Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
File:                     1EeBPOUqgj6h78mg9JM8XTNT7is.mft (raw, json)
Hash identifier:          dlV9qFaMF5Vm9lzfLpZaBvkNJMjyT4fvwm+tKEBGZeE=
Subject key identifier:   99:70:A0:72:1A:68:E7:9F:0C:9E:E8:0D:24:DF:B3:22:1A:71:ED:D9
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Certificate issuer:       /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial:       01A13D811F357FD94AF1A4ED43C9C6F49721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
Manifest number:          1204
Signing time:             Thu 15 Oct 2026 03:00:34 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:34 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:34 +0000
Files and hashes:         1: 1EeBPOUqgj6h78mg9JM8XTNT7is.crl (hash: Eo1R1H6tOlyfhS2ckv5Z0AuHI3oNjExfZdKXZqpXSyw=)
                          2: 3erXQOAGECj5Y6vmnhGhIcd5-n0.roa (hash: 2WH+ODOD46XHxqKVl9QqMpQ4varGLr3ciy4ehJamGPA=)
                          3: MPu6fCIQbDestuwTup6NlHm47os.roa (hash: /jMdojA5j2YqODXH/EpQYe19xNhK2fsG++ttAxdcuPc=)
                          4: zj1m99tPwrcxyT6BDJGJ3CugkIQ.roa (hash: twU1/m+1xw/8GtDgcT70cwUdWMg3Z1khilZnPoO3Wpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:1f:35:7f:d9:4a:f1:a4:ed:43:c9:c6:f4:97:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
        Validity
            Not Before: Oct 15 03:00:34 2026 GMT
            Not After : Oct 16 03:00:34 2026 GMT
        Subject: CN=9970a0721a68e79f0c9ee80d24dfb3221a71edd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:07:07:e8:54:47:48:81:96:50:13:8c:7b:23:
                    d1:28:83:2b:5a:af:89:62:d7:52:2b:a5:0a:76:4b:
                    8b:2a:73:2a:94:86:60:66:9d:e0:2f:ce:68:cd:d0:
                    2e:b9:94:59:ac:7b:7b:b6:6f:df:74:6e:d6:44:9e:
                    c4:bb:71:30:66:0e:48:7b:e7:89:90:a4:25:4e:9f:
                    70:4d:f3:40:28:b4:9f:bb:91:87:2d:1d:2f:59:c1:
                    5e:31:3e:88:97:2d:22:b5:91:c3:2a:b4:e1:04:09:
                    12:b0:49:32:a3:79:01:cb:0d:b0:88:55:d8:e0:7a:
                    0a:6b:e1:72:43:38:cd:c0:bf:16:d2:07:02:59:40:
                    36:89:9a:fb:f8:e6:f2:3d:6b:97:f7:f3:29:02:c2:
                    88:07:af:b3:92:eb:6e:69:7e:83:00:79:61:d7:ff:
                    cf:45:75:97:d1:7a:69:e2:d3:0a:4d:86:ca:a6:7d:
                    83:13:a1:45:ac:1a:18:e9:86:51:77:80:20:1d:3e:
                    ad:fb:7d:b9:65:9b:3a:97:28:d1:01:6c:26:13:29:
                    71:f7:d7:00:b5:59:df:da:7e:e4:e4:58:a2:65:79:
                    84:42:dd:d9:7d:5d:c3:7d:3c:d0:79:b5:11:23:c8:
                    88:8e:2e:94:0d:64:df:c9:a5:98:14:96:65:0b:34:
                    b4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:70:A0:72:1A:68:E7:9F:0C:9E:E8:0D:24:DF:B3:22:1A:71:ED:D9
            X509v3 Authority Key Identifier:
                keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:39:cc:58:da:59:c5:36:aa:71:df:6a:37:30:f0:0f:30:1a:
         1c:4d:ab:10:fb:3b:81:df:ad:2a:35:7b:ae:18:44:42:70:35:
         c3:6e:5e:e0:7a:b8:5d:24:36:f1:de:10:5f:25:6c:e1:f8:ea:
         92:d4:e4:e3:04:bc:86:99:80:11:7c:5b:27:e5:79:a1:75:d2:
         2f:ba:38:78:cd:c0:0d:b6:ec:e7:47:a2:1e:f4:cd:30:ad:39:
         df:c0:d4:d3:af:5d:20:3d:16:8c:c0:ea:4d:16:c2:80:81:03:
         4a:67:42:3e:f8:78:d2:bd:87:21:c0:9f:b1:d2:87:63:a9:6a:
         b3:ef:b6:e9:ab:ac:d1:80:97:82:16:36:bd:14:c7:7f:67:00:
         5d:a6:ab:9c:bd:95:1a:2a:45:12:f5:2f:92:4f:39:73:ed:45:
         79:56:59:6a:4b:42:e2:2b:a9:23:a4:51:9f:35:de:d2:04:81:
         bf:3c:6f:9c:31:7d:42:00:e5:d5:0c:fc:b3:7c:d4:29:37:03:
         fe:80:a0:fc:5d:54:e0:e6:43:7f:4b:dc:ed:7c:2e:60:d6:f9:
         9c:d0:e2:df:4d:9d:bf:30:de:e4:d0:49:78:c7:a1:bd:e9:61:
         7a:a1:d9:10:6a:f0:ba:c7:6d:d6:32:d6:36:d1:f5:a0:e4:9b:
         19:59:8c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:26:41 2026 by rpki-client