Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft
File:                     eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft (raw, json)
Hash identifier:          w+dvWAbNCfJ8Tix0j00BeaYQ663TnxbvJytRZDYPMiE=
Subject key identifier:   F9:48:89:BA:D0:DB:DB:74:0B:E1:BB:9E:73:E4:0D:C4:48:D6:77:16
Authority key identifier: 78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
Certificate issuer:       /CN=78356c6a831680e9b8b7c95514953007a9407e87
Certificate serial:       01A0CEC822AD0A6E0DF6AE33E97E53EA7A05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft
Manifest number:          1A70
Signing time:             Wed 23 Sep 2026 15:00:17 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:17 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:17 +0000
Files and hashes:         1: DFoJ8Ykped-mXhqm_OYd3pUCI78.roa (hash: pZAEPyW72cPOpC8U6Y92sF/916oHQlyolVnKoAI3w7U=)
                          2: EAfbw1tdW7YS4g6-HEloi9AGb3M.roa (hash: 7CA/xL5oWj2FQS+a86+X9Pizakh1u78n/2EeRBlMlDE=)
                          3: XN0LNDGWFEA-zEvu1r5zaAXSqy4.roa (hash: FmKonZ3MVtB3ys5G7IPWHLskIr/TqahntltgsmFFZdc=)
                          4: eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl (hash: 9pjWKyV6xrmfiv7rTmRwWbH9RFmAFphlWcPI2GIUgC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:22:ad:0a:6e:0d:f6:ae:33:e9:7e:53:ea:7a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78356c6a831680e9b8b7c95514953007a9407e87
        Validity
            Not Before: Sep 23 15:00:17 2026 GMT
            Not After : Sep 24 15:00:17 2026 GMT
        Subject: CN=f94889bad0dbdb740be1bb9e73e40dc448d67716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1d:75:46:5b:fb:72:8e:a5:a2:30:e8:f2:b6:
                    4b:7b:7a:cf:be:c7:6b:1d:e1:fd:3e:b8:61:87:ec:
                    56:c3:34:4d:96:d8:38:f1:4e:2f:3f:de:fc:94:6c:
                    e3:a7:78:b4:8a:c8:31:4e:41:71:ac:4b:09:cc:95:
                    9c:e8:19:47:1e:32:6f:81:d1:87:ab:2d:4f:be:9d:
                    b7:50:ea:0a:9c:df:90:2e:2d:28:04:81:87:8e:b9:
                    f9:9b:1c:a4:94:01:28:1e:e5:18:ee:d7:ab:bb:39:
                    c3:a5:cc:b7:62:5e:b8:42:64:ae:d4:86:48:94:b3:
                    55:4b:bc:61:da:76:f6:1e:ac:f9:a4:f3:21:df:ca:
                    09:9e:e0:ab:ec:07:44:c9:b7:cb:cb:52:7a:43:df:
                    89:58:e4:03:17:3f:3d:7e:5f:9e:09:60:fd:f6:fd:
                    47:b2:d0:66:0c:35:98:51:e4:b8:fc:b4:76:a5:a2:
                    db:ea:4d:cd:e4:51:61:64:40:f4:d9:33:49:02:9d:
                    76:05:6b:fc:5d:81:10:47:71:14:9e:77:8a:4d:69:
                    67:76:ef:d3:61:9d:98:3d:b4:2b:66:ed:cf:99:b0:
                    b1:7c:ba:7b:99:d7:88:fa:8c:47:1e:86:d8:99:2f:
                    dc:d0:9d:c1:b5:f7:ee:3d:85:f6:ad:ef:14:4d:3e:
                    8c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:48:89:BA:D0:DB:DB:74:0B:E1:BB:9E:73:E4:0D:C4:48:D6:77:16
            X509v3 Authority Key Identifier:
                keyid:78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:66:02:e7:19:cd:1c:49:56:c9:e1:99:78:01:0e:81:a1:3a:
         bb:61:87:7a:17:65:04:bd:7c:33:c3:70:73:7a:e4:96:c1:c8:
         42:ee:1f:09:c3:92:ba:77:48:13:a5:d4:d5:a7:ea:7e:88:f0:
         48:63:bd:97:84:bf:ec:62:88:ef:c3:f7:11:c2:90:86:40:33:
         a2:87:fa:6b:5d:20:45:b2:1b:66:63:78:cf:cc:d9:d1:3c:b9:
         2e:84:3b:fe:bb:47:aa:0d:1b:d4:a0:27:67:e6:51:2b:44:5a:
         b7:48:c4:5b:3a:aa:32:ea:a7:bd:50:f9:e0:a7:35:d7:3b:c6:
         c8:94:b1:a0:e7:23:d5:cf:43:bb:1f:8b:3c:53:ba:de:be:c0:
         22:6c:5d:52:fc:d8:a0:b7:97:1b:82:4b:d0:bf:cc:c9:4a:a5:
         40:f8:0b:38:5d:d4:75:9b:8a:b5:3f:80:ec:2a:06:29:43:d9:
         6a:eb:10:19:3d:88:c7:d4:12:b5:79:f7:97:e2:52:82:37:b9:
         56:4c:9c:e7:f4:84:19:de:de:2e:a3:b7:0e:3c:e8:67:d2:47:
         59:96:1b:71:49:21:ac:21:05:71:a4:3a:c4:d5:da:b0:fc:9f:
         1c:94:47:4a:06:8d:d2:ca:dd:91:6f:fc:1f:7d:a5:88:03:d2:
         49:84:80:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:29:36 2026 by rpki-client