Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          1YZ4S1VBnBxIm6a3uBwuP00cAbLoN1JaqoQ61RXhSOo=
Subject key identifier:   DA:8F:00:EF:2F:4C:87:96:B3:F7:98:43:17:0D:B0:64:64:B2:7F:89
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       01A1182ADA6B261B7B090CB543379AE2A145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          12AF
Signing time:             Wed 07 Oct 2026 21:00:23 +0000
Manifest this update:     Wed 07 Oct 2026 21:00:23 +0000
Manifest next update:     Thu 08 Oct 2026 21:00:23 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: zmQkbNAOJUH/deDAdGcIbg4GOJ5Tjp8Li/qJ8WnWnqI=)
                          3: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          4: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
                          5: yT1RKaA_jW_Fs_q2Xta-wqJ2rA4.roa (hash: Yhagr78CIxoIwhFIExPGHD+JkDFI98BZt35S7gqnNxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 18:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:18:2a:da:6b:26:1b:7b:09:0c:b5:43:37:9a:e2:a1:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Oct  7 21:00:23 2026 GMT
            Not After : Oct  8 21:00:23 2026 GMT
        Subject: CN=da8f00ef2f4c8796b3f79843170db06464b27f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:5f:13:39:b2:de:4f:13:01:2b:0c:20:61:
                    56:7a:9d:dc:8b:2a:29:d0:7f:ad:08:05:8b:f4:a1:
                    2e:00:02:d8:c1:97:5d:7c:4a:dc:15:f6:c7:29:47:
                    b2:2f:92:76:40:d7:c3:4d:7b:e2:79:0f:82:3a:88:
                    18:34:9f:52:94:89:18:29:14:e8:9c:89:c3:cc:11:
                    09:4d:66:be:20:6e:2c:69:25:14:2a:9f:eb:da:98:
                    0d:88:50:c0:93:44:68:f7:81:b9:83:cb:57:9d:92:
                    6a:fa:8c:0e:a4:18:0c:92:99:28:10:c5:81:9b:a4:
                    cb:7c:40:d4:7e:60:e5:ee:f9:c3:1c:40:00:00:00:
                    3f:05:3d:bf:40:02:6b:c7:f8:60:60:c4:df:58:6d:
                    44:cb:96:00:e1:c3:6e:43:af:4c:5d:e0:00:76:a1:
                    bf:e3:ef:77:3a:25:cc:22:07:cc:8f:66:68:2a:00:
                    39:c3:63:c8:be:b7:ca:aa:2c:d5:99:99:3b:52:71:
                    a4:6d:39:3a:c7:05:bf:7e:34:aa:30:3b:fe:1e:20:
                    b8:87:09:32:7d:30:1f:eb:0e:e1:9a:f4:af:da:ea:
                    a8:ef:3c:92:2d:df:ef:dd:82:74:d8:6e:1c:f8:36:
                    f0:90:4f:32:4b:e5:1d:9b:fa:20:28:9b:49:1b:f2:
                    09:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8F:00:EF:2F:4C:87:96:B3:F7:98:43:17:0D:B0:64:64:B2:7F:89
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:53:85:7d:33:cd:b5:86:2e:bd:e4:ce:b1:f2:15:47:5f:04:
         a2:72:fe:c4:2c:62:e0:0a:2c:45:11:45:74:a8:a1:25:92:d4:
         51:79:8b:7f:af:42:8f:fd:12:94:da:18:75:59:42:b7:96:4e:
         1e:08:c8:59:00:4a:dd:5a:65:31:34:76:64:44:4e:43:db:e4:
         41:36:92:9a:d0:33:e9:d6:79:f4:c1:db:0c:b9:a0:29:c9:ef:
         74:16:6b:d9:3a:eb:21:b0:bb:e5:4c:14:aa:35:4f:23:15:a7:
         e7:25:0c:be:d4:e2:ab:74:2a:dc:e7:fc:a3:c2:2d:83:5e:c4:
         3e:3f:38:a6:ec:8e:ba:4b:df:08:ac:37:bf:15:2c:16:f1:ee:
         91:9e:de:8b:8c:5b:9c:bf:5b:b8:f1:4a:f7:fa:d9:12:2a:73:
         26:79:f9:cc:8e:2b:88:0b:56:7b:ff:b5:1a:10:33:ee:d8:63:
         c6:03:8f:46:eb:65:32:6d:b9:ac:2b:32:60:8d:68:97:7d:72:
         4d:d6:9a:59:f1:a1:c8:e6:b3:58:55:d0:23:78:bc:6d:d8:6b:
         7f:87:da:34:b2:ff:18:19:77:75:76:20:1e:7f:38:35:ca:2b:
         62:32:cb:45:61:63:3b:f2:81:9d:d9:94:6f:79:ab:d5:52:dc:
         51:8c:83:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:50:00 2026 by rpki-client