Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft
File:                     EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft (raw, json)
Hash identifier:          9TTo5ymh26pgZOqFTYEm9iOSYcj3yFFZEOBgvw2kjqU=
Subject key identifier:   DE:A0:69:B2:F7:FB:AC:E7:2C:66:87:1A:68:98:AF:43:B4:92:3F:AC
Authority key identifier: 11:4C:56:D5:95:DE:33:CB:87:51:73:9D:BD:D9:B4:5E:DB:2E:FF:0C
Certificate issuer:       /CN=114c56d595de33cb8751739dbdd9b45edb2eff0c
Certificate serial:       01A13E25C58AE3309F187DC2085110F2BF23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft
Manifest number:          11D7
Signing time:             Thu 15 Oct 2026 06:00:25 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:25 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:25 +0000
Files and hashes:         1: 9TG6jiqZVWNpx9zYkAPf4kzU-7w.roa (hash: UPvJJD4WPPdIrkPpjQB2axNpGKInNF9uAY3pA8FvcF4=)
                          2: EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.crl (hash: EqEtdRC5FTrPIqXIocRed70lF1WURjl5Cw5BAhoSyy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:25:c5:8a:e3:30:9f:18:7d:c2:08:51:10:f2:bf:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114c56d595de33cb8751739dbdd9b45edb2eff0c
        Validity
            Not Before: Oct 15 06:00:25 2026 GMT
            Not After : Oct 16 06:00:25 2026 GMT
        Subject: CN=dea069b2f7fbace72c66871a6898af43b4923fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:76:d4:a2:e9:71:37:19:3b:93:0a:41:a0:
                    c6:fd:87:26:55:8b:31:1c:23:7d:92:7e:2c:07:0e:
                    60:64:94:89:d6:45:14:81:18:32:82:c2:52:b6:81:
                    3e:10:a8:e6:8f:1e:bd:9f:98:e5:ba:cd:5a:91:00:
                    50:f2:52:8f:e5:d7:4d:b0:a2:94:69:41:ce:95:4f:
                    55:50:45:ec:be:ce:c7:87:8e:d0:7d:0c:0d:19:c4:
                    27:bc:8d:ab:53:a0:55:7b:63:6d:91:7e:50:61:a7:
                    fd:47:5b:23:18:d5:a6:45:c4:46:cb:eb:c1:3d:aa:
                    3e:57:d8:60:e7:1c:9b:6c:85:6d:3a:26:f8:21:eb:
                    08:a2:e0:31:d9:63:f0:d9:ab:c5:d4:84:77:fc:4d:
                    0a:63:cb:50:ba:cb:9d:99:13:24:62:d2:49:ba:b2:
                    99:bf:f8:6b:9b:be:8b:35:ba:43:2e:11:98:35:a3:
                    5a:50:48:40:40:47:c3:e1:b4:d0:92:f5:9a:a1:e0:
                    18:6b:16:d1:05:ba:68:43:4a:ec:97:67:a2:d8:32:
                    0c:35:51:86:a7:e4:d5:49:8d:7b:c1:78:86:c3:b2:
                    b5:a4:47:fa:a4:cc:5c:fb:df:8e:e8:14:73:1e:67:
                    59:6d:7a:61:c6:5a:97:3c:e6:9e:43:a5:cb:29:88:
                    a4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A0:69:B2:F7:FB:AC:E7:2C:66:87:1A:68:98:AF:43:B4:92:3F:AC
            X509v3 Authority Key Identifier:
                keyid:11:4C:56:D5:95:DE:33:CB:87:51:73:9D:BD:D9:B4:5E:DB:2E:FF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:63:2c:4f:a4:9d:a3:69:24:a0:d6:9a:d3:2b:bd:ca:26:c1:
         db:a5:b9:a2:ad:9c:d2:56:79:b8:e5:d8:da:7b:13:b1:02:97:
         c2:87:24:de:66:01:54:c8:7e:64:75:c0:a2:51:b1:92:c8:6e:
         0f:4a:34:21:13:a2:22:a8:d1:2e:15:cf:89:d6:6a:14:8f:aa:
         22:30:4d:de:d7:5f:0a:c8:e3:f3:57:5a:68:fd:88:96:77:a6:
         bd:95:e7:bd:cd:d0:be:d2:37:c9:08:49:83:17:8e:ab:6c:da:
         c0:48:8f:13:b2:d4:ec:3b:9c:09:17:a2:df:ae:31:64:8b:80:
         f5:7d:25:be:36:92:cb:89:17:ef:53:dd:e2:4e:45:07:32:ab:
         bc:50:14:9c:17:dd:8d:84:52:eb:44:86:91:03:df:9c:41:13:
         01:69:b6:0e:4c:50:47:91:3d:d6:4a:53:16:27:2a:4f:94:9a:
         10:ef:b4:8e:5b:1b:a3:0b:c6:87:af:38:d1:7b:8d:af:1e:a9:
         f1:08:48:e2:b9:e4:3e:b2:1e:1f:cf:1f:bc:25:af:98:f4:99:
         44:1f:21:86:7c:0b:08:a7:bc:5d:1c:2d:3a:3f:50:69:0f:b6:
         bb:be:b1:37:8c:d2:b5:d4:a7:50:5a:e9:b8:05:fd:15:a1:af:
         41:75:b4:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+JcWK4zCfGH3CCFEQ8r8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNGM1NmQ1OTVkZTMzY2I4NzUxNzM5ZGJkZDliNDVlZGIy
ZWZmMGMwHhcNMjYxMDE1MDYwMDI1WhcNMjYxMDE2MDYwMDI1WjAzMTEwLwYDVQQD
EyhkZWEwNjliMmY3ZmJhY2U3MmM2Njg3MWE2ODk4YWY0M2I0OTIzZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul921KLpcTcZO5MKQaDG/YcmVYsx
HCN9kn4sBw5gZJSJ1kUUgRgygsJStoE+EKjmjx69n5jlus1akQBQ8lKP5ddNsKKU
aUHOlU9VUEXsvs7Hh47QfQwNGcQnvI2rU6BVe2NtkX5QYaf9R1sjGNWmRcRGy+vB
Pao+V9hg5xybbIVtOib4IesIouAx2WPw2avF1IR3/E0KY8tQusudmRMkYtJJurKZ
v/hrm76LNbpDLhGYNaNaUEhAQEfD4bTQkvWaoeAYaxbRBbpoQ0rsl2ei2DIMNVGG
p+TVSY17wXiGw7K1pEf6pMxc+9+O6BRzHmdZbXphxlqXPOaeQ6XLKYikKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6gabL3+6znLGaHGmiYr0O0kj+sMB8GA1UdIwQY
MBaAFBFMVtWV3jPLh1Fznb3ZtF7bLv8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVV4VzFaWGVNOHVIVVhPZHZkbTBYdHN1X3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8wZjA4MmMtYjE4Zi00MWM1LTlmZDQt
MzAxMTA2OGVlYjY5LzEvRVV4VzFaWGVNOHVIVVhPZHZkbTBYdHN1X3d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8wZjA4MmMtYjE4Zi00MWM1LTlmZDQtMzAxMTA2OGVlYjY5
LzEvRVV4VzFaWGVNOHVIVVhPZHZkbTBYdHN1X3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmMsT6Sd
o2kkoNaa0yu9yibB26W5oq2c0lZ5uOXY2nsTsQKXwock3mYBVMh+ZHXAolGxkshu
D0o0IROiIqjRLhXPidZqFI+qIjBN3tdfCsjj81daaP2IlnemvZXnvc3QvtI3yQhJ
gxeOq2zawEiPE7LU7DucCRei364xZIuA9X0lvjaSy4kX71Pd4k5FBzKrvFAUnBfd
jYRS60SGkQPfnEETAWm2DkxQR5E91kpTFicqT5SaEO+0jlsbowvGh6840XuNrx6p
8QhI4rnkPrIeH88fvCWvmPSZRB8hhnwLCKe8XRwtOj9QaQ+2u76xN4zStdSnUFrp
uAX9FaGvQXW0OQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:30 2026 by rpki-client