Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft
File:                     e2nv5gFvctRZLxsLq5GGR2_zop0.mft (raw, json)
Hash identifier:          HMitHnEhSjMateR9NT+OVJpQXyBR/Xf5LBYvjxEr19Q=
Subject key identifier:   4D:A3:12:85:FD:C9:6B:FD:C7:B9:C4:9E:FD:E5:48:FA:08:CB:8D:6C
Authority key identifier: 7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D
Certificate issuer:       /CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d
Certificate serial:       01A1144ED46A9FAD68A75C8ABF825CD5253C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft
Manifest number:          029E
Signing time:             Wed 07 Oct 2026 03:01:12 +0000
Manifest this update:     Wed 07 Oct 2026 03:01:12 +0000
Manifest next update:     Thu 08 Oct 2026 03:01:12 +0000
Files and hashes:         1: DhhEzrCSvtlaHslOfzFqY95aZ90.roa (hash: VOvJoF9EWNuxMkJTKQzWpsIdU1FWWr51hxl56iJSfuY=)
                          2: ICKL-vNS4Ve2n8KrobzVtvKP7a8.roa (hash: KJYnqYyOofOZzadxEkB/wfQ8LlG+IKUvm99MnwqJGO4=)
                          3: X1S1z6CrzJkdF4dCeCm-se-s4J8.roa (hash: Y5udF7iCsk7tkEh52H+ceEwvOnXrZWaMJVMZZgF25Vw=)
                          4: e2nv5gFvctRZLxsLq5GGR2_zop0.crl (hash: eZ/oNQwqp+qq5oSCBHjUh8GVF2ZtuZjs7uVqRxUuZ1E=)
                          5: oNyVV9F-UayJsBNMERK1JiJ0D7o.roa (hash: k7jOjhLjlTb4tvt1HZS9xHgB6yHXR3vwiFuwHTGcB/0=)
                          6: pwN-2lFR66jS8tzjgg4a5hQ9SZc.roa (hash: vx5holsz8fk1dc3w+YKiWzzSNZ1ZzCCUAaCQLnUJmIY=)
                          7: r23QCb42Tz1gHCNmFF9MYh0kkS0.roa (hash: ULoM0qs6keKyvA3e5JZk0wAwuCLfnphbYK3aR4+GSfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:14:4e:d4:6a:9f:ad:68:a7:5c:8a:bf:82:5c:d5:25:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b69efe6016f72d4592f1b0bab9186476ff3a29d
        Validity
            Not Before: Oct  7 03:01:12 2026 GMT
            Not After : Oct  8 03:01:12 2026 GMT
        Subject: CN=4da31285fdc96bfdc7b9c49efde548fa08cb8d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ab:94:4b:23:1c:13:07:a0:5b:d7:85:89:43:
                    6f:5d:e1:80:d2:17:51:0c:48:24:68:f2:36:f6:38:
                    a6:78:1a:e4:61:fb:5c:30:8b:94:cd:a8:fd:6e:6d:
                    3e:fa:41:3d:ac:d8:d1:ed:60:d5:70:57:49:48:45:
                    0b:d8:89:81:f4:91:b8:ba:93:27:df:4b:1f:b1:4c:
                    05:2e:1b:c1:17:01:6b:9e:21:fe:72:2b:e9:0f:37:
                    83:95:bc:16:68:7a:b8:0d:7f:56:3e:7f:51:f3:d2:
                    05:81:2a:da:50:5e:8c:f5:2b:4d:64:57:22:bd:fb:
                    13:d0:7a:96:85:dc:67:ff:c3:c6:25:be:57:97:4d:
                    e0:af:04:ef:01:0d:a8:97:f6:67:4b:32:a3:be:90:
                    12:f7:f5:2e:25:43:9f:13:49:74:32:d4:f8:3b:e7:
                    21:2b:a8:67:be:59:a5:95:4a:9e:fd:4b:96:8b:ac:
                    95:4e:ae:a9:46:51:f5:f1:9e:82:c7:ba:b3:5b:17:
                    6d:0c:77:74:28:8e:b6:e8:b7:28:0b:02:41:18:53:
                    e2:57:ef:a1:62:5e:11:e0:b1:3f:39:71:4c:23:01:
                    a7:3a:91:54:82:f8:d0:72:33:0f:b4:49:7b:09:c8:
                    a2:70:6f:66:35:23:ab:9e:cd:95:d2:0d:ad:0b:99:
                    7f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A3:12:85:FD:C9:6B:FD:C7:B9:C4:9E:FD:E5:48:FA:08:CB:8D:6C
            X509v3 Authority Key Identifier:
                keyid:7B:69:EF:E6:01:6F:72:D4:59:2F:1B:0B:AB:91:86:47:6F:F3:A2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2nv5gFvctRZLxsLq5GGR2_zop0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ff34bb-10f9-4593-9caf-1d8b9a1aa4ad/1/e2nv5gFvctRZLxsLq5GGR2_zop0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:65:24:ba:07:66:34:44:6e:61:6d:f5:97:8d:3e:30:ee:32:
         92:31:85:c5:a5:de:b4:68:5b:ec:56:74:6e:39:d1:55:0a:1e:
         27:7d:df:c7:a8:8d:fd:0f:70:47:55:21:9d:52:4f:43:36:bf:
         28:d2:52:ad:14:cd:80:07:1f:a8:25:b2:c7:6b:89:50:51:54:
         c2:b3:b5:5b:a1:33:d0:06:73:0c:98:df:d5:a5:70:f6:21:f2:
         68:47:7b:33:9b:f8:43:a0:3b:8f:68:c7:bd:9d:dd:a2:82:97:
         f3:ed:d4:34:9e:f8:7b:01:97:f4:44:08:8b:80:f9:51:7b:8e:
         70:5e:e0:14:50:3e:34:96:1c:b8:39:d2:4c:20:bb:18:17:bd:
         24:99:01:c1:a4:17:bb:fa:45:f8:42:3e:7e:98:a9:e3:11:de:
         98:87:4c:99:3d:8b:7a:04:f3:86:f6:73:44:6d:64:55:b5:87:
         0d:9a:6e:09:f5:2d:d6:e9:9b:82:a9:62:06:18:08:59:d9:12:
         c1:c6:c0:fb:46:8f:79:91:4f:b4:95:d7:31:c8:ac:9d:c8:84:
         dd:e7:9c:b0:8d:e2:39:43:f4:96:c3:6c:6c:8f:f8:de:f1:21:
         dd:a4:78:46:74:79:fa:87:dc:3e:2e:07:fc:c7:5c:04:da:b0:
         85:82:cc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:23:30 2026 by rpki-client