Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
File:                     Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft (raw, json)
Hash identifier:          QxkuAXEabePs1QUd7939ZRtxVtInTHR6rIB4YWGxM6Q=
Subject key identifier:   45:3E:96:EF:89:F3:4F:79:D0:66:BC:DD:32:7F:C1:57:E9:36:2F:DA
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Certificate issuer:       /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial:       01A134104B442CEDD0ABD057A158387B9012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
Manifest number:          125B
Signing time:             Tue 13 Oct 2026 07:00:45 +0000
Manifest this update:     Tue 13 Oct 2026 07:00:45 +0000
Manifest next update:     Wed 14 Oct 2026 07:00:45 +0000
Files and hashes:         1: 1I6xXRp2MIVm80sw3U3Tfku76Z4.roa (hash: f523msZqQLAjCeDR2b4rSYrcaIntt3g/koqAV5ProOw=)
                          2: Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl (hash: CsUl97nofRj3EQsuc2Rx3ipsTJdbcUG1OSEAzK8O45Q=)
                          3: WPpx-izSeflERwTZTBDMUjusV5s.roa (hash: cWk+1ANHgFtlvOQuSevrBNEAZRGbynzPPc7h5zNZTe0=)
                          4: bN4b_Ro1UEHJNER_9HcU775UCQk.roa (hash: RK/VwkDkfRH19Tjgu6wUkuqkclNxNJAitWxY+C+QqsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:10:4b:44:2c:ed:d0:ab:d0:57:a1:58:38:7b:90:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121a37282dd992d88658160559e048392798c84b
        Validity
            Not Before: Oct 13 07:00:45 2026 GMT
            Not After : Oct 14 07:00:45 2026 GMT
        Subject: CN=453e96ef89f34f79d066bcdd327fc157e9362fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ef:63:18:89:5c:b9:0d:0d:8c:81:f6:16:74:
                    d3:dd:93:23:63:d1:00:55:ee:6c:6f:28:aa:46:cb:
                    72:d9:0e:1a:e1:91:97:1a:cf:63:04:17:fe:b8:2b:
                    70:d4:05:d0:10:0f:e9:eb:b5:2b:9b:fc:69:31:c5:
                    5e:fc:92:bf:50:23:eb:fa:40:7f:dc:00:2a:ef:0a:
                    b6:bf:99:2e:53:ba:eb:51:ea:91:e8:07:d6:bd:b8:
                    6f:1e:56:2d:18:70:a6:28:0e:e7:74:f9:71:80:80:
                    a2:6c:90:12:85:57:1a:fb:99:a2:d1:ef:1c:1a:1c:
                    51:04:cf:45:f6:2e:09:a0:64:f0:42:c9:46:31:ec:
                    f7:81:b0:c1:59:69:d0:47:e3:da:c9:66:4d:de:ec:
                    27:a7:75:a8:1f:80:34:8f:ef:6f:9f:cb:43:fb:b3:
                    0c:be:6c:63:13:b5:ce:6c:94:26:72:d0:a9:57:82:
                    10:f7:f2:f9:d0:b2:ea:e1:81:83:d0:2b:2d:37:f4:
                    b1:a0:7f:d0:b2:c2:dd:a7:8f:f9:2e:fe:a9:6f:9d:
                    02:40:b3:de:4c:c3:0b:6a:4f:f0:bc:4e:00:24:6e:
                    b1:bd:c7:f4:2a:db:90:79:44:90:b7:f2:4e:d2:cc:
                    b5:2e:a3:6d:16:3f:f1:0a:58:74:22:65:16:2b:fe:
                    49:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3E:96:EF:89:F3:4F:79:D0:66:BC:DD:32:7F:C1:57:E9:36:2F:DA
            X509v3 Authority Key Identifier:
                keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:02:d0:a5:a4:2c:84:5c:8b:a5:30:ea:50:00:de:0b:57:b7:
         14:b7:24:b9:6e:5d:13:a7:7d:4c:a0:76:c5:9e:18:0f:c8:7f:
         f2:3b:43:24:c7:60:21:46:a4:3b:ac:33:47:2a:a3:a9:00:42:
         29:1d:00:f2:1e:81:84:cd:f9:85:c7:d9:2d:52:16:2e:58:f5:
         6b:e7:8b:81:c8:eb:5b:90:56:fe:29:55:a3:4c:c3:47:43:5b:
         e3:34:84:24:12:ff:ed:08:f9:51:14:73:68:43:f4:0f:d5:c2:
         2d:f2:15:a2:df:fa:f5:ec:8f:6e:87:26:2c:46:61:1e:de:cd:
         bc:33:1d:bc:44:2f:d0:d6:03:0e:59:fc:28:65:a0:fd:d2:35:
         6e:59:f6:3e:84:3d:51:d9:5f:25:be:1d:7c:22:9a:a7:94:6a:
         ba:36:82:63:aa:f4:9d:cd:84:04:5e:a4:89:09:9c:6c:8b:69:
         22:97:65:ca:92:0b:75:c5:17:88:0b:db:0f:28:fa:44:8a:b0:
         4b:2c:a4:71:50:0c:d8:9b:71:63:24:dd:8a:71:a4:1e:12:60:
         cf:b1:1e:50:20:95:fc:69:73:a1:b8:e5:02:ea:42:c4:0f:9c:
         bf:6d:3b:1f:91:3d:fc:e9:e6:93:ae:a1:ff:43:08:05:0f:07:
         19:40:8c:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE0EEtELO3Qq9BXoVg4e5ASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMWEzNzI4MmRkOTkyZDg4NjU4MTYwNTU5ZTA0ODM5Mjc5
OGM4NGIwHhcNMjYxMDEzMDcwMDQ1WhcNMjYxMDE0MDcwMDQ1WjAzMTEwLwYDVQQD
Eyg0NTNlOTZlZjg5ZjM0Zjc5ZDA2NmJjZGQzMjdmYzE1N2U5MzYyZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO9jGIlcuQ0NjIH2FnTT3ZMjY9EA
Ve5sbyiqRsty2Q4a4ZGXGs9jBBf+uCtw1AXQEA/p67Urm/xpMcVe/JK/UCPr+kB/
3AAq7wq2v5kuU7rrUeqR6AfWvbhvHlYtGHCmKA7ndPlxgICibJAShVca+5mi0e8c
GhxRBM9F9i4JoGTwQslGMez3gbDBWWnQR+PayWZN3uwnp3WoH4A0j+9vn8tD+7MM
vmxjE7XObJQmctCpV4IQ9/L50LLq4YGD0CstN/SxoH/QssLdp4/5Lv6pb50CQLPe
TMMLak/wvE4AJG6xvcf0KtuQeUSQt/JO0sy1LqNtFj/xClh0ImUWK/5J8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEU+lu+J80950Ga83TJ/wVfpNi/aMB8GA1UdIwQY
MBaAFBIaNygt2ZLYhlgWBVngSDknmMhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZWQxMzEtZjlkNy00MWIyLWI4YmMt
MDgyYjFmN2YwZGIyLzEvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mZWQxMzEtZjlkNy00MWIyLWI4YmMtMDgyYjFmN2YwZGIy
LzEvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzwLQpaQs
hFyLpTDqUADeC1e3FLckuW5dE6d9TKB2xZ4YD8h/8jtDJMdgIUakO6wzRyqjqQBC
KR0A8h6BhM35hcfZLVIWLlj1a+eLgcjrW5BW/ilVo0zDR0Nb4zSEJBL/7Qj5URRz
aEP0D9XCLfIVot/69eyPbocmLEZhHt7NvDMdvEQv0NYDDln8KGWg/dI1bln2PoQ9
UdlfJb4dfCKap5RqujaCY6r0nc2EBF6kiQmcbItpIpdlypILdcUXiAvbDyj6RIqw
SyykcVAM2JtxYyTdinGkHhJgz7EeUCCV/GlzobjlAupCxA+cv207H5E9/Onmk66h
/0MIBQ8HGUCMnw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 12:57:28 2026 by rpki-client