Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
File:                     EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft (raw, json)
Hash identifier:          1jhu0wvIG3wZwbLySuVGoeA7QpFToprMZI6zuUVc87U=
Subject key identifier:   22:FC:AA:B1:4C:34:A0:AD:A6:67:7B:84:E1:BF:68:E9:20:38:9F:6C
Authority key identifier: 13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9
Certificate issuer:       /CN=1323be6d548145867863b7b2fa464bdf8518a0c9
Certificate serial:       01A1310FB1FAED443D493744820314089EBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
Manifest number:          1A9D
Signing time:             Mon 12 Oct 2026 17:01:14 +0000
Manifest this update:     Mon 12 Oct 2026 17:01:14 +0000
Manifest next update:     Tue 13 Oct 2026 17:01:14 +0000
Files and hashes:         1: 5O82bj0RVPYC9fHeytygnYo76U8.roa (hash: P+7qJZ65HnaqEFW0awG0yJ2/55GEb9yw1uv5c7sRaVA=)
                          2: 8ZMhpHWpSjesuQ3JK0HQjCVMxBg.roa (hash: M4Nr0Wi/SzNVzQvcJX08oqzRs/vvxC+K5A74A/Zcd8o=)
                          3: EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl (hash: RGsaUAD16CeAIMDpJG9rsi5TdsASd0kyYqMdYkcd4kY=)
                          4: JMBywUmb80eS8GOrITuaVx8nCRg.roa (hash: /324/IAHNCGdBytZWzsoLGKPRqjPYfQZAIUmmm6zgwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:0f:b1:fa:ed:44:3d:49:37:44:82:03:14:08:9e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1323be6d548145867863b7b2fa464bdf8518a0c9
        Validity
            Not Before: Oct 12 17:01:14 2026 GMT
            Not After : Oct 13 17:01:14 2026 GMT
        Subject: CN=22fcaab14c34a0ada6677b84e1bf68e920389f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7d:3f:3e:62:ca:84:9d:66:37:96:db:57:84:
                    78:fc:be:ec:65:11:6f:b0:69:75:e4:a4:3d:aa:48:
                    cd:d4:0e:fd:26:d0:6c:b7:27:b6:a5:a3:b8:b8:aa:
                    34:7d:af:b0:fc:1c:33:3c:b6:3b:90:e0:e9:3f:03:
                    9e:82:a3:32:5e:fb:e4:9b:9f:1c:2c:5f:f4:ac:e8:
                    5e:db:22:eb:3c:83:12:0b:c2:f9:21:f5:86:88:62:
                    4d:13:61:73:7e:53:69:83:f4:39:f6:e1:25:af:43:
                    00:4c:04:28:06:a9:33:66:4e:04:60:cf:17:43:a0:
                    13:49:85:85:96:f6:e2:8b:16:43:24:05:52:a9:16:
                    e9:53:58:97:b8:ef:03:28:60:c5:a7:6d:4f:df:cd:
                    8e:3c:80:7a:e0:e2:67:11:7e:86:70:da:e7:74:28:
                    d0:2b:16:b3:04:87:cb:37:b2:2f:35:f1:53:ac:04:
                    43:5e:bf:1e:0b:9a:ef:db:5e:40:b9:31:a0:c6:a2:
                    b5:0f:86:02:fd:db:48:8e:92:73:bb:eb:5c:8e:52:
                    fe:f7:3a:c4:74:9b:9a:4d:c5:3a:8b:9b:6e:73:c3:
                    0e:5f:66:fc:27:f1:22:3a:87:cc:23:32:4d:39:f9:
                    72:7d:4d:19:72:c1:32:6d:12:3a:87:57:77:d2:27:
                    62:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FC:AA:B1:4C:34:A0:AD:A6:67:7B:84:E1:BF:68:E9:20:38:9F:6C
            X509v3 Authority Key Identifier:
                keyid:13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a4:88:2c:0c:9f:d1:0e:02:cc:9d:10:0a:25:db:63:13:df:
         5e:49:02:b5:e0:9a:cd:4f:3f:93:4d:3d:81:85:f7:6f:1c:59:
         75:3c:c2:ae:f3:d0:c8:ef:6e:88:18:94:c5:1d:14:d5:5a:b2:
         96:45:0b:b6:5c:06:10:1b:19:a7:7d:37:84:13:ca:96:27:9c:
         8c:5c:c7:f0:c7:02:6d:8b:6c:ab:cc:15:3c:1d:c3:c5:f2:36:
         5f:c5:dc:dc:11:eb:83:be:8d:2f:36:c4:ca:8f:42:21:5f:38:
         f3:f6:81:84:b1:38:ac:61:75:b9:27:69:39:47:ca:34:80:d4:
         9b:69:48:b1:67:8f:52:a0:ff:31:1d:85:27:33:1d:0f:52:01:
         5c:4c:13:29:a4:72:6c:6d:e8:1b:41:ee:85:bd:bf:35:88:ca:
         b6:97:4d:ce:01:44:cf:65:f7:62:f0:16:22:ef:54:c7:70:9d:
         e1:78:17:97:2e:7f:0d:20:f3:37:7f:e6:e1:97:c8:bd:48:ee:
         60:fc:10:4f:2a:40:5e:28:4d:fc:0a:e7:a3:98:3a:7d:a7:4f:
         1b:27:bd:71:11:3c:85:9b:f8:45:6f:e1:92:6b:28:46:e4:af:
         47:8e:2d:f4:08:a8:44:20:e0:5b:e8:c6:1d:51:cd:e8:bb:a5:
         d0:e4:82:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaExD7H67UQ9STdEggMUCJ68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMjNiZTZkNTQ4MTQ1ODY3ODYzYjdiMmZhNDY0YmRmODUx
OGEwYzkwHhcNMjYxMDEyMTcwMTE0WhcNMjYxMDEzMTcwMTE0WjAzMTEwLwYDVQQD
EygyMmZjYWFiMTRjMzRhMGFkYTY2NzdiODRlMWJmNjhlOTIwMzg5ZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6X0/PmLKhJ1mN5bbV4R4/L7sZRFv
sGl15KQ9qkjN1A79JtBstye2paO4uKo0fa+w/BwzPLY7kODpPwOegqMyXvvkm58c
LF/0rOhe2yLrPIMSC8L5IfWGiGJNE2FzflNpg/Q59uElr0MATAQoBqkzZk4EYM8X
Q6ATSYWFlvbiixZDJAVSqRbpU1iXuO8DKGDFp21P382OPIB64OJnEX6GcNrndCjQ
KxazBIfLN7IvNfFTrARDXr8eC5rv215AuTGgxqK1D4YC/dtIjpJzu+tcjlL+9zrE
dJuaTcU6i5tuc8MOX2b8J/EiOofMIzJNOflyfU0ZcsEybRI6h1d30idivwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCL8qrFMNKCtpmd7hOG/aOkgOJ9sMB8GA1UdIwQY
MBaAFBMjvm1UgUWGeGO3svpGS9+FGKDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8yYTFmZWYtMjIxZC00MDU1LThjNTgt
NWRlMzJiNjZkYjBhLzEvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8yYTFmZWYtMjIxZC00MDU1LThjNTgtNWRlMzJiNjZkYjBh
LzEvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqSILAyf
0Q4CzJ0QCiXbYxPfXkkCteCazU8/k009gYX3bxxZdTzCrvPQyO9uiBiUxR0U1Vqy
lkULtlwGEBsZp303hBPKliecjFzH8McCbYtsq8wVPB3DxfI2X8Xc3BHrg76NLzbE
yo9CIV848/aBhLE4rGF1uSdpOUfKNIDUm2lIsWePUqD/MR2FJzMdD1IBXEwTKaRy
bG3oG0Huhb2/NYjKtpdNzgFEz2X3YvAWIu9Ux3Cd4XgXly5/DSDzN3/m4ZfIvUju
YPwQTypAXihN/Arno5g6fadPGye9cRE8hZv4RW/hkmsoRuSvR44t9AioRCDgW+jG
HVHN6Lul0OSCrQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 02:27:46 2026 by rpki-client