Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File:                     eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier:          /BBuLwn22ZzpJ7mSWpZASVt1bHIcjVkYQWWaUhY+wBg=
Subject key identifier:   30:D8:E7:F1:C4:A7:8C:27:02:F1:06:28:02:66:45:5B:B0:61:75:F6
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer:       /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial:       01A13E264AAC451E5F4FD781F0D98BC52EC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number:          1AA5
Signing time:             Thu 15 Oct 2026 06:00:59 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:59 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:59 +0000
Files and hashes:         1: QKSBmP3gzvhQzJUUPBNcCLWHKHM.roa (hash: KF0eVyAAEY8VGFQ1+W9WFibrhH45a/vXshpeDiUAhF0=)
                          2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: e//587zCrE3oUoJ23vn74f+Nh9EtXuzgurLtCGkQgIM=)
                          3: ycdkqwKUZrrAqLHqkXN7UpQhhcY.roa (hash: eyPv8WnShqVImAMmncYrIFp/3E9eBCBd7q2DigUVUPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:4a:ac:45:1e:5f:4f:d7:81:f0:d9:8b:c5:2e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
        Validity
            Not Before: Oct 15 06:00:59 2026 GMT
            Not After : Oct 16 06:00:59 2026 GMT
        Subject: CN=30d8e7f1c4a78c2702f106280266455bb06175f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9b:27:aa:3d:e3:e9:5d:9b:73:91:ce:90:c4:
                    78:3f:f2:1c:d9:3f:82:4c:e9:0a:0d:1f:bc:6c:a6:
                    95:0b:46:1c:68:65:3a:c0:5b:28:22:60:4c:4b:92:
                    f7:a1:19:e8:2e:eb:11:a9:32:f5:f0:d6:91:f4:ef:
                    08:9d:3f:63:33:ea:9b:13:fd:75:e6:58:23:8d:e5:
                    f3:87:d4:fb:c9:56:2c:68:ce:59:c5:69:53:4f:6a:
                    54:3e:d7:0c:69:a8:9f:c1:af:e9:af:47:7e:a4:0c:
                    f4:25:27:0d:1f:1f:52:63:b4:ea:a7:cc:e4:fb:2f:
                    f7:8d:eb:5e:14:a8:f8:23:92:1d:8a:78:dd:31:18:
                    b4:cc:84:f7:96:4a:a2:68:6c:ae:0d:e6:e9:92:71:
                    cd:31:bd:1e:96:ab:fc:f0:5d:4d:45:49:67:5c:bd:
                    e5:a0:fc:7f:b8:d4:ab:78:69:7a:40:1d:fa:af:62:
                    75:6b:9f:74:a2:0f:44:76:e0:2a:90:4d:7a:04:2c:
                    50:ec:23:b8:81:b4:7d:ba:ce:cf:91:89:cc:dd:56:
                    01:de:08:a1:e8:a5:8b:c0:33:35:fe:17:28:81:9e:
                    0b:1c:37:f2:ea:c5:dc:83:a8:ab:43:c0:ad:a6:59:
                    14:07:19:dd:fc:13:0e:32:64:99:fe:5a:04:c1:fd:
                    db:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D8:E7:F1:C4:A7:8C:27:02:F1:06:28:02:66:45:5B:B0:61:75:F6
            X509v3 Authority Key Identifier:
                keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:db:9f:bd:7e:9d:6f:2f:ea:d6:18:c9:9b:bf:e5:18:60:f6:
         af:80:5d:10:a4:c3:24:d4:00:0a:6b:cf:9c:7d:3a:ea:95:70:
         b9:b9:49:91:40:f2:53:0e:21:bd:23:e0:0c:5f:81:34:a3:5f:
         55:6d:6b:81:22:8f:20:ce:f9:5a:40:f6:cd:b9:aa:cf:e3:f2:
         1b:fa:2d:74:f7:a6:f1:85:c6:11:9c:58:e8:64:f8:70:1a:8e:
         75:8f:dd:6b:47:97:8e:e3:8f:26:2c:76:45:a1:c2:26:b1:97:
         5b:17:6f:8c:00:a6:5d:04:d3:91:06:09:3e:c7:ad:36:49:2d:
         24:bc:94:4c:1b:f8:d2:3a:6e:3f:e8:fe:90:81:5e:2c:1a:d7:
         1f:86:24:e8:c3:ab:11:9b:26:9f:e1:62:d2:9a:fd:06:fc:e5:
         fa:19:9a:fc:54:c6:75:a3:1d:f7:93:31:7a:7d:f9:ad:2f:10:
         2e:58:3c:de:61:1d:1b:b6:75:8c:5b:53:72:ac:ef:6d:8f:1d:
         d8:8d:03:d5:6c:76:a3:30:5f:53:16:a5:a1:8f:d2:b1:62:8e:
         ea:1b:82:28:42:c1:6c:9c:15:1a:dd:53:86:9c:ce:2c:bb:19:
         61:fa:f5:fc:10:5d:57:4d:81:40:bd:d9:2a:5d:d9:4f:4a:89:
         de:a1:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:58:26 2026 by rpki-client