Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.mft
File:                     ePm3BijarZOvGIoiOYKNssKcFOw.mft (raw, json)
Hash identifier:          OnfZOYusFJKF+P87dBdh6BfBdIjGg2sCtbEhZGm1WoM=
Subject key identifier:   6B:4C:26:11:B2:49:65:E9:1D:BD:9A:4D:47:86:6A:1B:57:03:F5:A1
Authority key identifier: 78:F9:B7:06:28:DA:AD:93:AF:18:8A:22:39:82:8D:B2:C2:9C:14:EC
Certificate issuer:       /CN=78f9b70628daad93af188a2239828db2c29c14ec
Certificate serial:       01A17D735744293F2E99CDB6A168696A47FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ePm3BijarZOvGIoiOYKNssKcFOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.mft
Manifest number:          013F
Signing time:             Tue 27 Oct 2026 13:01:13 +0000
Manifest this update:     Tue 27 Oct 2026 13:01:13 +0000
Manifest next update:     Wed 28 Oct 2026 13:01:13 +0000
Files and hashes:         1: BdwGlkaptmMT9Oh-8i7s6EZ-lCA.roa (hash: 8vib6Tz+/3825HdXsp3W0N9Y0J7CwoyzAF/LuiUg6r4=)
                          2: cCwsIFxrbfgaELrP2szaGwS4jUA.roa (hash: geipURluZ2qXgJmw5IqNiXSsOKZHO2Hxu6cwDPy47zs=)
                          3: ePm3BijarZOvGIoiOYKNssKcFOw.crl (hash: A6cfBMfgJuvTYaDTGbKOev5Fnx/2emacxJThO0k3FV0=)
                          4: lK5aoSeePB6ZndyRPiM_BJq60J0.roa (hash: 9QEXPPwUc0DPoKULU+qtdfAfIA6UqP1XKN+kslkbGBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ePm3BijarZOvGIoiOYKNssKcFOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:73:57:44:29:3f:2e:99:cd:b6:a1:68:69:6a:47:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78f9b70628daad93af188a2239828db2c29c14ec
        Validity
            Not Before: Oct 27 13:01:13 2026 GMT
            Not After : Oct 28 13:01:13 2026 GMT
        Subject: CN=6b4c2611b24965e91dbd9a4d47866a1b5703f5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:01:e8:66:d5:bb:68:14:81:75:32:ec:8b:
                    9d:15:37:86:6e:3a:02:a4:38:71:06:1b:df:e9:5d:
                    aa:f0:57:d4:dc:c9:d4:a6:37:bd:e8:36:f3:c1:5c:
                    78:93:d8:d1:9b:ca:95:7c:5b:f2:3d:9f:3f:56:95:
                    f6:f4:15:b5:ad:55:7e:2f:1f:4a:a5:6d:42:53:05:
                    7b:94:fe:33:d5:bc:55:33:5e:0c:f4:d6:73:bf:82:
                    42:80:77:e6:70:9b:98:56:26:00:4b:e2:27:76:96:
                    cf:88:e3:1e:9f:f3:d0:08:01:ec:78:79:df:f2:c8:
                    9e:db:04:40:ed:4c:7c:ad:6f:58:3e:a4:1b:07:de:
                    2c:d0:97:82:9f:0a:4f:19:9a:e7:c7:3a:9a:20:d7:
                    b4:ea:3c:ad:7b:4a:c5:dd:a2:63:98:c4:83:7b:ea:
                    ef:b5:77:a2:5f:4b:ec:93:a7:cc:08:62:15:66:e3:
                    a5:de:0c:db:bb:0a:f3:d4:ae:2c:ab:96:87:d6:21:
                    ec:85:9a:f4:36:da:c2:3c:44:d2:6f:62:24:82:08:
                    0c:6e:a9:e8:90:86:82:99:12:42:03:38:49:27:28:
                    a5:51:39:02:94:af:fc:4e:9c:18:2f:4e:1b:b0:f8:
                    35:46:9e:3b:77:f4:82:ae:58:f5:5f:c1:31:c5:86:
                    c6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4C:26:11:B2:49:65:E9:1D:BD:9A:4D:47:86:6A:1B:57:03:F5:A1
            X509v3 Authority Key Identifier:
                keyid:78:F9:B7:06:28:DA:AD:93:AF:18:8A:22:39:82:8D:B2:C2:9C:14:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePm3BijarZOvGIoiOYKNssKcFOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:9e:f4:f5:f3:bc:7e:e1:98:7a:50:1f:14:34:2a:6e:04:fd:
         b2:14:e8:eb:ce:e7:92:92:c9:66:f6:25:ac:09:05:2d:42:34:
         49:8c:fd:23:ce:9e:49:da:2e:4d:35:ac:e8:95:22:5b:6c:0b:
         5f:58:a8:fd:38:8e:29:01:c4:ce:ab:8e:e0:c7:2e:e6:e9:d9:
         a3:15:95:6e:a0:a5:43:13:6b:41:3b:2b:c3:d2:43:10:f0:f8:
         06:d5:8b:0d:b0:be:6a:55:d4:f9:40:e0:b8:c3:b8:0b:f7:3d:
         c3:b6:a2:64:9f:1c:98:52:52:62:41:59:7a:01:13:3a:bf:0c:
         83:b6:ee:e5:bb:ac:bc:ec:76:67:a3:52:bf:d3:44:e5:98:bc:
         f4:9e:ca:19:5d:df:3a:57:fa:57:2c:67:f6:b6:90:11:ab:14:
         8f:55:05:bf:0f:8d:a9:5e:69:32:6f:db:63:ba:e8:dc:76:e2:
         90:23:aa:88:18:7c:08:23:65:a9:b9:bc:4b:d3:46:bd:46:83:
         db:33:cf:e3:59:74:6d:9e:11:ce:0c:af:1b:e9:32:1a:ae:f2:
         85:2e:cc:09:66:8b:55:80:60:90:82:d2:1e:d9:9b:05:48:3e:
         64:aa:9c:c6:6f:59:80:d5:d2:34:07:e2:20:4c:31:98:70:38:
         6b:3f:a9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:58 2026 by rpki-client