Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/d40c48-9e95-48a6-8e08-7f0e74b1d539/1/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.mft
File:                     eGy4Rqc5WbOPUUN2_u7BHEuzGtA.mft (raw, json)
Hash identifier:          /I9DXHjt5Gh5fBBk2nU8r+gFsukSWUREq5Sdf8wjOYs=
Subject key identifier:   6F:DA:54:3B:90:09:39:23:6D:CA:C3:67:3B:7D:93:79:80:AB:1A:5E
Authority key identifier: 78:6C:B8:46:A7:39:59:B3:8F:51:43:76:FE:EE:C1:1C:4B:B3:1A:D0
Certificate issuer:       /CN=786cb846a73959b38f514376feeec11c4bb31ad0
Certificate serial:       01A0EC2F55FC0F34157764205312D7410159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d40c48-9e95-48a6-8e08-7f0e74b1d539/1/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.mft
Manifest number:          AA
Signing time:             Tue 29 Sep 2026 08:02:00 +0000
Manifest this update:     Tue 29 Sep 2026 08:02:00 +0000
Manifest next update:     Wed 30 Sep 2026 08:02:00 +0000
Files and hashes:         1: Q9IKX8gclZ49OSuVIy_qLh9GHSk.asa (hash: k9C8kKQQODgzh/NpCguXWlVMjbQ31tCPj7PWyAJG/1k=)
                          2: eGy4Rqc5WbOPUUN2_u7BHEuzGtA.crl (hash: qe44h+N91eRreRcWFMACCEO/qYnP4DyIx3y1Ej4ybXY=)
                          3: jOBP3zLW8YgmANuEMRwkaWve-dI.roa (hash: 8Bp67AKqv3PpkKc293GUR9A2V/TrsmosrfXd6/pGpK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d40c48-9e95-48a6-8e08-7f0e74b1d539/1/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d40c48-9e95-48a6-8e08-7f0e74b1d539/1/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:2f:55:fc:0f:34:15:77:64:20:53:12:d7:41:01:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786cb846a73959b38f514376feeec11c4bb31ad0
        Validity
            Not Before: Sep 29 08:02:00 2026 GMT
            Not After : Sep 30 08:02:00 2026 GMT
        Subject: CN=6fda543b900939236dcac3673b7d937980ab1a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:18:0c:63:e4:7f:de:f3:d0:62:bd:e1:f3:03:
                    56:7a:cd:df:c7:9f:42:47:0f:44:29:c8:52:8c:c5:
                    f0:c8:52:8e:00:6a:29:69:da:72:56:ba:31:20:8e:
                    61:5a:2b:f6:82:2e:50:9a:0a:c1:d2:b1:07:0a:ac:
                    d0:73:17:1f:19:85:56:e5:6d:fd:51:30:1b:a0:7b:
                    7e:e2:3f:9b:08:4b:10:53:23:d9:23:a7:01:b6:e6:
                    a4:e4:72:48:87:cd:84:91:c0:78:83:80:ac:12:2f:
                    06:ea:30:8a:a3:bc:16:bb:fa:ae:c5:36:e2:fa:dc:
                    08:bd:58:47:e3:89:c5:70:ac:0c:4e:49:9c:05:fe:
                    00:64:eb:53:70:a7:8a:4f:56:54:5f:ed:a7:49:a7:
                    36:d0:08:98:6e:dd:b7:94:d7:84:ca:89:17:4e:27:
                    e4:3d:45:4c:e6:9f:fa:cb:d3:72:84:b3:8a:6d:62:
                    57:64:54:07:8a:3a:fa:6b:52:14:77:17:84:61:ec:
                    3b:d2:20:f2:83:94:79:03:11:40:6f:d8:92:e4:a6:
                    5b:26:19:a4:31:2b:f9:5d:56:68:56:be:76:91:bd:
                    bc:99:0b:85:0b:b8:2e:56:db:c2:7c:11:5a:5d:4d:
                    65:ba:fc:c5:e5:d4:29:7b:cf:c6:46:d6:63:63:bd:
                    0d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DA:54:3B:90:09:39:23:6D:CA:C3:67:3B:7D:93:79:80:AB:1A:5E
            X509v3 Authority Key Identifier:
                keyid:78:6C:B8:46:A7:39:59:B3:8F:51:43:76:FE:EE:C1:1C:4B:B3:1A:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d40c48-9e95-48a6-8e08-7f0e74b1d539/1/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d40c48-9e95-48a6-8e08-7f0e74b1d539/1/eGy4Rqc5WbOPUUN2_u7BHEuzGtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:0c:53:cf:7f:bf:7f:c7:35:23:2e:f0:39:5b:5d:87:a9:a0:
         ed:29:01:b2:c8:57:60:89:cc:61:2d:dc:ca:c2:a9:88:44:4a:
         64:f5:6e:00:29:b1:7c:55:a3:5b:75:eb:0a:6e:06:d7:03:28:
         00:c9:81:da:03:1f:e2:85:a4:3a:81:db:d7:4f:38:a0:a5:c8:
         05:9f:64:a7:ae:70:bf:44:24:3e:44:2d:9a:93:25:fa:01:ba:
         82:a9:e8:6a:b4:95:5a:76:9a:56:58:21:06:ea:19:bb:c4:24:
         a6:cc:e7:75:37:b2:6f:e7:09:cb:97:92:1f:4a:dd:2c:0b:04:
         16:46:85:b0:79:b2:e2:88:1d:0c:de:93:fe:89:1a:47:92:b6:
         89:0a:e2:37:67:96:f8:6e:0d:0a:84:71:ce:7d:5f:46:b3:59:
         a1:09:5b:ed:63:17:6e:b3:b7:6a:75:1d:69:2a:64:35:64:2c:
         37:19:1b:21:67:95:d2:b7:31:13:aa:d6:22:c9:02:a5:59:4f:
         b4:31:f2:31:bb:25:92:ec:9a:2d:24:5c:46:76:be:55:12:7c:
         d2:b9:12:fc:7c:d8:82:f4:d4:ac:87:55:de:23:bb:08:ec:6e:
         b5:7b:76:90:0c:96:19:6c:d2:ab:15:79:22:ff:c2:4d:ab:27:
         f3:af:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 14:07:23 2026 by rpki-client