Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          EKrKoNlvfACxyD01UdniXQSNaik09oK1OKaSluKToYc=
Subject key identifier:   D3:95:7D:C1:D0:EF:02:68:33:5B:FA:C3:9B:28:12:0D:60:11:5E:47
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       01A15DB0E98337261AA0AD7FB252BDECD9A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          12D3
Signing time:             Wed 21 Oct 2026 09:00:37 +0000
Manifest this update:     Wed 21 Oct 2026 09:00:37 +0000
Manifest next update:     Thu 22 Oct 2026 09:00:37 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: kD7KurCJIIwmDcfCwTR2+zkjX+SfcJ6Rp6KVHPsUtNg=)
                          3: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          4: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
                          5: yT1RKaA_jW_Fs_q2Xta-wqJ2rA4.roa (hash: Yhagr78CIxoIwhFIExPGHD+JkDFI98BZt35S7gqnNxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5d:b0:e9:83:37:26:1a:a0:ad:7f:b2:52:bd:ec:d9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Oct 21 09:00:37 2026 GMT
            Not After : Oct 22 09:00:37 2026 GMT
        Subject: CN=d3957dc1d0ef0268335bfac39b28120d60115e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:ff:9e:1f:fb:ac:23:25:af:9b:58:a6:4c:
                    83:23:5d:ce:96:5b:15:dd:2e:2a:6d:bf:57:dc:fb:
                    a4:71:b5:5c:bb:e6:83:36:ff:40:6b:2d:c4:06:d4:
                    28:8a:2c:8b:a2:5e:4b:5f:48:ff:1e:40:36:b3:cb:
                    86:e7:60:2f:88:9f:f8:a7:e4:eb:21:d4:25:83:55:
                    9e:55:9e:1a:d9:5c:b8:c2:ec:fc:d1:aa:b4:5c:73:
                    04:f6:78:2b:f3:7f:7f:fb:c0:0c:08:74:5f:97:f9:
                    b4:88:7d:42:bc:7b:20:a5:8f:56:ad:1e:99:b5:94:
                    44:05:9c:65:66:aa:9f:2d:c4:91:34:3b:22:dd:b9:
                    69:00:e3:da:6b:0f:30:6f:b0:98:c3:b8:63:17:56:
                    91:0b:8f:eb:92:75:b5:42:db:a1:39:b9:b3:56:78:
                    e6:00:3e:2a:ce:c9:a5:08:a3:23:cb:ed:cd:f6:86:
                    f4:ff:e8:59:a6:39:54:5f:3b:41:24:8d:d6:97:f0:
                    61:fd:6d:a2:80:86:f6:6f:22:71:b2:2e:0a:da:08:
                    a1:42:d2:aa:7c:a7:f3:0d:b8:93:7d:d2:6f:b1:b1:
                    6c:15:d3:8d:da:c3:04:4e:be:1a:1c:e9:4a:dc:94:
                    05:94:30:b8:c3:e0:d7:ff:f3:16:b3:83:c5:39:75:
                    e9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:95:7D:C1:D0:EF:02:68:33:5B:FA:C3:9B:28:12:0D:60:11:5E:47
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f0:52:13:29:f2:92:ba:82:71:e1:5d:30:2b:dc:de:5f:b8:
         fd:5c:4e:04:70:7a:c5:4d:8f:2d:df:18:ae:08:a3:1a:ee:73:
         c3:fa:17:a7:6d:69:f6:d4:6b:30:0c:75:79:92:a5:87:a3:26:
         76:e4:cb:00:88:4d:ec:dc:47:3e:1d:1d:2c:b4:7d:27:b6:49:
         0d:40:73:fc:93:e0:ff:dd:20:49:cc:51:b6:43:90:9b:58:93:
         be:15:05:01:ea:47:68:5d:28:74:3d:bd:ac:30:b0:bf:85:8f:
         e9:86:78:01:0f:59:61:fb:52:0a:54:a1:66:78:16:1f:fb:f8:
         38:72:5c:52:20:95:3d:2e:d1:8b:dd:84:20:ac:2c:be:36:ce:
         eb:1b:9c:3b:8f:f7:8e:b3:07:bf:97:11:c0:cd:89:a2:6a:61:
         22:85:40:26:71:fe:e9:64:0a:e9:1d:c0:1b:8e:3b:94:a1:a3:
         00:f2:e0:db:83:81:6c:bd:db:ff:79:69:47:a5:d7:22:a0:db:
         49:7b:8a:44:90:4e:86:a4:ba:bd:b5:38:ce:34:60:cd:5e:c8:
         02:04:36:85:2c:de:9e:c5:9d:4f:cf:72:b3:d1:4d:b9:a0:a5:
         bc:84:99:1e:1e:e4:59:d2:d5:e8:b8:59:71:39:3f:bd:89:c8:
         06:00:d9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:14:16 2026 by rpki-client