Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
File:                     eIW8vdwL57G92jasnwzsQn8Tey4.mft (raw, json)
Hash identifier:          CyFrvdUlPGJ+dJ4+K4G2+0IJSBVBZzM3Xrak5k+6jWs=
Subject key identifier:   E9:B0:F9:B3:0A:85:BD:E0:63:75:75:56:A4:4C:8A:D0:F6:F8:E6:57
Authority key identifier: 78:85:BC:BD:DC:0B:E7:B1:BD:DA:36:AC:9F:0C:EC:42:7F:13:7B:2E
Certificate issuer:       /CN=7885bcbddc0be7b1bdda36ac9f0cec427f137b2e
Certificate serial:       01A10059F44536B9A8E47A60CFC5EAF0827D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
Manifest number:          02A9
Signing time:             Sat 03 Oct 2026 06:00:57 +0000
Manifest this update:     Sat 03 Oct 2026 06:00:57 +0000
Manifest next update:     Sun 04 Oct 2026 06:00:57 +0000
Files and hashes:         1: eIW8vdwL57G92jasnwzsQn8Tey4.crl (hash: 0dXTabUn7gfE62dUbfcZKb+tbFWJFev3c4/xdu5QHsA=)
                          2: mG4EijAvnONRj78ap4took9k5k0.asa (hash: LCkjOsZJgCsTlelMgbV8nr5RF7I7nsemSo0VuD8o6KQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:59:f4:45:36:b9:a8:e4:7a:60:cf:c5:ea:f0:82:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7885bcbddc0be7b1bdda36ac9f0cec427f137b2e
        Validity
            Not Before: Oct  3 06:00:57 2026 GMT
            Not After : Oct  4 06:00:57 2026 GMT
        Subject: CN=e9b0f9b30a85bde063757556a44c8ad0f6f8e657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:66:c8:1c:b4:c5:43:71:3e:a2:5c:55:2b:42:
                    c9:ac:04:06:f1:e7:75:53:26:84:25:23:00:a8:61:
                    87:f3:79:08:24:37:57:bf:fa:15:a6:44:09:4a:71:
                    2a:af:31:32:90:c4:38:52:8d:df:7e:8a:19:fc:79:
                    64:51:af:57:75:48:25:db:db:8f:56:0f:d4:ed:48:
                    ff:1e:8e:5f:a4:93:34:2b:38:78:18:b1:48:3e:3a:
                    1e:24:7a:5e:d0:b6:6a:c0:f0:c7:74:be:bf:dd:78:
                    fa:93:ba:ac:12:59:96:b0:45:26:88:e3:11:91:08:
                    32:26:c0:7f:36:1a:9b:e2:b0:42:71:09:64:9a:0e:
                    93:aa:cb:4e:94:ca:a4:84:f0:b1:8a:fc:a4:00:06:
                    44:d5:0a:d0:8f:dc:20:51:b6:85:8c:8c:2c:25:48:
                    62:1e:be:8b:1c:55:a4:46:00:34:a3:0b:04:82:e3:
                    f5:1a:bf:55:f5:f0:ee:b9:66:f3:d5:b8:44:5f:b2:
                    1a:77:07:4d:22:86:6f:e5:60:92:9a:6d:46:0c:7b:
                    b7:28:84:3a:fb:72:8d:d7:14:da:c7:2e:7f:5a:1c:
                    2f:af:5c:0b:4e:a4:65:8f:00:bc:51:8b:00:af:30:
                    a1:61:9f:76:94:00:f2:ed:63:da:9e:10:19:b3:dc:
                    4f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B0:F9:B3:0A:85:BD:E0:63:75:75:56:A4:4C:8A:D0:F6:F8:E6:57
            X509v3 Authority Key Identifier:
                keyid:78:85:BC:BD:DC:0B:E7:B1:BD:DA:36:AC:9F:0C:EC:42:7F:13:7B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:73:ba:b2:b5:8b:1f:77:bd:e5:c8:20:f6:dd:4a:af:d2:e6:
         67:12:33:f9:b2:6b:ab:bd:77:ec:b7:4e:91:b9:52:e1:cc:c3:
         8f:06:58:b0:0c:41:d3:e9:1e:27:ea:f4:b2:3b:aa:90:65:60:
         b8:29:45:a2:2b:fb:ee:e1:11:a2:1e:84:d3:9b:1d:0f:95:62:
         37:7c:33:32:0a:ac:d5:48:c6:d3:8a:e5:e3:1c:3c:22:10:a3:
         41:da:b1:26:bd:67:bf:61:c2:06:85:7f:ed:59:17:cd:8a:cc:
         9f:77:3c:6a:f6:a0:65:32:be:53:06:2d:cc:42:3f:5d:78:35:
         41:f3:6a:1d:80:e5:78:41:e6:4b:86:fc:85:63:01:c6:a7:2e:
         5c:90:1d:bb:41:cd:d1:6b:da:66:58:cd:1b:d1:a0:e0:fc:65:
         a3:9e:dd:ca:d1:fa:d8:4e:c1:d4:82:b5:51:bf:f7:5e:ac:c1:
         82:fb:a8:6a:72:f4:5e:7a:15:d8:9b:cf:2e:63:fa:03:2f:1b:
         43:67:cb:f2:79:8c:d0:ad:0b:48:5d:b2:0e:a0:00:18:c3:f8:
         45:40:b1:db:b6:c9:84:b9:a2:40:1d:24:5d:a4:7a:2d:a0:d2:
         b5:e4:b4:a2:83:2d:76:9a:5b:53:b5:fd:87:92:89:88:37:aa:
         ef:cc:6e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:09:50 2026 by rpki-client