Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
File:                     ECeophKZuAo-cdGpgUJ-wAuEnRc.mft (raw, json)
Hash identifier:          6WpzLIUgp4mtKbcFvhHvgVIIEE1c5Jb0E44NvoVVyuQ=
Subject key identifier:   D6:90:6D:DC:6D:6B:60:5D:54:78:36:E7:BF:3A:32:A7:8E:A9:8C:28
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Certificate issuer:       /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial:       019CAD9086DC329DDC01B89588F928BABEA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
Manifest number:          0799
Signing time:             Mon 02 Mar 2026 08:00:55 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:55 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:55 +0000
Files and hashes:         1: ArkmqC5cV4rKHjFzE81Ldao0sEs.roa (hash: hEg6+Nvrfwd2KymAJ5TeuyiIIA0Jz1wye1KL+ASCfyU=)
                          2: ECeophKZuAo-cdGpgUJ-wAuEnRc.crl (hash: 8pkyCozLgC9fp/euz1WD86Wotm4vtiExaM+21f3Y1Fk=)
                          3: NOejcwmPh5BJOHrok8-5R_pK-VA.roa (hash: U6upQkLae5Oi+4csWaNnpSyW7MitDHPojVhGt/0UX1M=)
                          4: QgtZQ0805OCM2cokT2qKD6cPctM.roa (hash: DavE4PxcjRUDAkMRKuUWGBvO9WpwG+932yjIkhXYMNA=)
                          5: SPPjM71nmOX7eNj2-mIx6bdne7g.roa (hash: 249oKopn9OQM2f/WdGlFxfhN6nAjP3z88ppnooYTHME=)
                          6: _BcnufwZCW7iXb3pQbGLXXwf_xo.roa (hash: GSjQZe7rnL/Y2iRKRElHvN0TAcPhSGgI4zSSehXhXpI=)
                          7: ia3F-LgyjS2O_SDcYVaJOR4gNYk.roa (hash: KOIBwS2FoeIdHxBdEglt6oXyrVyFY6fE/gEORDqk87o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:86:dc:32:9d:dc:01:b8:95:88:f9:28:ba:be:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
        Validity
            Not Before: Mar  2 08:00:55 2026 GMT
            Not After : Mar  3 08:00:55 2026 GMT
        Subject: CN=d6906ddc6d6b605d547836e7bf3a32a78ea98c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:da:27:4c:4e:bb:68:bc:c1:ee:14:e4:e0:
                    3b:cc:59:c0:23:eb:11:60:e3:f9:d4:4a:d6:34:2d:
                    86:6e:44:ee:14:8c:52:df:b1:d7:41:cc:3a:0b:2b:
                    97:72:77:38:e0:b5:ff:c1:c0:2c:98:88:62:f9:4e:
                    a8:3a:78:1b:bf:8b:de:fb:d2:7c:d2:75:5b:93:67:
                    4a:23:1b:0c:7b:3f:30:63:19:67:28:bf:62:b7:cf:
                    49:a4:77:3d:3b:ef:87:7a:95:f7:4c:00:c3:6b:31:
                    6e:ec:98:f8:a4:11:98:ec:fa:5b:70:af:03:e0:8d:
                    c0:2a:2f:53:f0:05:23:a2:18:df:e2:b5:bf:7f:93:
                    8b:cd:52:68:24:5d:83:7b:20:bc:5b:68:d1:6f:59:
                    5b:65:89:4c:61:18:0f:47:f8:1a:6b:e3:c9:3e:b7:
                    c6:89:7f:5a:9d:20:a4:cb:fc:e8:b9:6f:7b:4d:79:
                    76:e3:6f:e2:70:5a:5f:1a:39:b1:7c:7d:0b:1e:43:
                    f1:5e:af:af:f3:87:4c:5e:0c:d8:45:72:1e:c4:f6:
                    ad:8e:55:71:c5:f3:3b:36:dc:9f:3f:f6:3a:99:26:
                    b9:f1:73:5e:ea:60:61:22:43:4a:d9:18:94:34:12:
                    c2:8b:50:df:b2:1a:20:0c:c7:00:5e:4a:9b:84:92:
                    40:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:90:6D:DC:6D:6B:60:5D:54:78:36:E7:BF:3A:32:A7:8E:A9:8C:28
            X509v3 Authority Key Identifier:
                keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:88:72:b9:a8:3b:95:81:7b:1d:fd:4d:1c:0b:95:4c:0d:a2:
         7c:18:fc:5c:6a:d8:8a:3b:5d:3a:f0:f0:fa:16:78:b0:79:6a:
         51:7a:b1:80:43:57:18:23:18:e9:98:1e:87:28:9b:1e:23:73:
         0e:e9:5d:97:aa:76:ef:08:61:17:b1:31:1e:1e:9b:f6:33:90:
         97:86:3a:d7:25:b6:80:44:1e:b0:d7:7a:70:c0:aa:2d:db:d1:
         e9:4c:69:a9:e9:f7:eb:9e:a5:1f:67:93:5e:f0:b5:b8:ef:19:
         ee:d9:1b:56:90:5a:e2:b1:26:28:29:4b:13:a2:9f:2d:33:b1:
         41:57:05:d3:f5:1b:2b:6f:41:08:4f:14:a9:0b:bd:69:4c:b3:
         70:a0:92:c9:84:59:56:5f:ab:98:f9:1c:a4:0e:16:c5:95:16:
         33:be:33:1c:2c:b2:9a:4b:d9:45:d8:42:e1:71:d1:20:fc:1b:
         8d:9f:bb:db:58:13:d0:33:5b:0c:47:fd:7c:92:ae:3c:ff:26:
         ff:25:c0:a5:d0:e8:4c:9c:60:fd:7c:37:2a:d3:ab:7b:ae:d2:
         40:ca:b7:7a:88:e3:55:43:ec:31:05:82:38:50:f8:48:9b:37:
         11:fd:27:73:53:f9:06:d8:a4:6f:14:b8:b2:68:d5:3b:8f:c5:
         bc:cd:7d:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkIbcMp3cAbiViPkour6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMjdhOGE2MTI5OWI4MGEzZTcxZDFhOTgxNDI3ZWMwMGI4
NDlkMTcwHhcNMjYwMzAyMDgwMDU1WhcNMjYwMzAzMDgwMDU1WjAzMTEwLwYDVQQD
EyhkNjkwNmRkYzZkNmI2MDVkNTQ3ODM2ZTdiZjNhMzJhNzhlYTk4YzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwafaJ0xOu2i8we4U5OA7zFnAI+sR
YOP51ErWNC2GbkTuFIxS37HXQcw6CyuXcnc44LX/wcAsmIhi+U6oOngbv4ve+9J8
0nVbk2dKIxsMez8wYxlnKL9it89JpHc9O++HepX3TADDazFu7Jj4pBGY7PpbcK8D
4I3AKi9T8AUjohjf4rW/f5OLzVJoJF2DeyC8W2jRb1lbZYlMYRgPR/gaa+PJPrfG
iX9anSCky/zouW97TXl242/icFpfGjmxfH0LHkPxXq+v84dMXgzYRXIexPatjlVx
xfM7NtyfP/Y6mSa58XNe6mBhIkNK2RiUNBLCi1DfshogDMcAXkqbhJJAnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaQbdxta2BdVHg25786MqeOqYwoMB8GA1UdIwQY
MBaAFBAnqKYSmbgKPnHRqYFCfsALhJ0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iYTlkMTMtOGNhNi00NTc3LWE1OWMt
OWRkOTk3ZWVmNGVmLzEvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iYTlkMTMtOGNhNi00NTc3LWE1OWMtOWRkOTk3ZWVmNGVm
LzEvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPohyuag7
lYF7Hf1NHAuVTA2ifBj8XGrYijtdOvDw+hZ4sHlqUXqxgENXGCMY6ZgehyibHiNz
Duldl6p27whhF7ExHh6b9jOQl4Y61yW2gEQesNd6cMCqLdvR6Uxpqen3656lH2eT
XvC1uO8Z7tkbVpBa4rEmKClLE6KfLTOxQVcF0/UbK29BCE8UqQu9aUyzcKCSyYRZ
Vl+rmPkcpA4WxZUWM74zHCyymkvZRdhC4XHRIPwbjZ+721gT0DNbDEf9fJKuPP8m
/yXApdDoTJxg/Xw3KtOre67SQMq3eojjVUPsMQWCOFD4SJs3Ef0nc1P5BtikbxS4
smjVO4/FvM193A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:46 2026 by rpki-client