Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          RKZplArgsVtJ3jQ641tcb7UWWI5YvHt7s/J3q3Kmiso=
Subject key identifier:   F5:32:4F:B9:81:6F:A1:ED:EA:5F:56:4D:8E:21:78:48:17:A5:23:F0
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       01A16D2454059396EF49CE854205BD97CAED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          12DB
Signing time:             Sat 24 Oct 2026 09:00:59 +0000
Manifest this update:     Sat 24 Oct 2026 09:00:59 +0000
Manifest next update:     Sun 25 Oct 2026 09:00:59 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: j1OYo2dNZEwWCswSFxjx8IwULT5xnosxBVeIRFh3zvE=)
                          3: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          4: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
                          5: yT1RKaA_jW_Fs_q2Xta-wqJ2rA4.roa (hash: Yhagr78CIxoIwhFIExPGHD+JkDFI98BZt35S7gqnNxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 09:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6d:24:54:05:93:96:ef:49:ce:85:42:05:bd:97:ca:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Oct 24 09:00:59 2026 GMT
            Not After : Oct 25 09:00:59 2026 GMT
        Subject: CN=f5324fb9816fa1edea5f564d8e21784817a523f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:60:dd:7f:23:b5:24:50:44:19:0b:73:24:7c:
                    88:3e:86:ea:27:61:df:83:91:a2:43:69:68:93:9c:
                    5b:9e:25:51:5e:00:ab:34:a4:1e:f7:e9:8a:0f:7e:
                    ac:f8:c2:66:f0:54:87:fe:08:dd:f3:8c:4b:83:7c:
                    1e:ed:cd:ce:84:4c:fb:b7:24:64:69:94:0d:57:de:
                    d9:fc:5b:21:c5:c3:b2:f1:cb:4e:1d:aa:8a:97:8d:
                    84:fc:20:df:8a:fc:c9:47:ce:78:c8:08:e8:a1:da:
                    47:6f:70:84:9e:23:f3:fa:97:5e:23:e6:5c:1e:00:
                    9c:08:6c:0c:ef:59:c2:ce:6d:5c:cd:73:9a:29:97:
                    a4:a7:74:af:23:19:c4:4b:42:c4:88:e8:74:39:9e:
                    03:7f:e9:40:c5:23:28:c8:76:0c:1e:c4:1d:59:29:
                    43:d9:2a:85:33:e9:02:89:86:7c:0b:7e:1e:95:e6:
                    86:77:da:e3:63:e3:63:f6:be:e8:9b:3e:51:a6:af:
                    ee:b8:8e:e1:f9:5f:08:67:9c:2f:08:d3:44:b9:a2:
                    91:ca:c0:96:83:31:a3:d6:76:98:83:32:34:b7:7f:
                    0d:d3:83:52:e3:e9:28:04:3e:b5:ea:c0:8c:52:5c:
                    5e:e8:6e:86:b8:a6:59:d8:84:fb:5e:8a:c2:c8:12:
                    1a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:32:4F:B9:81:6F:A1:ED:EA:5F:56:4D:8E:21:78:48:17:A5:23:F0
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:73:ab:2d:7f:1c:41:6c:b5:ae:2f:bc:a5:b1:e7:d6:fe:a9:
         15:2f:4e:f5:58:a1:9e:26:72:0b:a0:6f:cf:38:2b:b4:a3:68:
         35:e6:43:f3:1f:0f:fd:8f:c5:e3:f2:6e:22:6d:8b:d1:13:97:
         5c:55:67:0b:cb:8f:52:2a:5a:ed:2c:3c:84:f2:e6:40:9e:9d:
         18:bc:33:38:53:85:27:13:fd:bb:34:f4:95:38:fd:db:1e:f7:
         8b:b3:53:f9:2b:9a:84:f3:ce:75:0d:78:ae:35:47:62:9b:e1:
         5c:3d:ab:fd:25:2a:c2:44:d7:0b:e4:ab:76:d1:6a:81:9c:ec:
         d2:9d:a4:89:e5:81:b9:d5:c3:21:79:b1:c8:87:9a:8f:e4:54:
         9b:28:fb:b7:61:45:e8:34:ad:78:70:61:40:e9:f9:55:ab:01:
         84:75:85:c9:67:d1:54:bb:04:79:b1:5e:c8:80:dd:bc:24:70:
         28:10:2b:8a:23:0e:c7:ee:98:3d:fa:ef:dd:7c:08:20:5b:ee:
         3e:83:81:fd:4c:f4:07:b2:d7:4d:2a:e1:11:95:70:4a:95:e6:
         ec:86:d0:d9:14:74:73:8e:81:1a:94:60:13:a8:3d:ad:63:2e:
         ee:7d:57:be:85:8a:02:2b:15:f0:7e:6f:c6:ea:4d:14:16:d6:
         06:3c:fb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:43:08 2026 by rpki-client