Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
File:                     eqhsgVbwgG3MzcItzE1hdbj6mJM.mft (raw, json)
Hash identifier:          S9j3Kky52p17sTGM28yzrSCOA9eiYAiwRjPu7SQgL9U=
Subject key identifier:   08:51:80:AD:43:AB:93:48:60:56:92:8D:84:EF:52:09:4F:4D:B4:6E
Authority key identifier: 7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93
Certificate issuer:       /CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
Certificate serial:       01A08BD66F429B0143C0EA29A7B03A5BAC45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
Manifest number:          16CE
Signing time:             Thu 10 Sep 2026 15:01:21 +0000
Manifest this update:     Thu 10 Sep 2026 15:01:21 +0000
Manifest next update:     Fri 11 Sep 2026 15:01:21 +0000
Files and hashes:         1: Oy65Flm_uwrvJdQB08a6SJ4kW8I.roa (hash: fu4fm6NabdEAcEXhd0h2UuWDUtPed2OsOBwT+zaFccI=)
                          2: eqhsgVbwgG3MzcItzE1hdbj6mJM.crl (hash: 3OWaM7/ksfvqm8GY3kkvnSejaWKMBpAsds29G9HQSnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d6:6f:42:9b:01:43:c0:ea:29:a7:b0:3a:5b:ac:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
        Validity
            Not Before: Sep 10 15:01:21 2026 GMT
            Not After : Sep 11 15:01:21 2026 GMT
        Subject: CN=085180ad43ab93486056928d84ef52094f4db46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b7:b5:93:dd:33:b8:4e:b2:20:7e:23:14:d2:
                    34:89:26:4f:da:ea:69:9b:95:34:68:08:b0:72:cf:
                    3f:27:1a:e5:31:39:f5:48:e7:2c:77:3b:f4:96:c0:
                    33:7a:e6:6d:a3:c1:85:c3:78:ce:43:b1:02:18:a2:
                    b7:9b:3b:13:e4:38:52:4a:3e:09:87:8d:1f:13:56:
                    10:22:25:9f:b7:c5:a4:d5:ea:9d:e0:b0:ae:59:f4:
                    a0:d7:bc:6a:ef:75:67:da:a9:ab:0d:53:c2:27:d5:
                    9b:65:23:4d:78:17:4e:19:4c:14:ab:cb:a3:94:32:
                    69:fa:b2:f9:91:67:13:9f:55:6b:4c:7c:94:4a:93:
                    fb:0b:53:23:da:9a:89:b4:72:e9:0f:5e:ca:ac:a8:
                    1e:67:c0:9d:87:93:e5:fd:3e:a8:e3:07:4c:32:f5:
                    27:ca:f2:d8:7e:fd:86:d9:8b:8f:5c:5c:19:ad:9e:
                    fa:34:74:4f:2a:b6:de:01:c1:f5:00:f0:f7:4f:e9:
                    c9:37:0d:c6:c6:16:e8:07:70:f9:b2:c8:1b:bd:f6:
                    e4:0a:fd:65:c4:b8:f5:fc:99:4a:4b:3b:f6:34:ba:
                    c5:b1:4c:17:73:3f:a2:f5:73:11:ad:2a:2d:3d:8d:
                    38:9b:ee:d3:b1:19:81:e2:20:2e:61:0f:01:39:59:
                    a0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:51:80:AD:43:AB:93:48:60:56:92:8D:84:EF:52:09:4F:4D:B4:6E
            X509v3 Authority Key Identifier:
                keyid:7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:04:a9:85:ac:4d:8a:26:3c:67:4e:7b:b6:29:ea:ab:5e:53:
         86:0c:8f:66:7a:d5:ed:39:72:3e:cd:4b:cb:54:a6:4a:76:21:
         cf:e2:1c:8b:c8:f2:66:d7:12:ca:1c:6e:88:f4:6e:e9:f5:56:
         82:34:b6:98:9d:e5:a0:5e:26:e3:30:92:51:e3:c9:b7:05:5e:
         44:bd:65:97:a5:c7:68:87:a6:a0:fb:df:a4:6a:56:ee:9d:23:
         08:30:83:14:7d:c3:78:09:3c:83:91:d6:45:5d:7f:26:97:ef:
         cb:00:ea:18:23:6c:f7:50:59:ef:90:d7:89:66:99:0f:eb:20:
         0d:e6:fa:30:39:a1:9e:39:ed:68:72:02:40:5d:82:76:3f:73:
         64:db:f0:dd:83:79:5f:b2:0a:2c:ec:0b:af:a4:a2:82:0d:4e:
         45:5a:5d:97:3d:84:72:76:df:75:37:19:49:6d:11:60:d0:3f:
         f4:ae:f2:63:e6:e5:d8:e3:ca:e4:b2:51:1c:16:0e:7b:8a:0a:
         7f:7a:21:38:37:af:41:e4:71:1c:34:9f:80:4f:b9:1c:1c:d2:
         89:a1:41:77:0f:81:ee:b9:2b:84:75:2c:ac:b7:5a:96:35:8a:
         40:dd:5c:03:a9:cd:5e:ad:ed:e4:7f:dd:88:f2:26:80:a1:3e:
         25:92:9d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1m9CmwFDwOopp7A6W6xFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYTg2YzgxNTZmMDgwNmRjY2NkYzIyZGNjNGQ2MTc1Yjhm
YTk4OTMwHhcNMjYwOTEwMTUwMTIxWhcNMjYwOTExMTUwMTIxWjAzMTEwLwYDVQQD
EygwODUxODBhZDQzYWI5MzQ4NjA1NjkyOGQ4NGVmNTIwOTRmNGRiNDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7e1k90zuE6yIH4jFNI0iSZP2upp
m5U0aAiwcs8/JxrlMTn1SOcsdzv0lsAzeuZto8GFw3jOQ7ECGKK3mzsT5DhSSj4J
h40fE1YQIiWft8Wk1eqd4LCuWfSg17xq73Vn2qmrDVPCJ9WbZSNNeBdOGUwUq8uj
lDJp+rL5kWcTn1VrTHyUSpP7C1Mj2pqJtHLpD17KrKgeZ8Cdh5Pl/T6o4wdMMvUn
yvLYfv2G2YuPXFwZrZ76NHRPKrbeAcH1APD3T+nJNw3GxhboB3D5ssgbvfbkCv1l
xLj1/JlKSzv2NLrFsUwXcz+i9XMRrSotPY04m+7TsRmB4iAuYQ8BOVmgVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhRgK1Dq5NIYFaSjYTvUglPTbRuMB8GA1UdIwQY
MBaAFHqobIFW8IBtzM3CLcxNYXW4+piTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMmQ0ZDgtNGY3Yy00NzU2LWE0NjEt
ZmFmZGJlZDU3NGFkLzEvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9iMmQ0ZDgtNGY3Yy00NzU2LWE0NjEtZmFmZGJlZDU3NGFk
LzEvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwSphaxN
iiY8Z057tinqq15ThgyPZnrV7TlyPs1Ly1SmSnYhz+Ici8jyZtcSyhxuiPRu6fVW
gjS2mJ3loF4m4zCSUePJtwVeRL1ll6XHaIemoPvfpGpW7p0jCDCDFH3DeAk8g5HW
RV1/JpfvywDqGCNs91BZ75DXiWaZD+sgDeb6MDmhnjntaHICQF2Cdj9zZNvw3YN5
X7IKLOwLr6Sigg1ORVpdlz2EcnbfdTcZSW0RYNA/9K7yY+bl2OPK5LJRHBYOe4oK
f3ohODevQeRxHDSfgE+5HBzSiaFBdw+B7rkrhHUsrLdaljWKQN1cA6nNXq3t5H/d
iPImgKE+JZKdWg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:56:21 2026 by rpki-client