Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          myyITUO+UEPz9PsVDjLBs6iyIdVqCzNNbN3VS0pbsRs=
Subject key identifier:   32:FD:76:9E:DA:7F:14:D0:75:62:57:26:D5:2C:73:87:F2:D2:AE:58
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       01A0C2FB550D9619AC22FE8DA25283093561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1AB2
Signing time:             Mon 21 Sep 2026 08:00:46 +0000
Manifest this update:     Mon 21 Sep 2026 08:00:46 +0000
Manifest next update:     Tue 22 Sep 2026 08:00:46 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: paam+M7c/e36v6ImHNKJDFlrQriy1hUqcNosqD886tk=)
                          4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=)
                          14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=)
                          17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fb:55:0d:96:19:ac:22:fe:8d:a2:52:83:09:35:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Sep 21 08:00:46 2026 GMT
            Not After : Sep 22 08:00:46 2026 GMT
        Subject: CN=32fd769eda7f14d075625726d52c7387f2d2ae58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4e:fe:a8:b1:94:ff:9a:24:a7:71:12:15:86:
                    e2:cf:8b:0e:dc:14:df:b6:2e:6a:53:79:96:e8:67:
                    69:81:db:5b:2f:21:fa:1e:c8:a0:ab:d8:d4:b9:3c:
                    91:80:76:6f:ff:48:99:68:7b:a7:da:25:ac:35:33:
                    7e:01:73:29:8f:67:63:29:30:13:c2:c3:82:7f:1a:
                    b2:16:6a:06:91:d8:18:b5:34:74:a4:6a:e1:8b:9d:
                    31:b5:b7:2c:6d:4a:0b:f8:16:c7:39:0d:ce:a6:b9:
                    02:36:df:24:99:c0:d7:3f:fa:96:ac:1c:19:d0:b1:
                    ed:5f:c6:36:bd:6a:eb:7f:c7:a6:de:c8:98:4b:6a:
                    05:ae:a5:22:41:1d:0d:6d:d8:0b:0f:b1:42:c9:f7:
                    03:8d:61:fa:0c:df:13:a8:20:fa:a5:b8:b0:85:51:
                    4f:eb:f3:68:cd:43:de:a6:95:6d:0c:5b:02:63:eb:
                    32:6a:2e:91:3c:2b:61:4d:a4:28:5a:54:ef:5c:96:
                    c3:76:fa:56:da:a0:68:02:ac:79:fc:c5:c1:b0:19:
                    47:01:2f:06:2f:31:24:0e:8c:49:b8:7a:4b:50:5f:
                    38:a3:af:6d:a0:af:44:33:d9:d9:1d:4a:95:a6:52:
                    40:76:e8:25:41:43:2f:4d:cc:08:fd:73:29:a0:ae:
                    ea:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FD:76:9E:DA:7F:14:D0:75:62:57:26:D5:2C:73:87:F2:D2:AE:58
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:83:9a:d3:f5:33:8c:ac:86:b9:66:0d:f1:37:ac:6d:77:b2:
         5d:af:80:1d:36:2d:72:17:65:4f:1a:ab:5c:f7:c2:6e:be:18:
         1e:bd:07:64:f5:b4:f9:83:4a:6c:85:32:07:de:07:2c:f1:23:
         10:49:a1:4c:d7:ba:a6:2b:67:98:e7:bf:d6:6d:21:f6:17:f6:
         19:e1:ad:3b:60:ba:f3:c2:70:03:3a:93:c7:e6:f8:ec:17:42:
         de:76:57:e7:25:f8:87:f4:44:89:c1:57:df:82:f4:0c:bd:5f:
         5f:69:64:6c:85:5a:ae:8f:71:eb:5c:c6:fb:30:8c:78:35:bb:
         e6:b4:8a:6f:9a:20:5d:c2:fc:4c:f7:b3:76:39:26:94:b8:73:
         b5:09:9c:70:b4:af:35:14:8c:14:c7:3f:8e:c6:8f:4c:b5:68:
         d9:f9:ca:83:0b:58:bc:d9:08:92:18:87:f1:8f:0c:e5:1d:4e:
         3d:39:f3:b2:85:fe:e9:28:d2:21:36:64:a3:82:fa:c5:6b:71:
         f0:15:72:f8:2f:7b:be:5a:79:61:2b:58:87:10:a0:87:62:f0:
         9c:f2:74:62:a1:3b:78:2f:60:52:aa:12:4d:d8:cb:88:96:5c:
         34:38:3d:2f:03:0f:11:4f:a4:c9:88:b4:4e:5c:b3:55:fc:e9:
         4f:ce:2c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:44:45 2026 by rpki-client