Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
File:                     eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json)
Hash identifier:          GVXvRRVa+SRb4aHikRTSICFu6dX3prm9V2Z1WTplxmQ=
Subject key identifier:   7A:39:A7:54:88:A7:F6:1D:06:48:16:8D:5D:C8:D7:AA:0C:37:66:6A
Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
Certificate issuer:       /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Certificate serial:       01A0F11E5C28183EC75EACC55195F066FF66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
Manifest number:          1A7F
Signing time:             Wed 30 Sep 2026 07:01:33 +0000
Manifest this update:     Wed 30 Sep 2026 07:01:33 +0000
Manifest next update:     Thu 01 Oct 2026 07:01:33 +0000
Files and hashes:         1: 5zwZDxIuULUKjp1rgcwRTBY-pVU.roa (hash: mUMWXUGRFNqTfVs8CnS61wDQkaxlvFmZ/n69Cmi6CP8=)
                          2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: NFiaVb/EnJI9TlyElcqtl8QAmzop1Rdh6RdSwhyprwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:1e:5c:28:18:3e:c7:5e:ac:c5:51:95:f0:66:ff:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
        Validity
            Not Before: Sep 30 07:01:33 2026 GMT
            Not After : Oct  1 07:01:33 2026 GMT
        Subject: CN=7a39a75488a7f61d0648168d5dc8d7aa0c37666a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cd:77:54:f2:4d:c9:57:57:ea:15:2a:63:02:
                    45:bf:f1:83:71:a6:96:7a:b5:1b:65:6e:88:8e:a6:
                    48:5f:d9:36:e6:eb:7a:9a:e3:ab:ab:39:0f:00:8f:
                    bd:50:99:dd:67:0c:98:38:d8:12:5c:5b:04:62:5f:
                    1f:0e:77:70:12:36:9f:24:ea:92:0a:e1:54:0f:8c:
                    22:32:af:3d:0c:a3:dc:56:36:5a:16:c2:2a:8f:b9:
                    2e:a0:b1:78:44:57:93:c7:ec:f0:a3:f0:28:5e:b3:
                    ea:84:d3:c8:6a:33:11:52:d9:25:c9:de:1b:91:93:
                    57:b2:bd:df:1c:78:58:fc:2e:f5:c8:a8:03:d2:b7:
                    2b:3f:f9:23:90:a3:bf:aa:f0:ad:17:15:4d:cf:39:
                    a5:e5:dd:ef:6f:49:3f:2a:e0:45:da:91:70:a1:8b:
                    eb:3a:38:7a:54:f6:9b:37:64:15:5f:e1:96:e0:8d:
                    0e:0b:19:96:46:49:5f:ed:6a:b4:01:ec:16:4e:a3:
                    e7:6c:36:10:ca:49:ee:be:3b:39:85:37:67:b8:a4:
                    f8:76:c7:16:3e:9e:2b:c5:6e:b3:9c:75:15:de:32:
                    fb:98:65:5b:1a:9d:3d:e5:5f:d3:0d:f1:55:84:06:
                    a4:16:76:3b:fa:8a:65:b0:bb:25:1d:41:d1:af:d0:
                    f8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:39:A7:54:88:A7:F6:1D:06:48:16:8D:5D:C8:D7:AA:0C:37:66:6A
            X509v3 Authority Key Identifier:
                keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9b:4d:73:72:98:ea:d3:78:85:51:c5:3a:09:76:4a:57:ee:
         06:46:48:9f:a1:7b:c6:0b:98:b4:53:a2:c5:64:bd:1b:5a:bd:
         ce:2c:fa:c2:68:2f:db:b5:4d:d2:b4:59:19:2d:d5:09:ca:b6:
         87:95:61:15:8c:9a:78:cd:9e:c8:ef:6e:9c:c2:d4:10:05:7d:
         77:ba:d5:b7:42:bc:8f:be:10:a3:0a:6a:df:8d:e9:53:1f:cb:
         b4:95:29:49:cf:e8:cd:c7:92:ec:4a:f1:f5:76:79:39:46:53:
         88:29:0d:20:0d:ff:42:d1:c4:97:4f:c2:cc:70:f7:c4:4a:50:
         10:c8:b9:f5:eb:e4:10:5a:68:9e:99:63:d6:3d:3f:7b:e2:2b:
         f1:53:72:7a:83:c2:f8:98:85:3f:18:ad:22:6d:29:37:10:f3:
         76:f1:53:8c:8b:da:c9:1e:a2:a6:5c:c7:50:16:2b:1b:12:6a:
         2f:fb:ed:8f:f5:d6:9f:a6:b6:5d:21:c7:dd:0d:03:23:37:4b:
         9d:e2:2d:95:7d:1a:bc:26:ee:5d:53:c3:65:00:52:95:d0:e5:
         b5:b3:56:34:36:00:be:6e:33:8f:c2:6d:36:b8:86:07:23:47:
         a2:42:4e:2a:a2:77:52:b1:c9:7f:64:fe:96:20:b9:41:c9:00:
         5c:80:a7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 14:21:51 2026 by rpki-client