Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
File:                     egvN7ozoOcTSBBPIYkI8ygT9xgo.mft (raw, json)
Hash identifier:          0Zid/KGnp984wC3LXuDrsr4rIYu7BSmVCD36fyap8HU=
Subject key identifier:   44:6A:22:8A:C2:0E:93:EA:EE:97:E2:B0:24:AB:D4:F0:79:62:86:3E
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Certificate issuer:       /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial:       01A13E259C57B5B306B639787688EC0DCF78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
Manifest number:          1406
Signing time:             Thu 15 Oct 2026 06:00:14 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:14 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:14 +0000
Files and hashes:         1: 53H4kGtC_SbzrsI-Vzd9TCGN8wY.roa (hash: rLB3dTRqcK5WY3gJz81sl+g0PUHVo5VwKbPsiJ+N2Ok=)
                          2: EP-EAgqiDi1Uxc1mLP43RrvoWe0.roa (hash: kIJAbYf7/TAQT5Y3mOwU5/SUvXYx6069NZi8uJFH8FY=)
                          3: E_XmM5IBFyFELEnknKVAb_189qw.roa (hash: Mlub1KTpnHaSVLTaB/n4LoTON1L2ATvKiA1EUAmQpUg=)
                          4: OIq2o5hKdaMH_2PTUWzIlIKfs2g.roa (hash: gefzhJXJU82C+eFShlNs7p/wt0aYa1LR779QRT2gD0A=)
                          5: c0q33XIOQrm5W1qjd8fw_F2VySw.roa (hash: PxSJmR26K9n2xvyDwPVrN57pqz+8nMCKwGzKiK0FnUE=)
                          6: egvN7ozoOcTSBBPIYkI8ygT9xgo.crl (hash: JX9+qjU/YJlPzRU5Wjl2o86Z1bB3xvEwIAgisa8eFUY=)
                          7: oIFu7Vss_FsSg6ba6OZTOOzWH40.roa (hash: Om63+Vuo/DpGh5dNs3H906zkOfMO055KyU7UPPEoe9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:25:9c:57:b5:b3:06:b6:39:78:76:88:ec:0d:cf:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
        Validity
            Not Before: Oct 15 06:00:14 2026 GMT
            Not After : Oct 16 06:00:14 2026 GMT
        Subject: CN=446a228ac20e93eaee97e2b024abd4f07962863e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:43:47:42:3a:80:03:7a:52:2f:25:9d:b5:f4:
                    67:e5:1b:cb:ba:fe:f0:5d:3d:ba:33:d4:72:cf:17:
                    9a:58:57:b2:5f:3d:d6:3a:ae:17:c1:c2:f3:fe:59:
                    15:1a:52:e8:eb:27:9b:a3:43:79:07:63:2c:0d:83:
                    20:6f:32:94:51:33:51:7a:fa:f6:3d:b2:cd:5b:56:
                    0a:b5:ec:c0:2d:a7:39:16:38:54:2b:24:53:da:c1:
                    46:ce:d3:c3:e5:3b:48:2b:b0:b9:b6:90:9d:0f:3b:
                    e5:b6:9d:59:98:b6:85:3f:15:0c:17:84:d9:35:ae:
                    1c:55:bb:25:ad:18:1b:c5:e5:59:fd:f0:dd:15:ea:
                    0b:9a:3d:00:01:13:45:52:aa:27:50:c9:65:b6:02:
                    ef:81:6b:dd:3c:20:66:69:f2:b7:56:13:4a:31:38:
                    3f:a3:c1:ee:f4:25:a0:93:b8:8f:93:64:0f:27:08:
                    f4:37:67:95:b9:2e:e9:09:a4:e0:85:e4:9a:0b:21:
                    bf:1f:79:6a:8c:78:64:8a:74:93:d5:2e:6a:96:44:
                    c1:c4:95:3f:74:43:f9:c3:2c:04:79:42:c0:55:14:
                    f8:60:14:a6:96:dd:e2:b0:aa:90:82:ef:ac:3d:6b:
                    4d:b1:ee:2f:82:80:b0:19:7d:18:4c:38:8c:a2:60:
                    de:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6A:22:8A:C2:0E:93:EA:EE:97:E2:B0:24:AB:D4:F0:79:62:86:3E
            X509v3 Authority Key Identifier:
                keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b5:de:e0:62:4a:a6:b8:f6:4d:20:48:b1:c9:22:6a:c3:8f:
         2f:b9:bc:fa:b9:4e:da:ce:6a:a8:ce:4b:56:99:b3:f8:28:79:
         10:c1:90:b1:69:40:9c:ee:70:a6:d4:93:f8:cc:9f:64:0d:8c:
         ce:4e:4a:ba:93:03:42:eb:ac:e9:2d:87:5c:d3:d1:ae:46:fe:
         92:60:fc:96:ca:a4:66:27:73:60:81:6f:8b:47:14:90:f3:bd:
         95:48:3a:44:20:e8:f5:f5:c9:9e:42:c2:28:36:92:df:d4:12:
         8d:04:e3:b1:93:d6:5f:9a:46:fa:cd:fc:e9:99:79:de:35:9c:
         84:b4:98:3e:50:24:25:e4:4f:bf:d0:0a:36:39:ae:b6:88:00:
         03:5a:2b:ff:db:81:7b:9f:ba:cf:bd:cb:1c:08:11:37:76:18:
         28:3e:ca:51:8a:6f:d7:75:20:4f:66:55:d0:fb:0b:b4:41:be:
         a1:05:f2:9f:48:1f:ff:96:a0:1b:5d:cd:cc:6e:f1:6d:06:d5:
         06:5a:9a:0a:90:80:36:77:da:24:f5:dc:2a:e1:09:19:4b:d6:
         7b:fa:0f:6a:32:61:e2:fc:c8:64:b3:97:25:3b:9d:c5:88:53:
         b2:71:69:93:57:bb:51:cc:d5:26:f5:61:0e:cd:fc:59:54:c5:
         85:fc:40:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:09:37 2026 by rpki-client