Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
File:                     eGCL8SwARclj5JAZWkWLzeKl7eA.mft (raw, json)
Hash identifier:          JOLQ2Agdx2TSqRSxsmSB2A2+U2cEwT2Sm0IyeK/Aebw=
Subject key identifier:   BF:C5:4A:75:EA:B8:5E:38:19:2B:89:69:F6:04:DB:B6:9E:3C:1B:40
Authority key identifier: 78:60:8B:F1:2C:00:45:C9:63:E4:90:19:5A:45:8B:CD:E2:A5:ED:E0
Certificate issuer:       /CN=78608bf12c0045c963e490195a458bcde2a5ede0
Certificate serial:       01A1833E92754A4435983DBD110BE8E3EBCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
Manifest number:          02A2
Signing time:             Wed 28 Oct 2026 16:01:18 +0000
Manifest this update:     Wed 28 Oct 2026 16:01:18 +0000
Manifest next update:     Thu 29 Oct 2026 16:01:18 +0000
Files and hashes:         1: eGCL8SwARclj5JAZWkWLzeKl7eA.crl (hash: yhMNT1adahLtr7mMF3RroB3LsoPQoU9YOpdawyfSHXM=)
                          2: p1cZ4lTIkN7h1Vk_nxgPIsEtqYc.asa (hash: mepnLt+8zOfJCBxRiQ+xvHsTE4OxwHdGEhUmPD5Z3p8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 16:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:83:3e:92:75:4a:44:35:98:3d:bd:11:0b:e8:e3:eb:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78608bf12c0045c963e490195a458bcde2a5ede0
        Validity
            Not Before: Oct 28 16:01:18 2026 GMT
            Not After : Oct 29 16:01:18 2026 GMT
        Subject: CN=bfc54a75eab85e38192b8969f604dbb69e3c1b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e0:49:38:9a:6e:43:d8:43:3c:69:b6:90:11:
                    9f:6b:d0:b9:f7:10:21:28:07:0a:15:72:a2:49:d3:
                    cf:05:b5:6c:4a:b7:01:46:92:0f:69:ff:9f:3d:a2:
                    89:80:ae:3f:19:c7:ec:fe:d5:9e:69:b8:8b:d5:df:
                    82:ad:71:0b:60:03:e2:02:4d:3a:6c:b3:6d:e8:08:
                    26:cc:e5:14:12:2f:c4:84:c7:66:22:b6:c9:76:03:
                    83:60:26:47:87:52:21:75:db:ac:93:0b:92:fd:c8:
                    13:9d:d4:4e:76:46:21:ad:c1:2d:e3:ed:75:d7:8b:
                    39:b7:cc:bf:2d:f3:2a:10:fc:ae:e4:df:da:8f:75:
                    e4:03:79:b7:1e:2f:85:d4:a9:48:38:b5:b5:ec:10:
                    5d:c7:cc:3e:98:df:ef:dd:51:f0:50:bb:b8:f8:fa:
                    6a:7f:c5:6b:43:d5:84:c4:ba:fb:22:ba:43:68:c7:
                    f7:24:8d:a1:74:90:f7:80:46:4e:1a:ee:73:2b:aa:
                    5e:50:28:ec:46:58:53:07:97:bf:12:fe:d5:7f:f2:
                    eb:00:8a:05:a1:7f:39:1a:95:f5:68:ee:28:57:6b:
                    6f:4a:70:40:bd:92:33:2e:3a:54:6b:a5:e3:11:5b:
                    7b:af:84:fa:ce:c8:a2:ff:f4:13:fe:67:1a:53:8e:
                    bb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C5:4A:75:EA:B8:5E:38:19:2B:89:69:F6:04:DB:B6:9E:3C:1B:40
            X509v3 Authority Key Identifier:
                keyid:78:60:8B:F1:2C:00:45:C9:63:E4:90:19:5A:45:8B:CD:E2:A5:ED:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:06:e0:74:29:61:b0:e0:66:11:c0:a4:6b:57:c1:d7:e9:f7:
         84:41:0e:f1:9f:2b:7b:a1:12:6e:0e:60:f3:1a:76:16:39:30:
         b7:53:09:39:0f:79:3f:4a:4c:19:a6:cb:e7:c5:21:93:c1:0e:
         8f:b8:ba:82:b0:21:aa:32:bd:6a:40:44:d6:c8:e1:23:a8:4a:
         45:a8:e7:cb:89:31:24:e0:28:ef:2f:1b:fc:0f:cc:94:62:98:
         08:28:87:c9:5a:bb:a0:b1:7d:9b:dc:c6:42:74:c7:c9:2a:9f:
         d8:9f:c8:74:87:ff:9f:bb:60:a2:e0:c9:75:e7:4b:79:03:98:
         eb:e3:13:cd:34:e2:9e:ee:42:84:5c:41:8b:b5:66:8b:2a:fd:
         33:2e:f7:89:16:43:28:1e:b0:ef:6f:e9:31:0f:e2:59:3f:b8:
         03:5d:a4:2c:be:2f:32:1c:af:85:3d:27:33:8a:c3:e2:21:2b:
         ba:cd:fc:41:7e:71:bb:81:a0:2b:fd:44:0b:1c:c9:e7:97:c2:
         4e:a3:8d:82:d7:60:83:4b:2a:96:92:2b:af:8d:d3:d0:54:7e:
         96:ed:13:6a:97:ca:ca:97:d2:ad:ec:c6:47:f9:e1:18:b5:65:
         16:ac:27:ef:67:f2:e2:a9:28:54:c2:5a:7f:73:60:fc:e0:a3:
         b6:99:dc:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDPpJ1SkQ1mD29EQvo4+vKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NjA4YmYxMmMwMDQ1Yzk2M2U0OTAxOTVhNDU4YmNkZTJh
NWVkZTAwHhcNMjYxMDI4MTYwMTE4WhcNMjYxMDI5MTYwMTE4WjAzMTEwLwYDVQQD
EyhiZmM1NGE3NWVhYjg1ZTM4MTkyYjg5NjlmNjA0ZGJiNjllM2MxYjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OBJOJpuQ9hDPGm2kBGfa9C59xAh
KAcKFXKiSdPPBbVsSrcBRpIPaf+fPaKJgK4/Gcfs/tWeabiL1d+CrXELYAPiAk06
bLNt6AgmzOUUEi/EhMdmIrbJdgODYCZHh1IhdduskwuS/cgTndROdkYhrcEt4+11
14s5t8y/LfMqEPyu5N/aj3XkA3m3Hi+F1KlIOLW17BBdx8w+mN/v3VHwULu4+Ppq
f8VrQ9WExLr7IrpDaMf3JI2hdJD3gEZOGu5zK6peUCjsRlhTB5e/Ev7Vf/LrAIoF
oX85GpX1aO4oV2tvSnBAvZIzLjpUa6XjEVt7r4T6zsii//QT/mcaU467OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/FSnXquF44GSuJafYE27aePBtAMB8GA1UdIwQY
MBaAFHhgi/EsAEXJY+SQGVpFi83ipe3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUdDTDhTd0FSY2xqNUpBWldrV0x6ZUtsN2VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9iOWRjMGQtNzA1Ny00NjU2LTgyMjgt
ODc0YWFjZTQ2MjdmLzEvZUdDTDhTd0FSY2xqNUpBWldrV0x6ZUtsN2VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9iOWRjMGQtNzA1Ny00NjU2LTgyMjgtODc0YWFjZTQ2Mjdm
LzEvZUdDTDhTd0FSY2xqNUpBWldrV0x6ZUtsN2VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAbgdClh
sOBmEcCka1fB1+n3hEEO8Z8re6ESbg5g8xp2Fjkwt1MJOQ95P0pMGabL58Uhk8EO
j7i6grAhqjK9akBE1sjhI6hKRajny4kxJOAo7y8b/A/MlGKYCCiHyVq7oLF9m9zG
QnTHySqf2J/IdIf/n7tgouDJdedLeQOY6+MTzTTinu5ChFxBi7Vmiyr9My73iRZD
KB6w72/pMQ/iWT+4A12kLL4vMhyvhT0nM4rD4iErus38QX5xu4GgK/1ECxzJ55fC
TqONgtdgg0sqlpIrr43T0FR+lu0TapfKypfSrezGR/nhGLVlFqwn72fy4qkoVMJa
f3Ng/OCjtpncWQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 01:51:00 2026 by rpki-client