Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File:                     eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier:          C2TPuoFISvPm42y98+q7v89t7STqzw+crpqA3ofj/IY=
Subject key identifier:   67:7C:BC:79:0C:17:8D:94:BA:A0:A9:10:5F:7D:05:51:1D:E5:40:7E
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer:       /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial:       01A0B689D3E69CF5860052055E1FB15D3512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number:          1420
Signing time:             Fri 18 Sep 2026 22:01:20 +0000
Manifest this update:     Fri 18 Sep 2026 22:01:20 +0000
Manifest next update:     Sat 19 Sep 2026 22:01:20 +0000
Files and hashes:         1: Ovz5_uXaopmCFA2hM3c3dActUxA.roa (hash: c9mXjNhTNI7nbpo+Q8eDzbpgYffEF1OmRMytYW5lsxc=)
                          2: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: flKosHRCsCPJr0P1Sua8Q8piJKIIalEr2I1d3myHu70=)
                          3: iiLRQTaQQ6IVIkbg2il6ZXlFwVQ.roa (hash: tutx4i5TMPBaqEME1ocqA/S91MUf42k0v3h4figQjcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b6:89:d3:e6:9c:f5:86:00:52:05:5e:1f:b1:5d:35:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
        Validity
            Not Before: Sep 18 22:01:20 2026 GMT
            Not After : Sep 19 22:01:20 2026 GMT
        Subject: CN=677cbc790c178d94baa0a9105f7d05511de5407e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:59:a7:1d:37:d4:61:ab:6a:56:de:80:34:7b:
                    a0:c8:58:b2:37:9e:93:e7:87:e2:b8:ce:14:1d:18:
                    8d:bf:ed:c6:8b:40:30:35:8c:06:68:aa:b2:94:29:
                    54:14:5f:70:a9:dc:dc:62:6f:51:04:be:43:b3:2e:
                    46:46:e7:ab:5c:d5:7e:0b:97:27:63:18:aa:f3:f2:
                    94:90:7f:bb:6c:e0:97:b1:72:86:e2:4d:e0:f3:36:
                    f9:9c:b5:df:bf:7d:b4:6b:54:ba:0e:6b:83:80:75:
                    1a:e7:e3:a8:d4:46:66:06:ec:7c:db:db:69:b4:5c:
                    26:a5:2b:2d:af:29:e6:8b:bf:2f:7e:ee:b8:12:20:
                    97:1b:72:91:b1:ad:ba:6e:5d:d2:ba:69:fd:05:b4:
                    86:d6:45:5b:42:db:73:7b:36:79:03:3a:77:29:f9:
                    5d:7f:43:a1:97:2e:12:2e:42:32:89:c4:92:3a:74:
                    39:7b:55:89:a1:d5:64:62:48:12:11:4b:9d:c2:6a:
                    78:33:22:eb:d4:f7:d5:eb:be:7a:e1:81:9f:8d:a2:
                    01:ed:d5:32:1c:26:8a:be:8b:39:12:58:4e:1f:ea:
                    c0:3c:68:cc:b4:5d:bb:3d:f0:f4:0c:e9:fb:4b:12:
                    40:98:25:99:20:f1:b8:d5:5f:e4:04:c3:7b:66:ac:
                    c6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7C:BC:79:0C:17:8D:94:BA:A0:A9:10:5F:7D:05:51:1D:E5:40:7E
            X509v3 Authority Key Identifier:
                keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:25:68:08:d1:aa:30:55:54:fa:a5:e2:16:a0:fd:cc:3c:bc:
         2f:c0:5d:68:88:43:18:7b:ab:3f:8c:b7:64:4f:29:47:b2:12:
         f7:eb:96:86:00:ad:e2:72:70:a0:36:5b:e3:0a:e6:b4:48:bc:
         63:43:73:78:e4:84:23:d7:84:ac:e0:a9:39:24:ad:c6:09:8a:
         2b:c8:78:d7:c5:45:12:9e:fd:6d:55:13:22:07:e0:bd:a9:cf:
         2d:87:1d:fc:23:3e:be:6b:0e:dd:5c:d5:82:c6:f8:fc:11:b0:
         76:00:45:51:e3:5a:42:aa:e4:b3:d1:66:23:83:cd:6f:69:3c:
         e5:ea:37:dd:46:5e:af:52:e8:be:7f:81:09:51:49:f0:e6:85:
         c2:32:48:8e:51:38:47:59:b5:80:97:06:91:ef:57:bb:68:48:
         e5:cd:70:8d:80:05:b0:5e:89:07:51:8f:60:30:8a:89:16:2e:
         46:ba:c0:d9:2d:cb:e4:a0:df:16:09:38:21:3b:aa:cc:25:5d:
         b3:7e:e5:3b:0e:61:c4:38:84:4a:da:d8:33:27:46:a7:7a:ec:
         27:01:37:c1:84:0d:d9:9d:5e:ac:0b:d8:44:ca:e2:13:e6:78:
         a7:7f:a3:a8:58:9f:54:8d:ce:26:49:7c:df:01:e3:e1:8d:f2:
         4d:ad:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:18:34 2026 by rpki-client