2:cc:b7:c1:c1:1d:4d:87:90:f0:c7:89:48:
         f6:35:4b:d3:aa:39:7a:20:88:aa:e8:d0:14:cd:64:61:66:6a:
         8a:dd:66:ba:64:e6:92:16:69:7b:41:6b:1a:a4:22:a4:fb:af:
         87:d3:6c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:56:51 2026 by rpki-client