Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
File:                     ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft (raw, json)
Hash identifier:          1b7HtmQYQ3Aw7jZ77b0gNO7Mo6c4xl3al+HMgSN+NAI=
Subject key identifier:   09:4F:0E:D8:E8:80:8C:1E:93:EF:D1:F1:AB:80:C9:43:69:14:DA:45
Authority key identifier: 79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF
Certificate issuer:       /CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
Certificate serial:       01A18262F08BFD8C1C41CC5C73C0D8AF8E4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
Manifest number:          12D6
Signing time:             Wed 28 Oct 2026 12:01:24 +0000
Manifest this update:     Wed 28 Oct 2026 12:01:24 +0000
Manifest next update:     Thu 29 Oct 2026 12:01:24 +0000
Files and hashes:         1: 4TurvPB_ohFcEmoz-eVrTSXPuRI.roa (hash: gkcJydL0EzTSV6KSKCn0sG/zjtNhD9jooKJCUpapYy8=)
                          2: ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl (hash: HKwiWDxfS+8BzQxXU0T44eCbLmgnrwXogT19VZuMoRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:82:62:f0:8b:fd:8c:1c:41:cc:5c:73:c0:d8:af:8e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
        Validity
            Not Before: Oct 28 12:01:24 2026 GMT
            Not After : Oct 29 12:01:24 2026 GMT
        Subject: CN=094f0ed8e8808c1e93efd1f1ab80c9436914da45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:99:75:ad:61:8a:f3:92:64:6c:ca:aa:a8:03:
                    d6:2b:50:98:80:61:ac:f0:01:da:07:f3:6a:28:f1:
                    a6:22:0d:e5:cb:cb:f1:07:4a:f2:0d:7c:f1:9e:a7:
                    85:52:b0:13:c5:c0:a3:47:b6:f0:21:75:21:ec:c3:
                    01:71:8c:7a:11:97:f2:8c:bd:f3:de:c0:1b:5e:3d:
                    ea:db:ce:7a:51:31:49:f7:dc:f7:de:42:ff:6b:ca:
                    44:3d:60:47:27:29:09:55:71:b6:70:19:76:75:d9:
                    f5:52:72:93:d4:a6:12:47:0b:1b:83:b0:aa:a7:f0:
                    74:c9:71:5a:66:30:70:be:94:f6:73:6d:6c:82:f3:
                    a3:d2:bb:0f:21:63:de:a6:2e:7b:89:55:74:f9:db:
                    ed:df:b7:3f:32:3e:e0:6c:62:d2:dc:1f:f0:47:73:
                    8a:c6:6d:b3:35:fa:ee:29:82:48:58:27:1a:45:13:
                    f2:7c:38:f5:da:d5:22:63:bf:e9:cb:90:db:0a:93:
                    01:33:07:05:3e:6c:02:de:9f:a0:4e:88:fb:6d:01:
                    36:b4:92:46:ef:f4:e8:df:da:47:e0:cb:02:66:db:
                    eb:d7:7d:c5:20:be:de:88:fd:d7:33:60:b5:cf:36:
                    06:c0:84:ab:e9:d5:d3:15:83:3a:f2:90:9e:1a:87:
                    2d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4F:0E:D8:E8:80:8C:1E:93:EF:D1:F1:AB:80:C9:43:69:14:DA:45
            X509v3 Authority Key Identifier:
                keyid:79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8b:98:27:da:48:70:34:27:f7:a7:4a:c4:3b:d3:3e:9e:53:
         ee:48:01:27:2a:c1:8b:0e:09:55:9a:11:c2:07:96:a3:e6:a8:
         1f:ff:d6:ec:25:5a:ae:ad:87:09:e3:e9:e3:92:c1:27:48:13:
         b0:dd:b4:4a:ee:a8:25:19:72:82:48:f3:a2:fc:ed:eb:62:03:
         92:d0:4a:ff:84:06:ee:cb:d3:f8:dc:b0:8b:d2:39:12:6b:0f:
         98:e1:bd:88:24:27:ec:35:49:5e:f7:b1:2c:ad:68:df:bf:40:
         a2:0d:82:40:be:84:bb:60:54:0b:66:28:4f:9f:8a:e2:69:29:
         04:61:d2:e9:c8:43:45:e2:e8:d2:2a:40:b4:59:bc:5e:d6:73:
         71:18:ca:9c:11:8c:04:c8:da:b6:cc:b9:fb:e7:6e:67:04:9f:
         b0:85:dc:e7:c9:f9:c1:ee:3f:21:b1:93:e5:7d:8e:47:a6:80:
         56:0b:8a:ab:30:12:3b:77:13:6e:36:0c:f6:fa:fe:b6:27:37:
         52:66:92:68:9e:9b:79:d1:ec:2e:45:66:60:26:0d:54:2b:2c:
         4d:a6:8f:e0:f0:4f:a5:4c:3d:21:8f:b7:2a:01:0a:e1:e2:e4:
         56:e3:8d:bd:7c:cf:41:35:ae:10:b1:e3:15:19:d8:e9:38:d8:
         18:05:72:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCYvCL/YwcQcxcc8DYr45PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YjZjZWFjNWQ0MmE2MzdmMzZiYTFlM2ZkYWU5MGFkNWZl
ZTJjZmYwHhcNMjYxMDI4MTIwMTI0WhcNMjYxMDI5MTIwMTI0WjAzMTEwLwYDVQQD
EygwOTRmMGVkOGU4ODA4YzFlOTNlZmQxZjFhYjgwYzk0MzY5MTRkYTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pl1rWGK85JkbMqqqAPWK1CYgGGs
8AHaB/NqKPGmIg3ly8vxB0ryDXzxnqeFUrATxcCjR7bwIXUh7MMBcYx6EZfyjL3z
3sAbXj3q2856UTFJ99z33kL/a8pEPWBHJykJVXG2cBl2ddn1UnKT1KYSRwsbg7Cq
p/B0yXFaZjBwvpT2c21sgvOj0rsPIWPepi57iVV0+dvt37c/Mj7gbGLS3B/wR3OK
xm2zNfruKYJIWCcaRRPyfDj12tUiY7/py5DbCpMBMwcFPmwC3p+gToj7bQE2tJJG
7/To39pH4MsCZtvr133FIL7eiP3XM2C1zzYGwISr6dXTFYM68pCeGoctawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlPDtjogIwek+/R8auAyUNpFNpFMB8GA1UdIwQY
MBaAFHm2zqxdQqY382uh4/2ukK1f7iz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hN2Q0MjEtZThjZC00OTI5LWFlZDAt
NGZlM2Y2MTExMGRlLzEvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hN2Q0MjEtZThjZC00OTI5LWFlZDAtNGZlM2Y2MTExMGRl
LzEvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYuYJ9pI
cDQn96dKxDvTPp5T7kgBJyrBiw4JVZoRwgeWo+aoH//W7CVarq2HCePp45LBJ0gT
sN20Su6oJRlygkjzovzt62IDktBK/4QG7svT+Nywi9I5EmsPmOG9iCQn7DVJXvex
LK1o379Aog2CQL6Eu2BUC2YoT5+K4mkpBGHS6chDReLo0ipAtFm8XtZzcRjKnBGM
BMjatsy5++duZwSfsIXc58n5we4/IbGT5X2OR6aAVguKqzASO3cTbjYM9vr+tic3
UmaSaJ6bedHsLkVmYCYNVCssTaaP4PBPpUw9IY+3KgEK4eLkVuONvXzPQTWuELHj
FRnY6TjYGAVyWg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:53:41 2026 by rpki-client