Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
File:                     etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json)
Hash identifier:          8MrNYTmgJv/uK3AmevMzm1Os5ioCwWvqr+nyuMrZRX0=
Subject key identifier:   C8:A5:17:2E:48:38:CE:73:3E:3C:9E:A6:84:8E:B6:80:01:0B:77:8A
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Certificate issuer:       /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial:       01A18F798A019227E50D32AD96F44AB7C751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
Manifest number:          08E3
Signing time:             Sat 31 Oct 2026 01:01:09 +0000
Manifest this update:     Sat 31 Oct 2026 01:01:09 +0000
Manifest next update:     Sun 01 Nov 2026 01:01:09 +0000
Files and hashes:         1: eCo9qXRcDZLgJlgoHLS9NExTbx4.roa (hash: BYg8Ba7NDfA7mgNndMx+S8c/mZhCBPail+1jI3QYxnk=)
                          2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: xcEVMFE4op/G/WcUnI4HEacm1mpinZBpyCp/pXJ5I2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 01:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8f:79:8a:01:92:27:e5:0d:32:ad:96:f4:4a:b7:c7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
        Validity
            Not Before: Oct 31 01:01:09 2026 GMT
            Not After : Nov  1 01:01:09 2026 GMT
        Subject: CN=c8a5172e4838ce733e3c9ea6848eb680010b778a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:50:e6:6b:2c:e1:60:b2:df:fc:36:9d:d5:
                    00:d0:0c:a0:d8:d5:1b:2d:5c:f8:6b:90:20:d4:37:
                    ba:6a:37:f7:14:4b:d0:6a:ff:9d:b8:cb:34:60:e7:
                    8c:62:11:a2:69:cb:00:8c:23:52:c0:d8:a8:7a:09:
                    a4:cc:cc:88:36:67:c2:9a:4d:f2:dd:2e:f3:61:65:
                    54:03:d1:35:bb:c1:67:0e:f3:b6:e1:2a:1b:04:6e:
                    f5:d0:f2:ab:ff:29:42:41:8b:8b:e9:e2:61:e6:48:
                    bc:4f:30:59:2a:6e:68:a4:5b:1a:c3:09:15:c0:fc:
                    1f:69:b6:d5:b4:9d:c8:29:62:55:c9:e3:49:f9:ec:
                    fd:30:43:8b:2e:fc:b7:99:86:cc:c7:fa:ef:50:d7:
                    38:69:3a:14:0e:81:05:8e:52:d0:e5:df:78:8c:c9:
                    ed:ca:6f:dd:2e:cc:0c:71:a3:61:ed:b9:1e:f5:2e:
                    c5:f4:6d:10:69:0d:14:05:29:d0:72:c6:96:ec:2a:
                    fe:23:70:17:fc:da:73:87:fb:92:55:fb:d8:18:a4:
                    3c:aa:22:ad:e1:d1:12:03:cc:45:66:51:7b:1f:51:
                    87:26:38:11:25:1e:19:d5:00:af:e7:d9:5d:b2:9e:
                    bb:2a:26:56:61:6f:8b:75:1a:85:cd:87:65:e6:48:
                    a0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A5:17:2E:48:38:CE:73:3E:3C:9E:A6:84:8E:B6:80:01:0B:77:8A
            X509v3 Authority Key Identifier:
                keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ed:d2:e5:ed:ef:8c:2d:95:53:64:99:72:36:f8:01:cc:a5:
         27:6e:8b:53:6e:67:ee:5d:06:4a:0b:b8:42:b2:34:65:3d:a9:
         d3:ba:da:42:66:f9:ab:72:4b:44:be:8a:32:c2:ed:7c:c0:c3:
         f2:5b:35:e4:3e:d2:f1:60:8d:15:e3:eb:63:ec:94:41:7e:bc:
         c6:b7:cd:b1:3e:d0:ec:8b:21:4f:d5:3c:78:32:77:6c:6d:a6:
         9e:03:b5:3d:e5:87:bb:50:e3:c2:60:ee:d7:be:a4:95:f1:c2:
         0b:18:49:d1:aa:ce:45:71:eb:72:22:09:04:11:db:1f:59:09:
         e1:5c:d9:98:40:62:ef:fd:14:f2:0e:e8:4e:de:71:cb:d3:37:
         ee:56:eb:49:52:a0:56:90:fe:ba:e2:7b:d5:5b:e3:7e:ef:b7:
         b5:1d:75:0d:40:de:33:0d:40:14:58:ac:81:36:e4:c1:73:b6:
         b0:82:5d:a0:03:b4:ab:95:e7:e1:95:f4:f2:b3:21:85:c0:b1:
         01:7c:29:f9:29:8c:a9:bb:6b:ba:9a:b8:fc:76:ef:8d:c1:40:
         6b:f7:25:ed:ef:2c:2e:4c:a1:34:b1:d8:6d:6f:28:27:61:8f:
         e5:6a:e9:e0:de:fa:b6:98:20:15:b9:30:0c:85:14:75:a5:b8:
         35:9a:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:41:03 2026 by rpki-client