Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
File:                     EIPENieVN9T3JtIxDO8UpC8bK4o.mft (raw, json)
Hash identifier:          nvbuvaa2mGNiaIVt3bYnfl8U5/M/rxJ+pv7loM7n5FI=
Subject key identifier:   D4:36:0E:81:61:64:C8:5C:9B:F4:87:7A:AD:4A:72:06:E3:A8:05:9F
Authority key identifier: 10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A
Certificate issuer:       /CN=1083c436279537d4f726d2310cef14a42f1b2b8a
Certificate serial:       01A0DFF41C464688083F4CA76B609A23D036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
Manifest number:          078F
Signing time:             Sat 26 Sep 2026 23:01:52 +0000
Manifest this update:     Sat 26 Sep 2026 23:01:52 +0000
Manifest next update:     Sun 27 Sep 2026 23:01:52 +0000
Files and hashes:         1: BRc2c3EDcZakZfA0W_dY8bIp5oc.roa (hash: 8BEI3S2LfJbhhRBz8Cr9mCLe0EnYlfgBmkbf0JQfcno=)
                          2: EIPENieVN9T3JtIxDO8UpC8bK4o.crl (hash: jOF0fGX/8107jmUgbY2QobDiYxF+0mq0Kz5Zmu6xu50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:f4:1c:46:46:88:08:3f:4c:a7:6b:60:9a:23:d0:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1083c436279537d4f726d2310cef14a42f1b2b8a
        Validity
            Not Before: Sep 26 23:01:52 2026 GMT
            Not After : Sep 27 23:01:52 2026 GMT
        Subject: CN=d4360e816164c85c9bf4877aad4a7206e3a8059f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a2:b0:3c:12:ef:2d:b0:88:76:24:bc:45:1b:
                    54:31:56:e8:b0:f1:13:3d:83:e3:63:1c:cb:b2:39:
                    97:5c:63:cd:ec:3b:0d:a6:da:23:2f:f0:ff:ce:6a:
                    d0:35:78:63:16:41:9a:94:53:c2:f0:9d:5d:d2:ec:
                    c1:78:c0:2a:d2:8f:f4:24:80:ef:0c:5b:96:76:96:
                    94:09:c1:e4:00:2c:1e:8d:cf:2e:c6:7e:0c:8c:7a:
                    da:7a:d6:27:3c:90:ff:b1:63:8c:ae:84:76:c0:c1:
                    a1:a8:98:e3:3f:58:99:f7:dd:bb:be:78:2f:3d:f6:
                    21:f4:8f:4c:97:a2:86:37:aa:be:7f:2b:fc:e6:47:
                    21:4c:1b:8a:8d:a5:87:64:40:c1:a3:1d:55:ed:3a:
                    2e:83:68:ae:98:ee:50:ac:12:e9:bc:fc:1c:74:a1:
                    be:59:f3:85:a4:03:a5:a3:1e:88:a1:48:59:61:24:
                    74:91:20:ca:7f:22:3f:3c:88:72:4b:ca:08:72:64:
                    ee:ea:c6:25:96:86:ee:93:bb:1c:7e:3f:a4:56:c3:
                    4a:d5:ce:f9:9f:6f:ff:04:8d:cb:1b:6f:d1:fe:c7:
                    42:10:1d:c2:7b:65:9f:0a:5a:7d:15:a5:1f:87:8e:
                    70:59:40:bd:cf:6d:14:52:57:4a:d8:83:83:ed:a4:
                    a9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:36:0E:81:61:64:C8:5C:9B:F4:87:7A:AD:4A:72:06:E3:A8:05:9F
            X509v3 Authority Key Identifier:
                keyid:10:83:C4:36:27:95:37:D4:F7:26:D2:31:0C:EF:14:A4:2F:1B:2B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPENieVN9T3JtIxDO8UpC8bK4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/091473-4d8b-4bc9-a912-812248b65370/1/EIPENieVN9T3JtIxDO8UpC8bK4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:20:cd:68:b9:ec:61:3f:7a:4b:4b:93:45:55:5a:55:36:8e:
         be:96:f6:d4:e6:f5:6a:40:9e:11:2b:27:6f:37:7f:00:81:9f:
         32:fc:21:7c:5e:b2:af:64:f5:fb:aa:c7:c7:79:ed:3d:89:3b:
         c0:b3:37:0b:b0:e5:de:72:a6:b3:ec:76:39:36:dc:3f:01:1b:
         74:8e:a9:52:d5:25:26:af:38:1c:f2:e4:21:7d:c2:0f:c0:9e:
         4e:b9:f5:80:bc:aa:a7:53:84:e8:c4:3e:f1:52:24:a2:60:6c:
         ef:d2:44:c1:41:95:0a:fa:2b:01:f3:b4:e7:1d:a1:87:50:8f:
         f6:ba:27:90:f1:14:e7:94:c2:13:4d:e2:fd:66:53:85:3d:56:
         a4:b4:3b:b9:57:3b:74:ba:2c:1c:08:fe:48:53:07:68:11:50:
         9b:44:f0:93:c7:e9:43:f2:6b:74:8e:1d:b1:d9:3f:8f:42:6d:
         ad:c5:4c:98:8d:bc:66:33:04:6e:35:4b:58:98:5d:a1:91:93:
         8f:c0:a9:fe:b7:bb:ea:cb:30:2c:c3:33:f3:a2:1d:79:d4:40:
         89:3b:4b:00:f5:e7:d9:e2:4c:cb:10:b0:b2:3f:5e:dc:cc:10:
         3e:57:de:ee:84:6d:41:8d:0d:e0:64:29:0e:35:e0:eb:9e:b2:
         f5:b9:e0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:43:39 2026 by rpki-client