Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.mft
File:                     EiYCPefEJ0FZDyyXFAZwkVhSNm4.mft (raw, json)
Hash identifier:          4h+MJKMckodavmAQj1EO6toAuTRtuwPkyP3s84SWK4M=
Subject key identifier:   BC:5D:91:B9:25:7D:C3:1F:4B:B9:09:4B:13:EB:70:BF:A0:4C:D8:A2
Authority key identifier: 12:26:02:3D:E7:C4:27:41:59:0F:2C:97:14:06:70:91:58:52:36:6E
Certificate issuer:       /CN=1226023de7c42741590f2c97140670915852366e
Certificate serial:       01A12A6901773CE22DAFF81E3BDC6B9B19E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EiYCPefEJ0FZDyyXFAZwkVhSNm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.mft
Manifest number:          0105
Signing time:             Sun 11 Oct 2026 10:01:26 +0000
Manifest this update:     Sun 11 Oct 2026 10:01:26 +0000
Manifest next update:     Mon 12 Oct 2026 10:01:26 +0000
Files and hashes:         1: EiYCPefEJ0FZDyyXFAZwkVhSNm4.crl (hash: uuNH4Q+s9yJ6VGSJAMA1zzbNTuYQXJ3X/au7TRYJwHg=)
                          2: mJVNX_CVE3Scl_hPiobgJUhSU1s.roa (hash: Cir8Mch33lIGR800fZufkQADOlq/aWOCF2L+npd2Dzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EiYCPefEJ0FZDyyXFAZwkVhSNm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:69:01:77:3c:e2:2d:af:f8:1e:3b:dc:6b:9b:19:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1226023de7c42741590f2c97140670915852366e
        Validity
            Not Before: Oct 11 10:01:26 2026 GMT
            Not After : Oct 12 10:01:26 2026 GMT
        Subject: CN=bc5d91b9257dc31f4bb9094b13eb70bfa04cd8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cd:fa:8a:17:ae:ee:88:4a:f7:43:f7:53:35:
                    f7:cd:48:dc:eb:37:75:6d:62:22:66:d4:88:70:aa:
                    37:a8:f9:41:dd:7c:87:59:bc:0c:16:74:1b:ce:fa:
                    fa:2a:a4:fc:6b:1e:e4:35:b4:a7:dd:cd:e0:f5:6b:
                    d1:54:d7:b4:4b:44:47:72:b7:9b:a1:b6:86:a2:ed:
                    f3:5e:24:a5:f4:3a:60:d3:99:64:48:69:0b:c7:95:
                    37:9a:97:9e:f9:96:5e:7e:1f:ef:b8:b0:85:77:bc:
                    18:25:19:03:f2:06:98:36:f5:42:29:66:94:27:8f:
                    1f:be:b4:f7:73:91:a7:3a:9d:fb:fe:e3:e2:b1:96:
                    96:e7:98:fa:88:b0:6c:c0:eb:61:73:96:48:e4:f1:
                    25:5b:82:a7:34:4b:ff:08:ef:cf:1c:7f:5e:58:2b:
                    3d:d0:24:b4:9b:60:48:cb:c1:6b:a2:db:f2:f4:8f:
                    99:dc:98:af:f9:0e:ce:03:2e:ec:b0:4c:e8:35:87:
                    37:85:4c:4e:c6:b6:99:b8:61:d6:f1:40:61:57:12:
                    62:28:48:16:66:1d:5a:ae:3b:c1:18:37:0c:29:94:
                    ea:af:5b:4b:b8:55:ee:3a:4b:47:eb:05:31:a7:33:
                    91:b5:ec:78:63:68:0b:c4:e8:13:77:0c:16:9a:f3:
                    dc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5D:91:B9:25:7D:C3:1F:4B:B9:09:4B:13:EB:70:BF:A0:4C:D8:A2
            X509v3 Authority Key Identifier:
                keyid:12:26:02:3D:E7:C4:27:41:59:0F:2C:97:14:06:70:91:58:52:36:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiYCPefEJ0FZDyyXFAZwkVhSNm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b8:f1:f2:09:7e:b5:7c:88:a6:17:e6:8a:d7:c6:89:0d:4f:
         64:77:8c:cc:e9:e4:9c:bb:74:60:c9:ce:68:e7:e4:b6:3d:48:
         16:56:87:47:6b:2c:df:ab:ee:40:3c:c8:3a:86:14:41:6a:db:
         39:7f:98:d6:a3:c8:80:f2:a1:ff:40:7e:4b:d7:14:3f:34:c7:
         ff:db:89:cc:8d:11:b9:07:b6:02:86:f6:ad:b6:b4:bc:3e:3f:
         c6:10:6a:fb:a0:de:a2:d0:23:6d:ca:8d:05:22:d6:1c:bf:68:
         ab:47:5c:db:a9:d2:af:4f:4e:c0:28:9a:35:17:98:c2:b9:c7:
         fa:fb:b3:39:9b:3f:60:1c:9b:1c:b4:b1:4e:34:88:11:b9:fd:
         66:c7:37:40:40:a3:3c:bc:05:0f:12:19:68:62:bd:a0:91:cd:
         2e:61:4b:e7:81:c9:db:6a:40:57:0e:6a:ee:da:74:d9:94:74:
         84:59:c5:99:61:fa:cd:6a:9a:80:73:74:ea:61:0c:45:62:e2:
         4c:c6:9d:d1:6a:77:82:c3:a1:16:a5:ff:9b:90:18:1c:f3:a6:
         3e:e6:93:81:e6:3e:04:12:4e:80:6a:48:b8:a9:1f:8e:8c:d9:
         00:36:ea:e9:08:41:ae:42:c1:c4:57:4c:0b:a3:71:35:79:50:
         de:51:45:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEqaQF3POItr/geO9xrmxnnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMjYwMjNkZTdjNDI3NDE1OTBmMmM5NzE0MDY3MDkxNTg1
MjM2NmUwHhcNMjYxMDExMTAwMTI2WhcNMjYxMDEyMTAwMTI2WjAzMTEwLwYDVQQD
EyhiYzVkOTFiOTI1N2RjMzFmNGJiOTA5NGIxM2ViNzBiZmEwNGNkOGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn836iheu7ohK90P3UzX3zUjc6zd1
bWIiZtSIcKo3qPlB3XyHWbwMFnQbzvr6KqT8ax7kNbSn3c3g9WvRVNe0S0RHcreb
obaGou3zXiSl9Dpg05lkSGkLx5U3mpee+ZZefh/vuLCFd7wYJRkD8gaYNvVCKWaU
J48fvrT3c5GnOp37/uPisZaW55j6iLBswOthc5ZI5PElW4KnNEv/CO/PHH9eWCs9
0CS0m2BIy8Frotvy9I+Z3Jiv+Q7OAy7ssEzoNYc3hUxOxraZuGHW8UBhVxJiKEgW
Zh1arjvBGDcMKZTqr1tLuFXuOktH6wUxpzORtex4Y2gLxOgTdwwWmvPccwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxdkbklfcMfS7kJSxPrcL+gTNiiMB8GA1UdIwQY
MBaAFBImAj3nxCdBWQ8slxQGcJFYUjZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlZQ1BlZkVKMEZaRHl5WEZBWndrVmhTTm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wZWFiYmItNWE2Yi00MzQwLWIyZDMt
YmZjNzJmN2Y0MDlmLzEvRWlZQ1BlZkVKMEZaRHl5WEZBWndrVmhTTm00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8wZWFiYmItNWE2Yi00MzQwLWIyZDMtYmZjNzJmN2Y0MDlm
LzEvRWlZQ1BlZkVKMEZaRHl5WEZBWndrVmhTTm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbjx8gl+
tXyIphfmitfGiQ1PZHeMzOnknLt0YMnOaOfktj1IFlaHR2ss36vuQDzIOoYUQWrb
OX+Y1qPIgPKh/0B+S9cUPzTH/9uJzI0RuQe2Aob2rba0vD4/xhBq+6DeotAjbcqN
BSLWHL9oq0dc26nSr09OwCiaNReYwrnH+vuzOZs/YBybHLSxTjSIEbn9Zsc3QECj
PLwFDxIZaGK9oJHNLmFL54HJ22pAVw5q7tp02ZR0hFnFmWH6zWqagHN06mEMRWLi
TMad0Wp3gsOhFqX/m5AYHPOmPuaTgeY+BBJOgGpIuKkfjozZADbq6QhBrkLBxFdM
C6NxNXlQ3lFFuw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 14:29:36 2026 by rpki-client