Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File:                     EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier:          bt47CShHXmvwO2P3Loqam1h+lsS9ZtX97ShVsk2pct0=
Subject key identifier:   3D:8D:AA:0F:4F:26:E1:37:9D:0E:3B:32:6C:1E:C3:E5:8E:8D:C5:AC
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer:       /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial:       01A110A90DE0B0F520B7F43E5CA2B72914CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number:          1303
Signing time:             Tue 06 Oct 2026 10:01:16 +0000
Manifest this update:     Tue 06 Oct 2026 10:01:16 +0000
Manifest next update:     Wed 07 Oct 2026 10:01:16 +0000
Files and hashes:         1: 1-rET-TrbL0N0PmSCeeqaK3f307A.roa (hash: 3mf7fKWr4vRI4ELzbIBegjtJk+mkQEPMj+4jcV/D7Z4=)
                          2: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: 3fo+hNiMYAhmIYzntusTAXM4ZAIhmTh758kT4AZr+GM=)
                          3: OYfq_lWnAQ_tUxH83Vafk3m1hAU.roa (hash: jPa4kfq6v0aw3m5eHQ43ps6ZzHtlfC/2MPYqiPwryT8=)
                          4: OklpCWAYtSxGFSO6LoyURgrDbcQ.roa (hash: 1mSZtPwrR8rsCOpqJ4xfUkwL5UPo6V6cd8N6AZWROk0=)
                          5: adft9gClh_5cLRsjg_tIKsse5c8.roa (hash: mOJk0iIwfTDt5ixEea0GhZ9TZ+LmcfXcF0RkG7cTHPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 10:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:a9:0d:e0:b0:f5:20:b7:f4:3e:5c:a2:b7:29:14:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
        Validity
            Not Before: Oct  6 10:01:16 2026 GMT
            Not After : Oct  7 10:01:16 2026 GMT
        Subject: CN=3d8daa0f4f26e1379d0e3b326c1ec3e58e8dc5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:21:67:68:24:b4:5d:00:d7:21:77:f3:28:6b:
                    3d:d0:87:bc:24:9f:89:36:fd:49:31:ed:1f:ab:60:
                    19:f4:7c:20:74:c2:d6:8f:15:65:e8:cd:96:f8:fa:
                    ed:5a:4d:ad:23:67:ed:52:05:60:47:73:27:aa:fb:
                    89:a8:38:d2:39:a8:73:54:f3:f8:59:11:25:ea:2a:
                    df:d0:80:14:a1:e9:4c:e8:7b:ab:93:df:d7:3e:d6:
                    1b:db:1f:a0:cd:e3:5a:b4:8c:0c:65:3c:6b:54:01:
                    97:16:b3:79:e3:5a:68:eb:12:af:84:b9:92:27:15:
                    6e:71:25:b2:a3:7c:d3:05:4b:e9:56:14:a8:c1:18:
                    5d:b5:93:85:3b:81:62:d6:46:88:93:b6:00:83:ed:
                    0a:1d:60:00:35:ed:af:39:e2:89:a4:ff:1e:c4:35:
                    19:06:5e:19:d9:3c:75:3c:54:7e:d5:dd:78:97:0f:
                    72:b9:b3:89:68:1f:25:34:75:71:95:a4:ce:0c:6a:
                    ea:f0:a5:e5:d9:03:e8:2e:f5:56:6a:03:f7:f9:cd:
                    de:ce:bc:20:2d:35:0c:8e:4b:42:90:c6:cd:7b:14:
                    33:58:80:19:d2:28:ec:88:83:53:54:fd:51:b4:41:
                    25:c3:14:8a:1f:66:75:d6:ce:71:7b:d8:04:44:01:
                    24:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8D:AA:0F:4F:26:E1:37:9D:0E:3B:32:6C:1E:C3:E5:8E:8D:C5:AC
            X509v3 Authority Key Identifier:
                keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:11:69:6c:40:b5:3a:5f:3b:25:f3:cf:a6:71:1f:ff:78:ec:
         fb:dd:59:84:44:6b:e1:c8:a8:f3:36:7c:6c:ca:50:30:ff:85:
         2f:b6:e6:df:db:37:82:1f:23:94:27:63:53:6f:88:80:6d:85:
         7b:50:65:79:9d:da:10:d0:48:dc:29:fc:1e:a1:63:bd:3c:14:
         55:07:dc:8d:d7:49:3c:a9:5f:c5:40:cb:4c:1a:0e:d0:53:75:
         2e:74:7d:2f:be:00:fc:51:1d:98:f8:4c:74:ee:e7:a5:16:a8:
         54:a4:c9:e7:2e:7b:28:3f:f0:8b:41:a8:c4:10:17:39:7e:8f:
         65:6c:12:59:e2:2a:95:23:e6:e6:84:1e:dc:af:cd:50:c3:2d:
         52:cf:74:1e:5a:41:60:56:72:83:ef:a0:7b:ea:5f:2a:9b:44:
         6d:bb:2b:66:da:44:03:27:53:dc:40:f6:d2:94:e3:5f:bf:03:
         fd:89:b9:5f:71:6d:bd:3c:57:2d:50:2d:60:71:14:b1:e3:d4:
         3f:13:43:58:a1:82:d3:0e:bf:d2:1d:1b:04:d6:61:36:ae:2b:
         cc:08:f8:a3:14:d0:1f:e0:b2:03:ed:1c:48:27:3f:11:0d:e3:
         80:22:71:c5:79:d2:e2:a2:ec:09:bf:f8:ef:f3:b0:56:c4:d2:
         bd:62:65:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:32:08 2026 by rpki-client