Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
File:                     E82HAn19OjuffEukSV5J4hrVpLs.mft (raw, json)
Hash identifier:          9ZQ99DsyP08lOzGIBTX+bx0D9mSEaOOucMHluf/dIoQ=
Subject key identifier:   BF:AB:2B:8D:BF:0A:5F:AB:20:E7:61:2F:E7:51:E0:1E:A7:73:EE:C3
Authority key identifier: 13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB
Certificate issuer:       /CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
Certificate serial:       01A0C70F25A514EFAC5D278D7E66A115EC47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
Manifest number:          1645
Signing time:             Tue 22 Sep 2026 03:00:53 +0000
Manifest this update:     Tue 22 Sep 2026 03:00:53 +0000
Manifest next update:     Wed 23 Sep 2026 03:00:53 +0000
Files and hashes:         1: 6uylP13BjyxFcLc744MJm8y5W0U.roa (hash: MZGBxQNHUnKkJtWwdESchmnXllj9tvS5hzujCo2mmtE=)
                          2: E82HAn19OjuffEukSV5J4hrVpLs.crl (hash: DkfYSEq9b84wTgm+REqvceOgQep+00qrZD2uHr3iPxM=)
                          3: LFtuG7P8iCtOMJ-_HIpVvd27MIk.roa (hash: +FNhZHEAVTu13uveNE5cM1cVHyXcnYJhiraSKz/AoYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 03:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:0f:25:a5:14:ef:ac:5d:27:8d:7e:66:a1:15:ec:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13cd87027d7d3a3b9f7c4ba4495e49e21ad5a4bb
        Validity
            Not Before: Sep 22 03:00:53 2026 GMT
            Not After : Sep 23 03:00:53 2026 GMT
        Subject: CN=bfab2b8dbf0a5fab20e7612fe751e01ea773eec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f4:b4:21:9d:ae:2d:b4:ea:75:3a:fb:b2:58:
                    27:ed:3e:08:80:58:c6:e8:dd:6f:70:7a:7e:6b:91:
                    92:c5:3d:66:56:1f:d7:3d:31:fe:c6:8d:f9:4a:26:
                    77:32:5c:78:c5:ca:9e:29:f9:fd:7c:47:f8:49:7c:
                    a3:63:67:26:d8:25:fd:5e:75:49:82:f3:1c:8c:de:
                    af:9b:2e:41:b1:b1:03:fd:5e:66:b3:10:b2:b0:dd:
                    28:b3:70:4e:df:77:da:df:5d:b4:30:eb:27:80:ce:
                    22:d8:4b:1d:d6:89:7d:9f:9a:a8:76:7b:54:c9:9c:
                    6c:ef:26:d8:06:e3:18:58:01:88:1a:66:0a:e8:e6:
                    0b:7f:58:c6:c5:53:00:93:aa:8f:a8:0f:76:bd:97:
                    0f:a8:fb:26:44:34:e9:58:37:89:bb:56:64:2b:a1:
                    94:d2:54:23:03:22:0c:fb:95:e1:20:01:27:ca:07:
                    a8:80:ed:d9:48:a4:94:20:cb:1e:35:af:4d:94:1a:
                    d9:da:8d:35:40:bd:8e:81:4f:ce:cd:fd:0f:ce:00:
                    9c:42:b8:12:16:48:d8:19:21:6d:b8:67:e9:e4:65:
                    a4:d2:49:9f:3c:94:dc:7d:c4:40:71:5e:2c:47:9b:
                    9c:81:0a:f3:ca:62:8f:ec:8a:3a:5d:44:05:a9:2a:
                    52:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AB:2B:8D:BF:0A:5F:AB:20:E7:61:2F:E7:51:E0:1E:A7:73:EE:C3
            X509v3 Authority Key Identifier:
                keyid:13:CD:87:02:7D:7D:3A:3B:9F:7C:4B:A4:49:5E:49:E2:1A:D5:A4:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E82HAn19OjuffEukSV5J4hrVpLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7977e-ad30-4cb7-8ed3-29f4cd0ba804/1/E82HAn19OjuffEukSV5J4hrVpLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:40:39:f6:2b:52:00:e8:d7:7d:fa:a7:d4:bb:af:52:eb:3e:
         0d:ce:4a:0c:38:cd:41:0e:ae:8e:b9:1a:75:b5:94:30:17:11:
         56:98:06:55:43:0f:a7:4b:34:8b:a3:a2:5b:c9:12:48:37:55:
         6e:95:47:2e:2f:35:5d:94:9e:e1:8b:ae:fe:9e:08:91:c5:a3:
         21:2e:4e:e5:25:e2:80:de:ac:c0:4d:1d:9b:0e:6e:db:a2:eb:
         49:db:ed:45:7b:88:c3:82:ed:2d:34:fe:a6:69:ce:71:ac:ba:
         c3:b1:ee:19:9c:24:dc:e2:80:f6:c6:01:a2:2e:9d:34:9a:d5:
         31:80:cb:bb:51:51:e2:54:90:df:cf:74:4d:f6:93:c2:f3:8a:
         af:ae:97:12:ea:c4:de:fa:97:e3:b7:95:02:66:00:09:6c:e2:
         b8:49:6d:68:71:85:05:1b:22:41:4b:91:24:78:d2:dd:7c:fe:
         89:a7:bd:8a:11:f2:31:f7:b9:47:96:c1:de:67:9f:a2:06:5b:
         e0:75:36:20:89:da:8c:4a:10:1f:14:19:a8:19:87:a9:3e:8d:
         08:12:97:eb:5d:69:2d:67:3c:ea:8b:21:1c:b8:65:4c:b9:dc:
         b3:30:3c:9b:aa:3d:8c:e8:da:f6:ad:05:94:26:71:9a:42:73:
         9c:01:e3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:16:43 2026 by rpki-client