Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
File:                     eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft (raw, json)
Hash identifier:          eEshXYCcKmb/Oqvtn6AuLjn9zLP4CYGM6l3Snpl6VjA=
Subject key identifier:   5B:B2:D4:1F:FF:36:9B:64:D5:C1:AE:FD:84:BC:65:D2:E2:75:44:B8
Authority key identifier: 79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9
Certificate issuer:       /CN=7946c5601064101b1b54cf5c6efcd407f17911b9
Certificate serial:       01A17B1663E2B8DE09C8029D7C1686C64E5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
Manifest number:          11A6
Signing time:             Tue 27 Oct 2026 02:00:27 +0000
Manifest this update:     Tue 27 Oct 2026 02:00:27 +0000
Manifest next update:     Wed 28 Oct 2026 02:00:27 +0000
Files and hashes:         1: 9yiB2kgtBAsvl_hUtTF_9T1_6hA.roa (hash: LvAW/dorcWJs7ZFyV1eDoNVGXIMQa9jTmGb0oFcyF74=)
                          2: eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl (hash: QMH+K85z9LTuZA/RCSAdziDqm767ASsCxWEkFtJ00PA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 02:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:16:63:e2:b8:de:09:c8:02:9d:7c:16:86:c6:4e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7946c5601064101b1b54cf5c6efcd407f17911b9
        Validity
            Not Before: Oct 27 02:00:27 2026 GMT
            Not After : Oct 28 02:00:27 2026 GMT
        Subject: CN=5bb2d41fff369b64d5c1aefd84bc65d2e27544b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:0a:4c:13:e3:4e:d3:21:75:73:ef:d5:95:
                    53:32:4c:43:0d:75:00:87:39:95:4a:63:95:f9:e1:
                    a1:5a:d7:25:f2:96:48:48:86:64:f6:5e:b0:87:9a:
                    58:ad:a2:29:42:90:fb:74:ce:9a:2f:46:32:d3:ec:
                    dc:8c:b3:2c:a2:d2:69:60:0d:bb:c7:e4:95:66:fc:
                    8a:0b:ca:2f:a2:3e:7f:0e:80:a4:94:3e:79:64:30:
                    96:92:39:7a:99:06:a8:f4:46:b1:d8:05:08:94:4b:
                    c4:89:56:60:9b:d5:ee:0b:a5:66:77:58:50:0b:e6:
                    50:57:1c:b7:ff:50:34:9f:ea:19:39:f4:c7:43:48:
                    6a:90:00:46:c3:0d:d1:f5:1a:a5:5e:ee:01:5f:24:
                    97:05:5c:83:4f:04:b6:5e:64:d5:9a:99:7a:e8:83:
                    9c:24:68:71:a8:ad:6e:07:2f:31:dc:c7:fe:e6:b3:
                    95:f7:24:d9:a7:16:d7:3b:81:f0:38:20:16:7c:3c:
                    b6:fe:08:6e:63:60:e5:cb:f2:6b:10:7a:a9:6e:ec:
                    f1:0c:47:ce:f2:0a:21:f0:75:f8:1b:e4:61:e3:8c:
                    7f:96:a4:a4:3b:6a:4e:b6:73:4f:d3:a9:be:cb:39:
                    26:1e:c6:be:5c:08:df:71:6d:72:c8:0b:90:97:cd:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B2:D4:1F:FF:36:9B:64:D5:C1:AE:FD:84:BC:65:D2:E2:75:44:B8
            X509v3 Authority Key Identifier:
                keyid:79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:fa:06:55:b8:2a:c1:a1:b7:49:92:b0:7b:81:32:64:2a:f9:
         71:cc:10:e8:46:8b:e8:6f:8a:41:3a:0e:d8:3d:b3:6e:0e:bf:
         52:53:8e:0c:e9:17:52:d9:2f:b9:90:db:7d:c6:ef:63:77:90:
         a0:ab:1a:d7:40:62:4b:3d:fb:a5:fb:1a:d7:52:9f:2b:45:52:
         e5:fb:11:ff:e8:32:58:43:3e:1f:c9:cc:ba:4e:9f:bc:f9:74:
         9a:a2:e3:04:7c:70:d5:c6:b5:9c:81:7a:19:52:d0:70:05:8b:
         85:7d:a5:53:00:e7:65:28:e9:f5:68:0f:e5:4a:90:51:c2:d7:
         b6:d0:ef:8e:26:ea:55:e2:b2:39:de:49:4b:e8:b2:e4:3e:31:
         d0:c5:8e:f0:60:8c:13:7f:a0:00:8b:85:61:4d:0b:b0:5c:94:
         17:0a:d1:0b:89:72:81:b4:b0:af:8c:2f:65:9a:5e:85:7b:50:
         c6:61:79:8d:f0:1d:2a:a0:4a:4e:a9:b1:97:de:0e:4a:40:a3:
         d8:cb:87:6d:38:54:09:03:48:84:2f:92:84:74:7d:ae:a9:ec:
         0e:9d:ba:f1:cc:d8:2c:b6:39:44:68:be:5d:4e:d0:18:cc:45:
         a1:fb:5a:15:99:8a:d5:47:b4:2c:52:53:df:74:f5:e5:a5:f1:
         d2:36:5b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:48:44 2026 by rpki-client