Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
File:                     Eioro8wYyZhQEwns3gQnBq9bhFo.mft (raw, json)
Hash identifier:          DkdnPRMYEzhUV5V/M585Qr1/wlyW1hAgHnLAVMRfJ7M=
Subject key identifier:   64:3B:FC:17:B8:56:A9:14:88:8F:D7:7E:1D:B5:B3:F5:5C:73:EC:63
Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
Certificate issuer:       /CN=122a2ba3cc18c998501309ecde042706af5b845a
Certificate serial:       01A1829978A3923C8849EEE17589F91953A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
Manifest number:          1AC9
Signing time:             Wed 28 Oct 2026 13:00:58 +0000
Manifest this update:     Wed 28 Oct 2026 13:00:58 +0000
Manifest next update:     Thu 29 Oct 2026 13:00:58 +0000
Files and hashes:         1: Eioro8wYyZhQEwns3gQnBq9bhFo.crl (hash: jTb2RAeS0Jela4+0Ooa7rhfk3BmEbOKpx+JF6VSr2+c=)
                          2: qv_0DGiqZIrviDnUY0UjmlA-rxA.roa (hash: tjO3NXsd+wFb/73NXf9/LYs4wwFfV042CQT23DEtDSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:82:99:78:a3:92:3c:88:49:ee:e1:75:89:f9:19:53:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a
        Validity
            Not Before: Oct 28 13:00:58 2026 GMT
            Not After : Oct 29 13:00:58 2026 GMT
        Subject: CN=643bfc17b856a914888fd77e1db5b3f55c73ec63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d2:3f:82:f0:de:ce:6d:0a:f9:85:9e:45:c4:
                    c8:8e:47:e9:da:f2:a5:da:2b:51:07:3c:c5:01:36:
                    25:57:a0:73:53:f3:0e:c0:a9:67:93:ce:f0:49:02:
                    f6:a4:ea:ca:6f:38:cb:9d:0c:d7:eb:a3:b7:55:ec:
                    0d:a5:b1:40:b6:c6:65:1e:dc:6b:d9:56:84:6e:d3:
                    95:c6:08:aa:0d:89:6a:01:a4:88:64:90:98:bf:09:
                    90:12:93:a7:82:ac:45:c4:89:ab:91:f4:af:58:bf:
                    b5:ff:23:67:b0:50:c7:78:f6:18:0d:a7:a4:0d:b4:
                    28:d9:70:d5:89:0b:ca:04:d6:96:a8:7c:92:89:75:
                    dc:a4:a2:1f:8a:59:6a:b6:ad:97:0d:8a:27:9b:d2:
                    5b:8b:75:06:7d:ff:17:f6:91:ab:b7:d5:32:a1:be:
                    75:f3:ba:fa:f7:79:ee:9c:87:35:b5:b0:63:67:bf:
                    85:18:47:36:08:ab:d9:77:95:93:86:2c:0c:2d:d8:
                    7f:d3:39:a3:1c:6c:7a:4a:8a:70:28:d9:31:f6:56:
                    4d:42:e2:7c:aa:0b:83:f5:35:e3:a1:ca:ba:39:4c:
                    a8:44:ce:cc:68:e2:e7:a2:2f:da:da:8d:d4:4e:f8:
                    f6:ec:c6:3f:37:d3:4b:d4:3c:b0:d7:a5:3b:8a:c3:
                    fd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3B:FC:17:B8:56:A9:14:88:8F:D7:7E:1D:B5:B3:F5:5C:73:EC:63
            X509v3 Authority Key Identifier:
                keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e9:7f:76:8b:9e:ee:9f:b7:76:98:66:ca:ad:d4:c8:5a:28:
         0b:f4:51:84:b9:56:cd:66:ab:13:5b:22:4c:7f:ab:50:da:ba:
         cb:a0:e2:08:85:b7:ac:c3:80:ab:c4:21:2a:98:01:e9:3a:10:
         7a:80:a6:3c:7f:e6:69:a1:cf:32:94:ea:bc:96:73:33:55:74:
         86:4c:53:85:f7:dc:37:72:fe:5e:09:f7:35:3a:c4:ff:c9:a3:
         1b:df:ce:89:f1:d1:50:81:c2:8c:f2:a1:92:f8:5a:f5:5b:8c:
         9a:7e:a3:1a:bf:33:06:b1:b1:0c:fa:c1:fc:49:51:64:7c:68:
         81:15:0f:80:e4:5a:36:93:07:15:80:30:49:21:43:a1:35:bf:
         36:f7:e3:36:c3:e4:8a:5c:55:0f:98:8f:5d:ab:b8:56:44:d4:
         77:d2:71:74:b7:ae:ff:81:dc:46:a4:29:8b:64:58:b2:f7:57:
         d9:1d:26:91:8e:12:30:7a:06:c3:1c:33:6e:d3:cf:86:9b:a2:
         b9:87:b5:8b:f7:6c:56:7e:98:17:2c:7b:c6:a7:50:df:6f:5a:
         a0:6a:99:09:92:1c:a0:c2:75:06:a5:55:8f:ef:f5:5e:53:6d:
         58:c1:23:1f:6d:fd:6e:80:92:e5:a8:a3:2d:f2:ee:eb:88:45:
         68:f6:ee:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:33:54 2026 by rpki-client