Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          EMG0IBwB8HKzH+Ps27m2zB9DCexdGUklpM1lxxAv7Y0=
Subject key identifier:   54:49:1C:B6:26:F0:74:59:B0:44:E9:A5:13:30:12:24:BD:34:B6:0C
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       01A19D6BD67EFD224CE0D2772113006CD7AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          12F4
Signing time:             Mon 02 Nov 2026 18:00:52 +0000
Manifest this update:     Mon 02 Nov 2026 18:00:52 +0000
Manifest next update:     Tue 03 Nov 2026 18:00:52 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: IPWbb5Hqb7DqkxhVAcSwCE2N1NeO17ix9QapVdUycwY=)
                          3: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          4: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
                          5: yT1RKaA_jW_Fs_q2Xta-wqJ2rA4.roa (hash: Yhagr78CIxoIwhFIExPGHD+JkDFI98BZt35S7gqnNxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:9d:6b:d6:7e:fd:22:4c:e0:d2:77:21:13:00:6c:d7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Nov  2 18:00:52 2026 GMT
            Not After : Nov  3 18:00:52 2026 GMT
        Subject: CN=54491cb626f07459b044e9a513301224bd34b60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5a:f3:e2:a6:8f:bb:a4:16:e9:bc:f8:e6:e8:
                    60:f5:1e:92:5f:0d:6d:7b:e5:ff:e0:bd:a8:55:41:
                    7a:99:b9:94:64:ad:d0:7d:d9:41:b2:a5:d9:79:28:
                    81:b5:a4:79:2f:41:8a:7b:71:15:56:43:28:08:f8:
                    41:ad:91:be:6b:92:d8:bf:55:c6:d8:a4:42:af:dc:
                    28:e6:06:3f:48:65:1e:ec:9a:e2:86:f4:97:e3:94:
                    c7:22:07:11:2a:8c:72:8e:0c:73:4e:2a:3c:ca:73:
                    9e:cc:7e:6c:64:cf:ea:4b:36:b7:30:9f:af:5a:c3:
                    4f:2e:18:8a:8f:0c:65:5a:a5:2d:37:bd:17:14:70:
                    65:47:19:6d:8c:6c:26:b3:62:7c:0c:b0:0a:7c:22:
                    c0:2e:20:11:6b:81:7c:13:d3:d5:10:31:a7:bf:71:
                    1f:b5:5d:75:58:56:ff:22:e1:01:60:96:54:5b:51:
                    ee:72:15:c7:62:48:c9:1b:04:ba:4e:e0:85:fe:c4:
                    6f:24:60:90:d0:b3:0a:3f:51:27:ad:af:9a:4f:17:
                    90:66:08:86:8a:02:87:73:81:4d:4f:25:e7:9e:ed:
                    c9:0c:fa:96:5e:aa:83:a0:f6:d8:0c:0f:4b:13:dd:
                    62:8f:be:bb:26:11:d4:dd:4a:cc:75:3a:c1:dc:f6:
                    0b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:49:1C:B6:26:F0:74:59:B0:44:E9:A5:13:30:12:24:BD:34:B6:0C
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:cf:46:ee:73:67:77:8f:87:eb:17:e5:c9:ec:7c:3d:12:92:
         6f:76:8d:19:54:55:70:a5:2f:83:94:26:2a:b6:25:e1:5c:c5:
         30:1b:9a:ca:ac:27:9e:1d:55:86:17:30:97:e3:82:21:f0:81:
         d2:81:bd:fa:03:d3:d9:cc:ef:a3:0f:67:e7:fe:bc:e6:7e:85:
         5a:50:4f:11:a6:2d:51:6c:e2:ce:ef:be:3c:98:ab:4d:40:6b:
         55:e5:ca:ff:18:07:14:2a:a8:a7:97:3c:3c:a6:89:10:3f:13:
         46:44:bc:95:a2:25:cb:0c:a6:51:b9:24:b1:e6:e5:b8:6c:7f:
         d2:13:50:e1:eb:ef:d7:7c:57:05:cb:b0:17:b5:62:d5:00:fb:
         73:18:5d:25:1d:f1:f3:df:d7:3d:bd:5d:bf:09:4c:f6:ac:e8:
         ce:59:25:ba:f9:4b:4c:e4:b6:0e:a1:c9:3f:33:04:89:c0:90:
         13:94:4b:b0:0c:9e:93:aa:f0:00:54:df:19:a5:e5:74:ca:2e:
         c3:2d:8e:68:3e:b4:00:22:70:05:1b:77:00:97:c4:65:fc:ac:
         52:c0:a3:36:73:d0:bd:94:b7:8d:12:67:37:59:d8:e7:36:9c:
         4e:ea:ab:db:af:ce:da:52:09:84:96:47:3d:a9:09:d5:90:2d:
         bd:9f:c7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:30:47 2026 by rpki-client