Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
File:                     eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft (raw, json)
Hash identifier:          oXxm4zI1RHamoyuXZKZ4VxIGyR6GxdGPkmYuA7yoE88=
Subject key identifier:   4F:E5:C1:82:7E:68:DE:40:ED:F0:C6:95:F4:AD:AF:8B:D0:64:E7:70
Authority key identifier: 78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B
Certificate issuer:       /CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
Certificate serial:       01A180E2899AB8449D1C6F1F177025056F7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
Manifest number:          1433
Signing time:             Wed 28 Oct 2026 05:01:32 +0000
Manifest this update:     Wed 28 Oct 2026 05:01:32 +0000
Manifest next update:     Thu 29 Oct 2026 05:01:32 +0000
Files and hashes:         1: eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl (hash: 8ULNrwlpGU2MTH5l+N9qvM4Z9SnTY1Uo4OqQeqzmpwg=)
                          2: sWFx-vvZ74gp_0mPtisPAvDc8vQ.roa (hash: Edp7rh57lWgI8CoINvbBB1ZSrUO0DPkC2eFiuG6KreQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 05:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:e2:89:9a:b8:44:9d:1c:6f:1f:17:70:25:05:6f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
        Validity
            Not Before: Oct 28 05:01:32 2026 GMT
            Not After : Oct 29 05:01:32 2026 GMT
        Subject: CN=4fe5c1827e68de40edf0c695f4adaf8bd064e770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:5f:8b:ac:8e:7c:28:da:10:01:bb:eb:9d:
                    19:48:ea:bd:bc:93:72:18:4d:7b:27:56:1a:a6:cc:
                    63:b6:7a:80:ba:f2:39:cc:78:53:06:ec:5d:49:b3:
                    e6:d2:75:64:2a:aa:a9:83:b1:2d:69:ea:67:47:87:
                    1e:6e:2d:ce:54:e8:24:5d:57:f1:58:ed:5d:da:30:
                    a8:c1:51:c8:53:dc:c5:1a:b7:f1:ac:86:15:7b:12:
                    90:a0:5f:85:14:91:66:2b:6b:75:2d:3d:cf:ce:15:
                    53:fc:1d:45:af:70:97:03:fe:e8:f6:55:e9:49:4a:
                    af:85:f1:ca:e5:f3:53:96:3d:3f:22:fc:93:72:22:
                    3e:94:ef:b7:b9:a9:26:fd:da:5b:bd:a6:e4:af:e4:
                    71:de:43:53:02:58:6b:43:67:7f:07:4e:de:9d:36:
                    69:c9:1a:0e:cd:d1:05:09:11:ee:a4:e3:3f:91:80:
                    38:06:ef:9f:37:30:45:e7:79:ec:21:e6:5a:63:ee:
                    b3:00:7f:e0:7d:11:d1:e3:54:9d:4f:03:bc:6d:48:
                    6f:c3:0b:f4:7a:e2:ad:6d:13:02:2d:79:7a:ab:00:
                    86:fc:7e:0a:f7:bf:03:f2:ca:fd:b0:04:5a:68:da:
                    d9:a6:d2:e4:68:37:d9:95:ba:f0:02:53:e7:ff:48:
                    6d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E5:C1:82:7E:68:DE:40:ED:F0:C6:95:F4:AD:AF:8B:D0:64:E7:70
            X509v3 Authority Key Identifier:
                keyid:78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:6b:fe:bd:3b:66:2f:59:e0:74:af:93:f5:49:3e:1e:2b:f5:
         99:9b:a2:2c:f1:83:fb:d5:16:9a:f8:af:c3:f6:79:ab:12:80:
         a6:e6:36:fb:1b:d4:52:9e:b4:fd:7f:6f:0d:d6:a2:ed:93:f5:
         74:a6:63:46:30:fb:e8:0f:94:ae:ab:8c:7f:58:2d:fd:7b:40:
         c4:51:6e:76:97:2f:f8:01:e5:15:41:21:74:cc:ba:70:0e:c3:
         2e:c1:3e:2d:ef:a6:50:24:42:0c:c7:e9:a7:67:e1:a4:1f:3b:
         5a:51:97:1f:fd:eb:68:45:ad:7c:11:4c:7e:ba:32:4d:a2:97:
         ba:48:18:ba:dc:00:2e:10:ca:9c:f4:05:18:9b:de:eb:77:d6:
         67:83:3e:60:96:da:75:b8:03:e4:d5:a2:71:d7:2a:6b:40:f7:
         6a:82:a3:94:bd:b9:56:73:c2:bc:e3:1a:4b:f5:00:37:75:cd:
         9f:a4:47:03:90:ff:54:3c:61:6c:11:3a:99:7b:e1:3c:b9:9a:
         52:41:32:f9:4a:2a:8c:35:b5:63:7f:83:e4:d9:22:63:df:e7:
         dc:9e:64:77:4a:2d:74:63:95:91:6a:c8:2c:00:32:fa:c7:6f:
         59:08:e4:11:4e:99:ee:14:c9:4a:69:2e:dc:6a:a0:16:5d:1b:
         44:a7:42:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGA4omauESdHG8fF3AlBW98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZmY4N2UyNjMzYmIyMzI4Njc1NGVjYTExZDgzYTYzYjhj
M2RjMGIwHhcNMjYxMDI4MDUwMTMyWhcNMjYxMDI5MDUwMTMyWjAzMTEwLwYDVQQD
Eyg0ZmU1YzE4MjdlNjhkZTQwZWRmMGM2OTVmNGFkYWY4YmQwNjRlNzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxchfi6yOfCjaEAG7650ZSOq9vJNy
GE17J1YapsxjtnqAuvI5zHhTBuxdSbPm0nVkKqqpg7EtaepnR4cebi3OVOgkXVfx
WO1d2jCowVHIU9zFGrfxrIYVexKQoF+FFJFmK2t1LT3PzhVT/B1Fr3CXA/7o9lXp
SUqvhfHK5fNTlj0/IvyTciI+lO+3uakm/dpbvabkr+Rx3kNTAlhrQ2d/B07enTZp
yRoOzdEFCRHupOM/kYA4Bu+fNzBF53nsIeZaY+6zAH/gfRHR41SdTwO8bUhvwwv0
euKtbRMCLXl6qwCG/H4K978D8sr9sARaaNrZptLkaDfZlbrwAlPn/0htUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/lwYJ+aN5A7fDGlfStr4vQZOdwMB8GA1UdIwQY
MBaAFHj/h+JjO7IyhnVOyhHYOmO4w9wLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xMjkzZDEtZmM3Yi00YjA4LThjOWIt
M2JiYWM0ZjVkOTM1LzEvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8xMjkzZDEtZmM3Yi00YjA4LThjOWItM2JiYWM0ZjVkOTM1
LzEvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGv+vTtm
L1ngdK+T9Uk+Hiv1mZuiLPGD+9UWmvivw/Z5qxKApuY2+xvUUp60/X9vDdai7ZP1
dKZjRjD76A+UrquMf1gt/XtAxFFudpcv+AHlFUEhdMy6cA7DLsE+Le+mUCRCDMfp
p2fhpB87WlGXH/3raEWtfBFMfroyTaKXukgYutwALhDKnPQFGJve63fWZ4M+YJba
dbgD5NWicdcqa0D3aoKjlL25VnPCvOMaS/UAN3XNn6RHA5D/VDxhbBE6mXvhPLma
UkEy+UoqjDW1Y3+D5NkiY9/n3J5kd0otdGOVkWrILAAy+sdvWQjkEU6Z7hTJSmku
3GqgFl0bRKdCiQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:44:24 2026 by rpki-client