Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
File:                     EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft (raw, json)
Hash identifier:          T6KDwDtx9oRt2jQbAEghzK0Zh13ngxbo78UZ0sXjp2k=
Subject key identifier:   4D:01:B0:57:2F:44:55:C7:0C:B6:D5:F2:0D:80:BA:C4:7E:1A:14:FA
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Certificate issuer:       /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial:       01A0BE428975B557625215BDFAFB8C73CE70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
Manifest number:          0449
Signing time:             Sun 20 Sep 2026 10:00:26 +0000
Manifest this update:     Sun 20 Sep 2026 10:00:26 +0000
Manifest next update:     Mon 21 Sep 2026 10:00:26 +0000
Files and hashes:         1: 6NomImNZWaHi6JxMplj9lMIruGU.roa (hash: 66ybrBR0IXxLeTkfJbiHhp6BZdj8GOj7WY0PcGUFYik=)
                          2: AW17FInZXbbfzlPfQfag3e5H2tA.roa (hash: dmQitLz8NUYQglDkSo+N/IQ9Ntp7x8tsHi+hjRpZyNs=)
                          3: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl (hash: 8D9Gp9GcZjB8C8edqzSmpJFyBVdH6vE5ZHpS5zpFyZ8=)
                          4: G_a_D4w6XID3HHcAkDZ33ncczUI.roa (hash: TJwpjG7RY739+T5MlCso7ay89Sk16BHwPqa3u2ERz/0=)
                          5: N6YysdN9coyWq8a_olGcakNcTTY.roa (hash: XflvML4jU8nWdsR81GpugPsjYujETxYvRfm/otH2XUQ=)
                          6: U5qz6xEJwpl9W5yFofcjv_QYJdg.roa (hash: SFU07nCtw7gmZMA4jhGAvEN7wK5wQZgNbDVm6oGSUf8=)
                          7: xdqZMIH3R0kq1OUzrCJ7_j5BrPk.roa (hash: JI0nZYfinXynWc9Z+bVX76ENbeGi+A5V4Zl9wHWDiy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:42:89:75:b5:57:62:52:15:bd:fa:fb:8c:73:ce:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
        Validity
            Not Before: Sep 20 10:00:26 2026 GMT
            Not After : Sep 21 10:00:26 2026 GMT
        Subject: CN=4d01b0572f4455c70cb6d5f20d80bac47e1a14fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:ee:37:a7:83:bb:93:36:8b:75:72:97:fd:
                    87:53:3f:ec:7e:e9:4a:66:e3:be:bc:1b:b6:4f:86:
                    bb:da:5c:e4:e7:aa:63:88:6d:ed:7f:24:7f:4f:06:
                    af:3b:55:c4:25:19:13:32:d8:a0:f0:85:53:c1:01:
                    51:ea:fb:2a:64:c7:c8:c8:96:7f:ba:19:49:78:7f:
                    9a:4c:2d:e3:a1:bb:1c:a3:d1:4c:c8:99:ef:97:d7:
                    0c:3e:25:cd:00:85:3a:13:df:07:7f:b9:8b:c5:10:
                    fe:7e:27:30:f6:41:de:28:a4:ad:86:66:61:04:4f:
                    2d:f6:3b:66:22:85:f5:f2:11:53:56:22:a0:19:3c:
                    e5:58:4e:50:fc:fa:36:ed:63:84:1d:bf:62:54:c0:
                    70:1a:ad:90:35:00:8d:73:21:f8:e2:27:93:22:b4:
                    c8:4d:e8:a6:b8:53:6d:b4:23:0e:15:25:8d:d1:f0:
                    5e:65:84:02:be:f1:5b:f1:cf:c9:6e:40:72:c6:92:
                    13:54:62:72:72:18:51:d1:84:e6:6f:63:f0:12:1e:
                    c2:59:41:4c:0a:4f:bd:4a:5c:7c:e6:f5:54:99:07:
                    6b:0c:6b:a8:ba:b2:b7:be:32:b8:bb:ee:0b:33:c7:
                    f5:c3:4b:1f:9a:a7:d4:bb:98:6e:54:66:26:26:e7:
                    17:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:01:B0:57:2F:44:55:C7:0C:B6:D5:F2:0D:80:BA:C4:7E:1A:14:FA
            X509v3 Authority Key Identifier:
                keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:cc:a1:b6:40:19:c6:77:c0:70:62:62:47:c9:42:44:ad:be:
         35:87:c1:17:a1:fb:2f:12:f4:d2:ff:cb:3e:31:84:51:48:72:
         3f:fa:ae:79:da:61:8d:a1:d3:87:4d:2e:e8:61:49:60:11:3a:
         9e:7a:d8:02:2a:08:e4:cd:e8:1e:7d:0a:14:27:36:7d:ec:45:
         7d:03:49:3f:89:86:98:bd:ca:e6:39:51:30:7c:42:83:94:f1:
         a3:60:66:e3:bd:0c:62:b8:3a:b3:01:05:b3:eb:7e:d2:92:bd:
         3d:2c:ab:a0:8a:c8:55:33:41:eb:33:7b:d1:d3:f5:92:d4:27:
         91:5a:3c:1a:ec:ba:8a:48:bd:1a:a0:67:55:db:94:8e:f3:09:
         1b:58:d5:0f:ff:7a:9f:3a:7e:af:92:f1:34:2d:df:28:3d:cd:
         3e:a2:bc:52:ba:72:91:de:fe:e1:00:f9:ae:ca:7d:75:7a:81:
         23:56:ff:74:2d:64:2e:f9:1b:4e:8f:ff:40:51:a3:9c:a8:0a:
         71:67:ba:b6:a2:2d:d3:c8:b6:c1:46:55:b0:4c:5c:88:02:f0:
         95:ea:9e:14:50:97:86:c6:4a:da:79:ab:52:6f:4c:7a:a4:cf:
         0b:67:42:9f:03:0e:bf:b8:bf:07:f9:7d:de:a1:3c:ac:36:e9:
         c9:b6:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:57:29 2026 by rpki-client