Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
File:                     Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json)
Hash identifier:          G8r+l3mjmjH48t0H08HH4v4y9YWzPh1XEFxEzEOq7SE=
Subject key identifier:   8A:2E:72:0A:83:08:B5:AC:9B:2E:1B:72:DF:FA:25:D9:EB:0D:C7:E4
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Certificate issuer:       /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial:       01A1788369B21C4AB611AF04FCD55A428C48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
Manifest number:          1B15
Signing time:             Mon 26 Oct 2026 14:00:40 +0000
Manifest this update:     Mon 26 Oct 2026 14:00:40 +0000
Manifest next update:     Tue 27 Oct 2026 14:00:40 +0000
Files and hashes:         1: 2X2Ba8rgbouM32gnizEyTUGgONU.roa (hash: /S0uaILIP04CzsCMDO3CxuQ/dGQk0LoPnR9uswe+Dno=)
                          2: BgYgNXUiTeu31n67bX2V90cAvTI.roa (hash: 0v54WM21W+/w7a0Su0L6xDmLThFZAOM3uY/lMR5ZoI4=)
                          3: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: JWz2iDseWISDR2NmV2d9HVHJWKOe9PeOBhw8tKIDS2I=)
                          4: _KGGRE3h2YqKAa5plM_mCfMJBv8.roa (hash: 0ajoljFZeE+fI9LUdEUozfgpjrtBS3fcIVPaSye39JE=)
                          5: eJULHQEoySYd8RChisosiDQZf5U.roa (hash: vEz9zjSH+rxPxA4fpJgww9ctKj2hVzbnE2vKiiLIUZM=)
                          6: eqjRIQl2tcvdRn0WGpqecEf39BE.roa (hash: wo1ZcMLEQzOlMVuGPZQ1qvLlzhW3e3KGV8eqOLVncZU=)
                          7: r4LSjefpPXh2NBWzmzML-YHCiVQ.roa (hash: 4cwAGYLXFcCvXhQaffPoqSeBEp85Obiw6bTDloA68I0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:83:69:b2:1c:4a:b6:11:af:04:fc:d5:5a:42:8c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
        Validity
            Not Before: Oct 26 14:00:40 2026 GMT
            Not After : Oct 27 14:00:40 2026 GMT
        Subject: CN=8a2e720a8308b5ac9b2e1b72dffa25d9eb0dc7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:83:09:a9:e0:4f:8d:9f:15:75:30:ec:c9:39:
                    c5:21:5a:5f:2b:dd:5d:f0:d5:33:65:dd:06:29:96:
                    d8:23:7c:3b:79:78:26:30:34:fc:25:35:4b:7d:2e:
                    56:0b:56:eb:07:1b:91:05:21:32:d8:20:ae:ec:e2:
                    45:fe:57:8f:2b:85:bd:5e:71:1f:57:9a:b3:4a:02:
                    be:d6:de:fe:e6:bd:5c:06:bb:cf:f2:b7:f5:66:0f:
                    51:3a:fd:da:ab:c2:0e:32:cf:ea:5e:4d:07:80:f4:
                    f8:f7:82:e6:6b:ab:23:54:f3:3e:3c:eb:ca:e6:84:
                    bd:89:7a:c0:ea:27:2c:aa:f7:23:a9:fc:32:d7:b3:
                    92:3e:07:40:2e:7b:f3:53:1c:e9:74:7a:1f:01:c9:
                    cc:b3:ee:e4:0f:7f:8d:c0:75:7b:8f:3d:f6:67:0b:
                    dc:a7:bf:99:58:b3:40:a1:f4:e2:44:51:98:57:9d:
                    9b:e9:6a:27:63:94:d2:3c:47:b1:77:68:cc:46:ab:
                    e2:f8:d2:48:39:67:39:ed:c9:47:34:09:99:e7:30:
                    af:08:3a:8e:6f:36:53:12:e9:f8:6e:55:73:28:48:
                    46:54:cb:10:0f:32:69:ec:cc:92:67:83:f7:5e:ad:
                    c1:14:c9:cf:be:50:c6:7c:53:6f:70:1b:26:16:b3:
                    5d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2E:72:0A:83:08:B5:AC:9B:2E:1B:72:DF:FA:25:D9:EB:0D:C7:E4
            X509v3 Authority Key Identifier:
                keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d5:e5:a9:d6:5b:b6:65:e9:9f:77:a8:1c:09:be:2a:74:4f:
         38:c6:b2:e0:9c:b7:07:b8:4e:2d:06:48:83:e0:73:fc:a9:e4:
         c7:35:9a:77:ec:97:f9:4a:a7:01:e2:64:e1:78:5a:8e:b9:66:
         42:31:96:76:06:ce:83:65:d0:75:86:30:5c:c1:17:8b:fd:f1:
         ca:64:ee:95:59:5c:94:e5:eb:8e:c7:19:2b:3c:ca:2a:3f:5f:
         a2:36:6c:98:99:da:50:7f:14:42:4b:78:e1:58:94:6b:76:33:
         cd:29:b8:b9:84:30:43:df:ce:4d:e0:78:65:0b:2c:fa:35:fa:
         94:a2:44:42:5e:b6:3c:35:c7:30:c5:1e:b0:4f:64:ed:a9:5b:
         8f:ac:1a:e2:d6:16:a8:39:13:3f:60:14:2b:26:9c:fc:6c:c2:
         8f:b4:af:7d:f2:1f:a1:68:54:eb:8b:d8:d8:82:04:21:4c:a6:
         e6:16:fc:00:79:9d:e6:fb:2b:12:05:28:8a:d3:ce:c0:85:35:
         9e:57:ab:c9:69:f7:ba:18:87:5d:ea:08:ef:95:57:91:40:19:
         e2:59:53:6b:06:97:ed:ba:9d:05:d2:a2:fb:77:99:d0:85:2e:
         78:4d:d6:7f:f3:48:9a:39:74:9f:b8:b1:9c:59:01:46:e3:37:
         eb:b1:f2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:03:20 2026 by rpki-client