Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.mft
File:                     EiYRihMr9PhYuZ6ffiLV7zFEFJ0.mft (raw, json)
Hash identifier:          VREbOacZI7OJn1gh88YohREivTFzf1nOZ5sbBBmsIxw=
Subject key identifier:   4B:E9:82:07:3E:FF:AE:5F:AE:E0:7C:1B:78:43:FB:12:D3:3D:AF:75
Authority key identifier: 12:26:11:8A:13:2B:F4:F8:58:B9:9E:9F:7E:22:D5:EF:31:44:14:9D
Certificate issuer:       /CN=1226118a132bf4f858b99e9f7e22d5ef3144149d
Certificate serial:       01A1795F711B1D5BC1671A0B548A5B473BDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.mft
Manifest number:          32
Signing time:             Mon 26 Oct 2026 18:01:00 +0000
Manifest this update:     Mon 26 Oct 2026 18:01:00 +0000
Manifest next update:     Tue 27 Oct 2026 18:01:00 +0000
Files and hashes:         1: 78hDSNEpMNyFqla5IsunXowOK5s.roa (hash: 9AFNy1NWqTXLUmTeLpiBe+8dF7UypIVwRpWPemfnxWQ=)
                          2: EiYRihMr9PhYuZ6ffiLV7zFEFJ0.crl (hash: bn2ik/6orA/B45om+eZ2zpwwFY+d+w6av7sgoy8sfhI=)
                          3: awc3XipEWtbq5LY1RS7zhjk5VV4.roa (hash: 2BZL2rKDYS4rq4m02j+f41598wS/cdfgn7Qx20K4+xQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:5f:71:1b:1d:5b:c1:67:1a:0b:54:8a:5b:47:3b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1226118a132bf4f858b99e9f7e22d5ef3144149d
        Validity
            Not Before: Oct 26 18:01:00 2026 GMT
            Not After : Oct 27 18:01:00 2026 GMT
        Subject: CN=4be982073effae5faee07c1b7843fb12d33daf75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9e:25:d7:89:42:b2:70:bb:69:45:0f:7a:2d:
                    d9:ce:a5:10:2e:b4:86:8f:2a:8a:0c:51:a4:bb:59:
                    db:d4:56:17:89:b6:aa:3d:bb:73:c6:ba:88:d0:df:
                    56:da:2d:98:e6:75:16:2a:75:8a:6e:f0:74:85:92:
                    9f:f1:45:16:52:31:2c:df:79:51:1c:e2:ee:b3:56:
                    c8:b2:61:9f:eb:27:3c:4d:3c:01:7d:4c:93:6e:fb:
                    94:41:a5:a8:e6:7d:07:0f:c2:d0:0d:dc:76:ef:ce:
                    63:a8:d4:a7:f6:14:60:15:16:bd:da:9c:1e:22:f8:
                    fb:08:7e:10:4d:ce:ea:34:7d:d7:08:c7:41:f1:55:
                    3d:d2:eb:33:c1:c7:99:b9:c5:8b:fd:08:aa:6e:cc:
                    dc:1c:3f:b3:42:8c:87:c6:31:39:3c:07:aa:b3:39:
                    82:9b:ea:1e:aa:01:c4:46:4b:6c:b1:bd:79:e1:c3:
                    48:33:5e:2f:d9:73:2f:3d:bd:75:55:45:2d:39:a3:
                    57:3a:c9:7f:fc:3d:61:e2:c2:0f:1e:50:b3:4c:90:
                    a5:d0:25:ab:00:46:df:70:cf:a3:b3:ba:f7:cb:12:
                    7a:8d:d1:93:5c:d7:9d:32:f5:a1:dd:63:c6:78:92:
                    26:6b:8a:06:c1:2f:2e:fd:cd:66:a5:12:e7:e9:9a:
                    5b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E9:82:07:3E:FF:AE:5F:AE:E0:7C:1B:78:43:FB:12:D3:3D:AF:75
            X509v3 Authority Key Identifier:
                keyid:12:26:11:8A:13:2B:F4:F8:58:B9:9E:9F:7E:22:D5:EF:31:44:14:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/16265c-3bd4-4f13-abcc-00b5a6d23b39/1/EiYRihMr9PhYuZ6ffiLV7zFEFJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7a:1e:f2:c3:6e:70:90:9e:b2:63:ca:25:3c:5c:8a:84:fa:
         89:42:ee:b4:8a:41:07:f3:35:40:c2:12:9d:4f:44:12:5e:98:
         46:45:5a:c2:ea:e8:bd:f9:89:a4:5a:2e:e7:ee:5f:2f:b9:ce:
         4a:57:ae:a3:69:52:42:f2:bd:d9:4b:9f:19:62:cb:bf:b0:c0:
         91:43:3c:ed:23:06:e3:ee:34:bf:16:b4:62:f8:ca:10:d1:d9:
         0a:12:ba:e5:c2:b7:90:62:a4:76:f0:ae:af:38:4a:6f:87:3e:
         f9:40:a9:81:dc:50:2b:8f:f2:50:56:7a:cb:5b:52:66:76:72:
         07:27:bc:84:1c:b7:3d:2e:ac:48:c0:ae:6e:2a:f3:e2:9a:84:
         c4:c3:57:f5:7d:b9:2c:59:fb:42:58:f3:c5:d1:83:81:cd:c0:
         bb:e5:a1:f7:e8:d7:d4:ca:79:21:aa:f5:f0:6f:0f:af:99:52:
         83:f7:0b:fe:8c:c9:26:00:94:c1:6f:8d:42:79:55:39:d9:15:
         74:1e:8a:98:47:c0:e3:fa:fa:ac:8f:af:5f:09:ab:77:94:82:
         9d:a8:e4:e6:d2:a2:88:0d:5e:b7:05:93:c4:a7:5a:06:4f:e4:
         d2:43:4f:16:a0:b1:69:3c:fe:63:63:13:d1:d0:d4:6e:3b:1b:
         af:ac:4b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:30 2026 by rpki-client