Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.mft
File:                     eYi_KMUlxS0YbAAMm97ZwXdcEp8.mft (raw, json)
Hash identifier:          LT7YqsyLgYTdG1rvhaDPxLY66943/BTggTm+ezHlcDE=
Subject key identifier:   87:84:B0:4C:ED:BB:2A:79:FF:C3:73:02:3E:63:3F:05:D7:88:01:FB
Authority key identifier: 79:88:BF:28:C5:25:C5:2D:18:6C:00:0C:9B:DE:D9:C1:77:5C:12:9F
Certificate issuer:       /CN=7988bf28c525c52d186c000c9bded9c1775c129f
Certificate serial:       01A17DE127E6F5B002516B9B9151F172406A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eYi_KMUlxS0YbAAMm97ZwXdcEp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.mft
Manifest number:          013F
Signing time:             Tue 27 Oct 2026 15:01:10 +0000
Manifest this update:     Tue 27 Oct 2026 15:01:10 +0000
Manifest next update:     Wed 28 Oct 2026 15:01:10 +0000
Files and hashes:         1: eYi_KMUlxS0YbAAMm97ZwXdcEp8.crl (hash: byvdMmBYOdz52TaMhCnMl1J9LqjOWsNjCS+QAG9HRHE=)
                          2: qTje26BZZKRMARRDkJdC0IeHiRU.roa (hash: oaFttIih0ec3ogfrn2Cq/QjqWOUDC1z4Lnrsr8BVOtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eYi_KMUlxS0YbAAMm97ZwXdcEp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:e1:27:e6:f5:b0:02:51:6b:9b:91:51:f1:72:40:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7988bf28c525c52d186c000c9bded9c1775c129f
        Validity
            Not Before: Oct 27 15:01:10 2026 GMT
            Not After : Oct 28 15:01:10 2026 GMT
        Subject: CN=8784b04cedbb2a79ffc373023e633f05d78801fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:b3:f6:b6:8e:08:ff:fd:6e:3c:6b:f5:3d:
                    ce:e6:51:07:db:7f:8d:b0:76:8b:a0:21:42:7e:a9:
                    63:ff:be:1b:00:62:de:b6:5c:95:a7:79:45:5f:ce:
                    9b:41:8a:c3:4f:c7:8b:ef:2f:f7:e0:8f:2e:9b:59:
                    48:4f:54:89:4d:81:3d:c8:55:85:60:03:7a:db:06:
                    bb:e9:33:b1:b3:75:1a:13:77:00:a9:a0:f5:5e:1c:
                    90:9b:fe:df:21:3e:71:95:f9:39:09:0c:83:81:36:
                    c4:e2:62:02:35:60:57:6a:33:0b:d6:e2:1d:13:36:
                    bc:4b:b6:de:62:af:b8:33:77:4f:53:73:ee:7a:71:
                    f7:e4:0c:5b:aa:c7:60:1c:d9:2c:3a:2d:32:88:85:
                    af:77:b9:c4:4f:c0:81:2d:c2:27:ac:93:bc:a3:a4:
                    f1:ee:b5:f1:d6:af:c3:e3:5c:92:4f:7a:9f:1f:97:
                    cc:67:0b:ff:e3:d3:5a:1e:43:61:6c:5f:32:35:43:
                    55:fb:8a:85:bb:6d:c0:b6:a3:20:0e:bf:2a:bf:8a:
                    d9:b5:a9:7b:91:d2:e5:c1:90:5a:61:3f:7f:31:82:
                    3d:c5:5e:d6:70:d4:34:6d:b9:a8:3f:87:b6:9a:d0:
                    4c:1b:ad:87:26:26:9c:5d:28:2b:2b:56:b5:e8:89:
                    09:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:84:B0:4C:ED:BB:2A:79:FF:C3:73:02:3E:63:3F:05:D7:88:01:FB
            X509v3 Authority Key Identifier:
                keyid:79:88:BF:28:C5:25:C5:2D:18:6C:00:0C:9B:DE:D9:C1:77:5C:12:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYi_KMUlxS0YbAAMm97ZwXdcEp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7e:21:27:21:6c:dd:ac:4c:c5:50:cb:e6:63:83:c6:ff:93:
         b7:b6:bc:b9:28:00:05:47:45:d9:6c:6f:52:18:aa:86:04:33:
         aa:df:e8:3a:49:dd:78:80:35:94:51:7f:d7:cc:f0:86:cd:59:
         da:c1:6c:99:2f:b9:c8:ee:35:26:f9:96:1f:9a:72:ff:78:76:
         37:af:dc:12:f7:26:86:28:bb:8f:f2:c3:f1:f0:06:70:31:79:
         c8:34:a8:a2:0e:52:6a:dc:d6:de:46:93:d8:df:3f:be:a0:dd:
         4f:94:1a:43:7e:39:cb:53:b0:33:cf:5b:f1:31:db:1a:0c:47:
         c4:b0:62:b9:cc:4d:40:be:4a:c9:c9:6c:87:ad:ba:77:1f:5b:
         7e:bb:b2:45:13:ef:2d:33:a5:67:e8:ad:02:1e:87:88:10:6a:
         52:e2:f9:6f:33:f9:18:fb:e7:fa:1b:a6:9c:6c:54:4a:22:04:
         c1:07:87:9f:4c:fa:5e:2f:04:36:a0:d2:b2:b2:8b:3e:16:a6:
         36:96:3e:81:7b:8b:ff:8c:af:62:b8:19:fe:79:27:aa:be:79:
         3d:5a:0a:c4:3d:60:fa:52:82:d5:c6:ce:8b:4d:5b:6d:cb:76:
         a1:0a:c7:15:46:2f:fc:8c:3e:a8:29:b6:3b:c5:e2:01:f2:97:
         95:bb:a3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:04:08 2026 by rpki-client