Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File:                     epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier:          1U2PrjnICpBm+uBZhoNIivBtWiP0BthKCWHMLb0xqNY=
Subject key identifier:   AC:98:BD:C1:1C:67:D4:BF:2A:ED:51:57:73:42:D1:95:16:9E:A8:FE
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer:       /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial:       01A15AB06103C65931E851EBCA9D3D71FE14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number:          172B
Signing time:             Tue 20 Oct 2026 19:01:10 +0000
Manifest this update:     Tue 20 Oct 2026 19:01:10 +0000
Manifest next update:     Wed 21 Oct 2026 19:01:10 +0000
Files and hashes:         1: WVAJdgjbItg7Mo643n_cLFQt5QM.roa (hash: wQEt73D3Ylc7pRRWF2c8VCcNEdJAA1g1dE2/T5MxO+A=)
                          2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: zDXMgi5oJxdAGFotR4oJKFXlLQbTglFwhRevAUK9WLA=)
                          3: ifkhfkR12chdZx40iDC75Z6ZvtI.roa (hash: VCtx1LYyqYZzs+BoTifxqmMrsa75EWc9KzbMGXKx/XI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5a:b0:61:03:c6:59:31:e8:51:eb:ca:9d:3d:71:fe:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
        Validity
            Not Before: Oct 20 19:01:10 2026 GMT
            Not After : Oct 21 19:01:10 2026 GMT
        Subject: CN=ac98bdc11c67d4bf2aed51577342d195169ea8fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:99:b9:5c:59:c3:5c:3c:fb:2e:0d:93:ff:13:
                    f8:23:22:86:5a:35:12:d0:27:ea:27:9b:a2:87:36:
                    6c:19:82:63:66:fb:d0:44:b5:dc:46:be:9f:ca:81:
                    a4:e4:c3:96:3b:b1:a8:d6:c5:ac:0e:f9:7f:64:f5:
                    e3:56:bf:c0:8f:96:41:08:49:e6:53:74:9a:93:6c:
                    23:13:eb:13:8b:79:b6:27:4b:32:85:b7:de:50:84:
                    22:da:0f:f6:52:46:6a:9b:d9:51:ef:b2:bd:ad:51:
                    57:66:f4:af:a8:85:27:42:11:af:84:68:bf:fe:7e:
                    00:2d:00:44:79:5e:a9:8e:86:89:34:50:96:03:9c:
                    82:59:dc:36:91:09:d1:f3:f9:3e:7f:d9:17:5d:24:
                    ab:f1:09:78:95:3b:a1:05:d7:66:7d:a2:d0:05:29:
                    d5:7c:6b:49:c2:b8:58:16:b5:3f:9b:93:ae:aa:ea:
                    7b:18:f6:cd:04:8d:b4:55:11:02:25:dd:58:64:83:
                    12:d7:7e:4a:5c:d4:e2:e4:24:6b:2c:2f:84:51:cd:
                    fe:29:b9:1c:48:81:0a:c1:20:63:ff:cb:46:86:32:
                    b5:92:0d:1c:c5:79:26:e3:9d:38:bd:f1:4f:6e:4f:
                    73:5b:c3:18:bd:5d:a6:70:95:05:d3:a2:76:38:df:
                    75:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:98:BD:C1:1C:67:D4:BF:2A:ED:51:57:73:42:D1:95:16:9E:A8:FE
            X509v3 Authority Key Identifier:
                keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:41:5e:10:2a:7b:c0:f1:a2:18:4e:bc:ba:27:f5:6f:53:1c:
         4e:11:d5:8d:1c:be:70:e5:6d:22:87:99:2c:90:0f:b3:f2:52:
         93:43:4e:8a:77:0d:de:89:95:60:9d:66:e5:77:90:b3:67:e3:
         63:d4:6e:06:0d:54:66:e1:55:26:17:84:09:d1:a5:33:ba:8b:
         aa:7b:1a:d5:05:b1:6a:2c:46:75:6f:93:ae:95:9d:c2:59:84:
         4e:26:80:42:6d:51:39:00:b5:62:4b:2f:fa:6c:e5:16:d8:d3:
         57:10:80:b3:18:87:8f:65:5b:f7:89:bf:be:be:03:25:b9:a6:
         2f:33:1b:d0:99:fe:1b:31:13:65:4e:8c:a7:7d:a9:73:40:29:
         18:de:4d:6f:5c:1b:90:00:8c:cc:d6:ea:af:b1:04:24:86:81:
         c4:cb:ef:7f:86:4b:48:86:03:65:99:55:a0:46:9e:b3:e0:1a:
         44:88:04:06:dd:70:62:59:79:6b:c3:e7:0d:08:59:4d:ab:a8:
         98:14:6d:93:1b:46:1f:5c:73:50:45:58:a4:0d:a9:5c:a3:c8:
         23:ea:67:74:d8:32:1b:ef:86:81:83:65:e2:15:0f:43:50:2f:
         1c:c9:69:40:0f:07:88:94:92:65:37:78:e7:a6:98:3d:4a:48:
         0c:2c:8b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 02:55:39 2026 by rpki-client