Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          aCZpi2J3XHT9jcgzihj3dIr8oa9IuC9kQ3Xq7wt7aHA=
Subject key identifier:   B9:F4:06:68:3C:7C:CD:94:9F:BD:AD:51:1C:65:36:39:30:B4:2D:0B
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       01A11FE53F96A7296507571EA85407BBD8EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          12B3
Signing time:             Fri 09 Oct 2026 09:01:19 +0000
Manifest this update:     Fri 09 Oct 2026 09:01:19 +0000
Manifest next update:     Sat 10 Oct 2026 09:01:19 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: nA1xxzNcKtrqSxXHzqdY5N44qQ28BnWbKVBjyACDXrY=)
                          3: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          4: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
                          5: yT1RKaA_jW_Fs_q2Xta-wqJ2rA4.roa (hash: Yhagr78CIxoIwhFIExPGHD+JkDFI98BZt35S7gqnNxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1f:e5:3f:96:a7:29:65:07:57:1e:a8:54:07:bb:d8:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Oct  9 09:01:19 2026 GMT
            Not After : Oct 10 09:01:19 2026 GMT
        Subject: CN=b9f406683c7ccd949fbdad511c65363930b42d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:d5:c6:1d:7f:bd:a1:fc:1b:86:6f:76:1d:
                    51:cc:64:d1:9d:b9:83:ff:c0:41:4f:50:fe:78:a7:
                    fa:37:c8:98:a7:70:29:02:47:0c:1b:14:d6:47:54:
                    24:54:4b:b8:43:3b:5f:58:fe:82:78:0a:2c:38:4a:
                    01:ea:75:d4:f9:ae:7b:7b:1f:48:02:9c:6d:9e:29:
                    e0:1f:3d:d4:62:61:eb:9f:be:b9:f5:8d:27:b3:e9:
                    a4:92:ac:fb:ea:88:54:1b:a8:79:6a:d8:ac:24:48:
                    73:e8:f8:b2:6e:15:37:73:20:3a:68:be:eb:24:ed:
                    4e:cb:c0:5f:18:d9:3f:16:94:41:20:71:0e:a9:36:
                    61:73:18:1e:cf:15:5c:54:84:8d:83:6a:00:aa:f7:
                    24:43:e9:c6:65:a2:35:58:5b:0f:3c:9d:b4:12:8e:
                    b0:53:b3:2b:d5:af:58:76:ea:a1:0f:b3:b6:6b:f2:
                    49:d7:f3:3a:0d:28:17:17:a6:a5:0c:0e:b0:88:7c:
                    33:c8:1b:37:69:3f:35:31:46:34:17:e9:06:bb:d9:
                    68:0a:f4:2a:fb:96:72:1f:81:da:e1:4e:38:cc:15:
                    7c:63:30:ac:22:eb:c0:f3:d0:d5:d2:de:ae:94:61:
                    a8:90:2d:07:79:de:c8:ed:dc:4e:36:97:88:3d:4e:
                    a3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F4:06:68:3C:7C:CD:94:9F:BD:AD:51:1C:65:36:39:30:B4:2D:0B
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0f:38:cd:19:a0:3e:17:d3:6d:eb:1f:6a:2a:33:40:9e:39:
         62:15:57:a6:fc:02:1d:39:1f:c8:38:d7:42:6b:96:87:b7:ce:
         e8:6d:99:10:81:d9:f0:e0:13:18:15:fe:f7:56:03:d6:eb:bf:
         b4:ea:80:9e:56:38:52:3e:30:33:90:4e:9e:ac:31:54:b8:0c:
         d8:89:60:09:df:05:65:5c:80:52:fb:e6:2a:cc:26:eb:2f:d8:
         a9:43:a4:18:12:e8:37:b2:16:09:5d:8a:2c:19:8a:fc:f8:ec:
         f1:c3:1e:2c:52:07:06:60:2f:da:5a:1a:56:e5:41:bd:cb:31:
         3a:7a:cf:ed:64:76:6c:18:e7:72:e8:1e:a9:c2:33:21:dc:3c:
         45:7f:c9:c5:b4:d1:88:cd:eb:8f:6b:34:de:1e:54:dd:37:f8:
         f9:0b:30:8a:8c:db:60:6d:34:31:43:7e:6c:7f:c9:28:8d:2c:
         0f:f0:f6:cb:0a:9f:f2:f4:74:6d:29:d8:64:d5:fe:63:8c:f0:
         42:65:78:85:df:51:0a:89:4d:c5:b9:6c:5a:4e:02:ba:b1:f5:
         14:46:80:44:b4:e3:d9:0c:0c:68:01:52:2f:61:b3:8c:fc:0c:
         cf:61:0e:ce:98:67:77:12:18:1b:67:b3:3a:96:a2:c5:4b:db:
         aa:e2:fb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:50:32 2026 by rpki-client