Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
File:                     ecfqTTn1y19FhgoJ6jgz74rdaCg.mft (raw, json)
Hash identifier:          tiXdebWKmFH7ZW5Rjh8c85aZk59ObqVKlh5gnV3Nxzw=
Subject key identifier:   9F:E8:7D:C2:6A:25:33:F9:85:62:3C:3C:1E:BA:66:84:78:BE:39:C4
Authority key identifier: 79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
Certificate issuer:       /CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Certificate serial:       01A06D959F25DDCB7123C7239325051F4A5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
Manifest number:          1433
Signing time:             Fri 04 Sep 2026 18:01:57 +0000
Manifest this update:     Fri 04 Sep 2026 18:01:57 +0000
Manifest next update:     Sat 05 Sep 2026 18:01:57 +0000
Files and hashes:         1: dcYzfKgMLWUSmc87zTpEWATDf3g.roa (hash: u+h/4AryCzwpCIQR5wy3fZ9DxV6BlPTBzPZ0uYrCmuI=)
                          2: ecfqTTn1y19FhgoJ6jgz74rdaCg.crl (hash: INYxvOZTJ+n8oEO9dlYmzSmxFXKOlE3G0FE9sJjn9LI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:95:9f:25:dd:cb:71:23:c7:23:93:25:05:1f:4a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
        Validity
            Not Before: Sep  4 18:01:57 2026 GMT
            Not After : Sep  5 18:01:57 2026 GMT
        Subject: CN=9fe87dc26a2533f985623c3c1eba668478be39c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:83:6e:c0:38:dd:bc:eb:ed:33:e6:b4:59:f4:
                    09:17:d9:26:c5:ec:9b:2e:99:06:9a:a7:a8:dc:86:
                    12:22:7c:68:6d:df:f5:e0:99:6c:e1:4a:d6:6b:24:
                    12:ce:6c:46:65:07:99:ff:48:19:30:e1:c9:ea:51:
                    fe:d5:ce:36:5e:4f:00:19:71:ea:00:54:0c:69:5f:
                    9d:ef:19:14:46:46:c2:9d:70:57:b1:b2:54:4d:80:
                    28:eb:8d:53:e1:b7:9c:4e:9f:a2:1b:3f:43:65:a3:
                    d1:dc:2a:ef:8c:b6:f7:4e:b5:bf:1e:aa:8a:8a:f3:
                    58:8b:ac:55:25:8c:79:48:c9:3b:45:ca:c2:26:43:
                    5f:fa:bb:87:a1:dc:22:a4:eb:12:42:c9:c9:50:48:
                    cc:a3:75:87:48:10:37:92:5e:62:69:6f:15:81:24:
                    4a:87:64:83:17:37:94:34:ce:b2:72:a3:22:c6:cb:
                    b4:3b:2c:8d:df:bc:5e:c1:70:96:f9:87:de:1d:dc:
                    9f:70:e1:08:7e:37:29:26:07:dc:ad:34:55:dd:84:
                    3b:d0:76:8d:d3:32:1e:34:97:c3:31:da:b5:42:b6:
                    ad:15:dc:a1:a4:f1:d2:3d:a5:38:b9:8e:51:8e:88:
                    ac:6a:19:7f:d5:20:96:f9:b3:d7:14:f1:46:61:5c:
                    2e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E8:7D:C2:6A:25:33:F9:85:62:3C:3C:1E:BA:66:84:78:BE:39:C4
            X509v3 Authority Key Identifier:
                keyid:79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:0b:e8:a4:1d:8b:4e:90:b1:05:7e:4e:44:7d:f2:77:47:e8:
         ec:10:6b:57:11:bb:e4:a3:90:a4:d4:b4:e1:8d:eb:37:e6:6f:
         32:d8:13:a4:9b:33:d2:92:46:3f:3e:e0:49:48:f3:66:87:fd:
         6a:d8:c8:92:25:01:73:29:70:ff:07:a2:01:2a:83:c3:45:49:
         e5:bb:41:21:c5:58:b5:dc:cd:d9:5c:78:71:9b:ff:d1:bd:19:
         c8:d5:6d:54:46:26:ec:b7:6c:f7:17:dd:10:7a:fd:d9:00:1f:
         87:3f:12:16:5d:38:d0:8a:a3:5f:f2:62:e1:32:cf:20:73:fa:
         f1:17:46:bc:f5:ca:15:b1:39:3c:82:ad:1c:fe:6f:22:af:13:
         d8:6b:0b:e9:15:60:9c:45:ae:1d:bf:c9:06:e7:71:68:34:cf:
         10:92:89:4f:92:52:db:4d:85:b9:68:3d:d1:66:a8:dc:9e:5e:
         e3:21:07:cf:95:a5:cf:1e:27:b8:c2:5a:05:e0:aa:0e:f3:68:
         80:2f:6c:d9:02:42:73:fa:ed:47:fe:ec:7c:13:f1:7e:8a:fa:
         78:0f:71:b4:52:23:ff:8e:3a:5f:f0:e8:fe:ee:4a:ce:15:d9:
         35:5f:16:d2:24:df:41:f9:4f:0e:c0:ef:22:b5:12:f9:e4:0e:
         a8:93:cd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:20:32 2026 by rpki-client