Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          EgtIMug8Sxw4Mm/axuLV3WYlkajB13hSxNLnDafxlFI=
Subject key identifier:   E7:1E:C4:32:70:7A:39:E9:88:BF:BC:90:D0:22:43:59:17:7B:B7:FA
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       01A0CEC854DDAB06305B1FE399E82032A3CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          1289
Signing time:             Wed 23 Sep 2026 15:00:30 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:30 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:30 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: jDH92ypG0vS18Jz5I3p8y9EG+LBaVv8GhryzkRCksic=)
                          3: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          4: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
                          5: yT1RKaA_jW_Fs_q2Xta-wqJ2rA4.roa (hash: Yhagr78CIxoIwhFIExPGHD+JkDFI98BZt35S7gqnNxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:54:dd:ab:06:30:5b:1f:e3:99:e8:20:32:a3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Sep 23 15:00:30 2026 GMT
            Not After : Sep 24 15:00:30 2026 GMT
        Subject: CN=e71ec432707a39e988bfbc90d0224359177bb7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d2:a6:51:13:2a:5a:90:2f:36:f6:ca:c3:a5:
                    0e:2a:f9:d3:18:ba:84:53:af:43:97:a7:29:f4:ca:
                    05:ec:fd:5e:06:d1:5f:77:60:c8:65:a8:0e:e1:24:
                    59:a3:67:3d:70:78:25:60:aa:31:a2:84:48:0a:69:
                    7f:04:20:0b:3b:2d:38:35:f1:6f:1c:ec:3b:73:7e:
                    8d:56:70:ad:0c:51:a4:9b:d6:88:0a:96:a9:b6:3c:
                    db:82:e2:bd:51:70:b2:6b:ae:59:b0:79:74:f4:8b:
                    8f:5e:bf:5e:f0:3c:99:17:92:4b:42:01:f6:69:e7:
                    42:32:43:c3:95:35:7d:5b:b7:ec:f3:3c:33:80:0b:
                    11:88:ce:18:97:74:a5:6e:51:fc:f5:cc:80:c2:c5:
                    d5:08:a7:fb:f9:1c:83:43:24:a7:2f:c7:e4:7a:5b:
                    16:cf:a6:c6:09:78:31:d4:5e:50:29:a3:d1:4a:ae:
                    e7:a6:b9:fd:88:59:7a:4d:58:74:48:34:5f:17:ea:
                    ee:b3:07:92:3b:7a:07:80:c1:ac:a9:9d:94:b2:ad:
                    3e:25:3a:64:46:45:46:d7:b8:a7:b2:85:2b:b8:bf:
                    1f:70:c1:c9:ae:28:a4:d3:d8:dd:47:f3:2b:ff:fc:
                    14:84:a3:54:84:e9:73:8d:66:7d:c7:38:93:bf:41:
                    ee:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1E:C4:32:70:7A:39:E9:88:BF:BC:90:D0:22:43:59:17:7B:B7:FA
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:06:9a:83:7a:2f:44:3d:f1:bc:e2:3b:f1:a2:e5:1b:f8:0a:
         cf:6f:28:41:0d:96:55:4d:d5:1d:ab:28:d1:05:43:ab:70:cd:
         b2:b8:d0:b3:07:40:d3:70:a6:ca:8b:c5:46:98:a6:ae:fd:df:
         c6:dc:48:6f:20:52:d8:9a:44:a8:0e:20:20:8b:e9:a0:17:d8:
         cc:d5:c5:b1:79:2e:d3:9e:12:a0:45:97:78:28:ec:7c:4b:62:
         9c:2e:4e:51:03:a7:5d:d9:25:b3:b8:b7:77:c8:e5:bf:9f:fb:
         61:ab:31:20:3e:ee:b7:b0:f2:67:73:95:d7:83:f3:a9:b6:ce:
         8b:33:6c:0d:ab:a5:9c:03:4a:e3:e2:22:1c:c9:d1:22:a0:0b:
         10:16:61:f5:29:46:10:dd:15:63:de:22:a4:3c:5f:cf:2e:23:
         0a:6a:22:e8:e5:b1:97:ff:ca:10:03:f4:9e:21:d3:b6:c6:83:
         c6:c2:a9:ed:0e:c0:8b:b0:1b:56:b7:b2:74:8b:e4:eb:f3:c1:
         ef:29:88:b6:36:9a:7c:ed:a0:2e:71:fa:ff:05:56:0c:ed:4d:
         09:7c:c2:1b:e9:2b:6d:56:b2:9b:e7:4e:89:56:47:c0:82:45:
         c3:19:3c:6f:09:4d:a4:87:41:f9:c8:97:be:70:0f:85:c5:0e:
         17:20:66:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:22:24 2026 by rpki-client