Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File:                     ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier:          /YciWAbviZCvDGWHtJBM85lQkr/tjaI2a5JUquda7P0=
Subject key identifier:   EE:67:D0:D8:A5:AB:45:81:6D:47:E3:AE:80:90:32:7E:1A:97:2F:80
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer:       /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial:       01A0C09F92A6D2A2A405DA31AE06CCC968F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number:          1673
Signing time:             Sun 20 Sep 2026 21:01:18 +0000
Manifest this update:     Sun 20 Sep 2026 21:01:18 +0000
Manifest next update:     Mon 21 Sep 2026 21:01:18 +0000
Files and hashes:         1: L_eXFdCQUF-9eDxelAnxZKL6wnQ.roa (hash: 7d4nHmuLNm2MvlXBb1jvivzyW1JkmgHoj/AiRQe6d+Q=)
                          2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: 08xth74275BfHoGkDj9WCysPr/40UlbgVKfR6cCjyBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:9f:92:a6:d2:a2:a4:05:da:31:ae:06:cc:c9:68:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
        Validity
            Not Before: Sep 20 21:01:18 2026 GMT
            Not After : Sep 21 21:01:18 2026 GMT
        Subject: CN=ee67d0d8a5ab45816d47e3ae8090327e1a972f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ef:a1:e6:17:40:02:52:ad:eb:21:12:20:af:
                    3d:5b:e8:be:9c:b4:d4:08:bd:ac:df:b6:bb:f7:c3:
                    39:d5:05:5b:71:5c:1d:81:7f:25:a3:2f:4c:6b:31:
                    74:11:87:7c:16:1c:af:f1:f0:5c:b2:64:72:e6:d5:
                    b4:18:d4:ae:2d:58:b0:81:b8:16:7a:89:ee:67:77:
                    a7:2b:dc:1f:38:ae:b2:39:00:84:ee:e2:40:79:bf:
                    0d:ba:65:d6:a0:f9:54:08:61:71:9b:46:88:35:0b:
                    2d:a5:c4:b8:ed:04:9d:d0:8f:b0:2c:95:73:f5:c3:
                    50:bc:3f:e5:f2:c4:07:91:b3:0c:5e:c2:ed:75:47:
                    8b:62:e8:63:5a:c1:54:58:9b:4e:cf:90:d5:41:a7:
                    ba:da:5f:50:3f:10:8e:1d:d0:71:dc:ca:5c:ce:ff:
                    16:c7:66:bb:17:c6:f3:ab:eb:1a:3a:e3:b5:d8:d1:
                    74:14:a0:f6:1d:37:cd:8c:71:03:c2:cc:14:15:4f:
                    99:e4:77:04:75:70:3a:aa:61:e5:22:92:d1:51:78:
                    91:0e:19:78:ec:26:2a:ba:93:df:bb:aa:bb:4a:bb:
                    ed:c1:2b:0f:af:2d:3e:b6:2c:af:e9:3a:60:54:3d:
                    a2:39:28:a3:f4:f5:32:1c:0e:72:01:64:7b:e6:4b:
                    f7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:67:D0:D8:A5:AB:45:81:6D:47:E3:AE:80:90:32:7E:1A:97:2F:80
            X509v3 Authority Key Identifier:
                keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:65:cc:94:dc:9b:2b:3d:d1:55:aa:78:23:60:c9:3f:a9:74:
         d8:62:3c:85:a9:79:f1:0d:a2:bd:0b:a6:66:81:cf:05:a8:10:
         d5:d3:5d:f0:b7:a1:ba:57:b2:3c:88:a9:43:26:b1:89:67:9c:
         71:28:9d:c4:db:e3:dc:a6:27:36:27:b3:8d:ea:82:94:09:5d:
         5e:f2:ff:d2:38:45:56:df:91:eb:fa:c7:2f:d3:23:ad:13:4d:
         53:f4:2d:89:ba:8b:e6:c1:01:85:92:02:9b:2f:b8:c8:e3:4e:
         c5:d5:e5:c6:77:3f:70:fb:4b:76:2a:75:36:6f:9b:67:ab:f4:
         72:6a:97:3a:c4:e6:2c:5b:48:59:5a:ba:ee:32:e6:d3:8c:55:
         85:f8:e0:64:9f:bd:0b:dc:67:c0:bf:02:0d:9a:47:13:68:34:
         e2:21:f1:6f:b7:da:4d:ea:e0:4d:ca:e8:94:ad:87:2a:f5:8d:
         b9:29:91:6d:47:55:22:5f:23:e0:a8:63:e5:f5:7b:39:5e:f2:
         22:21:51:63:d2:5d:71:73:60:7c:55:a2:99:54:f2:ff:06:68:
         c3:ba:ec:cc:80:b0:49:1d:03:e4:b9:9f:44:b3:70:bf:ce:0a:
         28:2c:4c:85:5f:08:49:40:48:5b:15:31:b7:0f:c2:2a:7f:be:
         00:c8:2d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:21:39 2026 by rpki-client