Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          3IV4eHaANjCQBH5IWELlvtIAQf0QYGym10wczpXAcNA=
Subject key identifier:   39:C7:7A:3B:8F:31:68:0A:0C:93:DB:1C:50:DD:68:82:BA:E9:B2:0E
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       01A1C40BB390C623241C90067F49746CA167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          1308
Signing time:             Tue 10 Nov 2026 06:01:03 +0000
Manifest this update:     Tue 10 Nov 2026 06:01:03 +0000
Manifest next update:     Wed 11 Nov 2026 06:01:03 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: V62hk6xevhRTNnOa0JcsT50E60OrR4+8J8YHHvqhNlw=)
                          3: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          4: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
                          5: yT1RKaA_jW_Fs_q2Xta-wqJ2rA4.roa (hash: Yhagr78CIxoIwhFIExPGHD+JkDFI98BZt35S7gqnNxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Nov 2026 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c4:0b:b3:90:c6:23:24:1c:90:06:7f:49:74:6c:a1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Nov 10 06:01:03 2026 GMT
            Not After : Nov 11 06:01:03 2026 GMT
        Subject: CN=39c77a3b8f31680a0c93db1c50dd6882bae9b20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0b:c2:16:b2:dd:44:e6:52:e2:3c:32:55:dc:
                    07:74:03:8a:83:74:dd:b3:21:df:2e:cf:8f:9c:d1:
                    2b:20:95:76:25:fe:8d:1f:90:ce:7d:ec:5c:8a:c4:
                    31:67:a7:13:92:6b:3b:89:b6:8a:b7:6f:54:2a:91:
                    b6:41:24:c8:e4:27:8b:64:be:7f:f3:5b:47:00:72:
                    08:24:11:57:16:34:5f:e7:04:fd:80:b0:15:4c:2e:
                    ad:7d:80:95:0d:b5:a5:f9:dc:e3:b6:7b:e7:7d:b1:
                    24:02:ad:7d:9e:a4:bc:d7:1e:96:12:bf:ae:5d:c3:
                    73:c7:ea:4a:43:26:bf:80:75:fe:d7:bb:a0:24:14:
                    ab:a1:40:5a:9f:85:5e:c9:fc:92:d3:ce:52:df:0b:
                    12:df:6d:19:49:19:dc:0b:03:f5:88:f6:57:51:e6:
                    ec:2e:d3:d6:68:94:d5:95:b7:80:ba:c7:b0:7d:7a:
                    a2:c0:a4:83:0b:bd:2e:87:42:8b:e9:e6:c1:e5:ce:
                    32:2d:60:9b:bb:6b:09:fd:b8:ea:74:69:a9:47:ab:
                    f8:8c:f4:0b:18:37:42:7a:68:57:3e:d4:ae:13:46:
                    6b:8a:d7:7d:cf:da:b7:f1:c7:52:37:6c:0e:38:1a:
                    65:1b:60:d7:7f:c8:42:5d:62:6a:17:b7:12:f0:e9:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C7:7A:3B:8F:31:68:0A:0C:93:DB:1C:50:DD:68:82:BA:E9:B2:0E
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:53:a3:ce:0a:40:cb:46:7a:a3:b4:e2:1e:05:f8:d3:4d:b5:
         37:a0:b8:3d:47:92:9a:dc:d3:a2:26:72:2d:99:ab:71:b4:e2:
         cd:c3:bd:7a:8a:71:30:46:10:90:5f:e6:a2:d6:3c:2c:db:36:
         83:fa:7a:fb:e0:a7:b5:18:6f:1d:6b:ce:db:ac:70:92:d5:52:
         3d:f1:cd:3d:86:e8:7d:29:c1:ac:54:d8:4d:25:68:20:e4:5b:
         64:a4:89:d1:0a:00:b3:d9:d8:56:47:6c:20:46:bf:8e:32:50:
         22:00:f7:e5:e6:35:c6:c3:8b:88:96:5f:40:40:0d:2f:ce:53:
         43:9c:67:89:d3:8d:ba:f6:06:58:98:6d:26:8c:33:a5:c9:42:
         6c:7b:5e:a2:79:61:d4:30:f5:06:9b:42:3a:8b:a9:7f:ea:6d:
         e8:5f:bb:08:46:df:10:c4:76:f6:d8:71:07:12:d8:99:6e:57:
         e5:5e:43:f6:45:6d:fb:b4:54:66:5d:0e:90:4b:cd:64:9c:4a:
         cf:73:32:45:8a:3a:12:d1:cb:44:37:f6:24:0d:97:cb:ff:34:
         35:30:5d:bc:2e:e3:44:86:0f:1d:de:a3:18:f1:3a:18:41:16:
         20:00:36:af:6e:de:90:79:47:b5:0f:70:84:95:ee:37:c0:02:
         39:3c:1d:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHEC7OQxiMkHJAGf0l0bKFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTg0M2QzYTY3YmYyMDJkMGFlMjNkZjk1ZTE0ZWE4NzFk
OGYxNWQwHhcNMjYxMTEwMDYwMTAzWhcNMjYxMTExMDYwMTAzWjAzMTEwLwYDVQQD
EygzOWM3N2EzYjhmMzE2ODBhMGM5M2RiMWM1MGRkNjg4MmJhZTliMjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngvCFrLdROZS4jwyVdwHdAOKg3Td
syHfLs+PnNErIJV2Jf6NH5DOfexcisQxZ6cTkms7ibaKt29UKpG2QSTI5CeLZL5/
81tHAHIIJBFXFjRf5wT9gLAVTC6tfYCVDbWl+dzjtnvnfbEkAq19nqS81x6WEr+u
XcNzx+pKQya/gHX+17ugJBSroUBan4VeyfyS085S3wsS320ZSRncCwP1iPZXUebs
LtPWaJTVlbeAusewfXqiwKSDC70uh0KL6ebB5c4yLWCbu2sJ/bjqdGmpR6v4jPQL
GDdCemhXPtSuE0Zritd9z9q38cdSN2wOOBplG2DXf8hCXWJqF7cS8Oml9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnHejuPMWgKDJPbHFDdaIK66bIOMB8GA1UdIwQY
MBaAFHmoQ9Ome/IC0K4j35XhTqhx2PFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEt
YjRkZDIyNzU4OTUxLzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEtYjRkZDIyNzU4OTUx
LzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVOjzgpA
y0Z6o7TiHgX40021N6C4PUeSmtzToiZyLZmrcbTizcO9eopxMEYQkF/motY8LNs2
g/p6++CntRhvHWvO26xwktVSPfHNPYbofSnBrFTYTSVoIORbZKSJ0QoAs9nYVkds
IEa/jjJQIgD35eY1xsOLiJZfQEANL85TQ5xnidONuvYGWJhtJowzpclCbHteonlh
1DD1BptCOoupf+pt6F+7CEbfEMR29thxBxLYmW5X5V5D9kVt+7RUZl0OkEvNZJxK
z3MyRYo6EtHLRDf2JA2Xy/80NTBdvC7jRIYPHd6jGPE6GEEWIAA2r27ekHlHtQ9w
hJXuN8ACOTwdjw==
-----END CERTIFICATE-----
Generated at Tue Nov 10 14:32:59 2026 by rpki-client