Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          5ntyH31KEXgYdpSmGffTbduV0ByalKGYgXeqr6cLnEE=
Subject key identifier:   64:69:0C:B6:5F:35:EC:14:8E:EA:2E:E5:77:B1:43:3A:07:3C:FF:73
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       01A13334A52C90158DC1C7029B2B7EB9AF79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          12BD
Signing time:             Tue 13 Oct 2026 03:00:50 +0000
Manifest this update:     Tue 13 Oct 2026 03:00:50 +0000
Manifest next update:     Wed 14 Oct 2026 03:00:50 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: ONh2QFYDVDuSDSMaKKS1RmHT9dQRToAH2aLlOZ0K3EE=)
                          3: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          4: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
                          5: yT1RKaA_jW_Fs_q2Xta-wqJ2rA4.roa (hash: Yhagr78CIxoIwhFIExPGHD+JkDFI98BZt35S7gqnNxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:33:34:a5:2c:90:15:8d:c1:c7:02:9b:2b:7e:b9:af:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Oct 13 03:00:50 2026 GMT
            Not After : Oct 14 03:00:50 2026 GMT
        Subject: CN=64690cb65f35ec148eea2ee577b1433a073cff73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:9e:45:3e:5c:a6:4a:16:2e:1b:9c:93:43:
                    e2:c4:98:0a:7e:24:09:d2:dd:dd:d9:3f:b2:bb:4f:
                    92:00:48:7e:29:ca:e7:f0:f1:3f:48:f2:b6:bc:d9:
                    f3:1a:2f:07:56:f2:0e:c0:04:77:ba:8a:37:03:b3:
                    86:70:56:8c:47:d7:83:31:ab:4e:86:bc:6b:3c:81:
                    f4:d7:99:ca:41:fb:1a:dd:f2:75:33:38:c2:da:6b:
                    9c:36:7f:b9:a8:1b:25:57:2f:79:9d:ac:31:0c:76:
                    c1:ce:13:7f:1f:7b:3c:2e:54:4d:11:2c:c0:58:da:
                    1a:1c:77:a7:a4:78:4f:18:7c:37:6b:f1:16:38:6f:
                    f1:e3:97:37:dc:79:ac:ed:01:36:a1:09:1b:f7:18:
                    78:ed:b8:3d:8e:1d:ae:0c:d5:e9:c2:1c:a4:58:b8:
                    c5:f1:fb:55:cc:c5:9a:7b:4c:a1:fe:bf:6d:42:62:
                    1c:f5:d7:e4:75:22:b4:af:41:fc:46:d2:5e:2a:93:
                    40:fd:d6:c0:ce:11:ab:66:93:d0:fe:8c:ee:07:aa:
                    b4:5a:3b:c1:ed:16:80:d7:1a:ce:33:13:8e:a8:ec:
                    a9:71:69:5f:ca:09:89:18:e8:c3:1a:c1:20:53:c5:
                    77:cf:b8:3e:c2:14:97:2d:0e:f3:f4:58:8e:ef:7a:
                    e9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:69:0C:B6:5F:35:EC:14:8E:EA:2E:E5:77:B1:43:3A:07:3C:FF:73
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6c:68:80:7b:36:f9:c8:05:23:fd:a5:d9:93:e9:0a:6d:08:
         a9:68:09:83:f6:ec:ec:09:3e:60:da:25:3f:41:d5:9a:b2:7f:
         c8:4f:e0:4a:2c:dd:35:5c:a4:29:e4:b8:54:14:55:b1:52:13:
         21:e6:9a:05:03:0e:ad:83:b7:a7:61:14:ba:ad:5c:ea:1d:3f:
         d0:09:04:a3:e6:07:09:14:ab:c1:da:f2:a7:3d:9a:b7:7b:82:
         d9:02:53:3d:71:c3:ef:8d:11:d3:2a:3d:ce:a0:33:bf:16:96:
         31:b1:1f:df:b2:cc:14:c3:4a:73:d2:d0:e8:0c:e9:19:fd:6c:
         f8:2e:54:fc:72:9b:01:b4:79:19:65:0d:92:94:45:c1:07:55:
         8c:9e:fd:ef:4b:2d:22:a3:42:ea:62:ad:99:b9:8b:85:04:a2:
         c3:53:c6:2d:99:5f:88:17:d8:ca:ac:10:e2:d1:76:8a:0d:02:
         d6:51:34:82:14:0b:e3:9c:19:5b:c5:d7:50:05:01:3e:2a:a3:
         3a:06:51:f3:50:a8:ad:44:ae:ee:44:98:f4:71:a7:8e:db:60:
         c7:df:b0:07:27:2c:72:95:99:e1:8f:e6:1d:8b:e6:31:6e:ed:
         41:30:2e:25:70:ef:cb:5c:62:0a:f4:4b:25:4f:f7:c0:7e:37:
         54:31:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:11:57 2026 by rpki-client