Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
File:                     eIehaWWHX29TvMMfDkk6lhVOt7k.mft (raw, json)
Hash identifier:          +ZhEGiy/irI4RTs5uhKfmNthIM2ndtQ2KoC3YFVTGOM=
Subject key identifier:   BA:6F:CE:B7:E2:8F:66:99:0C:F0:AB:53:7C:07:C0:E5:4B:B3:25:5E
Authority key identifier: 78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9
Certificate issuer:       /CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
Certificate serial:       01A0D26E845B3654CBB00BDAD170C9C41726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
Manifest number:          178B
Signing time:             Thu 24 Sep 2026 08:00:53 +0000
Manifest this update:     Thu 24 Sep 2026 08:00:53 +0000
Manifest next update:     Fri 25 Sep 2026 08:00:53 +0000
Files and hashes:         1: MJofjdkMEmgx2BydUOl_6hfgSP0.roa (hash: SYQp19hNRf4PycQPpMlkNy2V7oY/RHobHYkQy5EY5Uk=)
                          2: e3rUNCM0Xf2LeGKAo_m6z686FVs.roa (hash: /zRO4TdqdR87Zu84kUd28IeKppEjdoIpNzsSQ/9y0kI=)
                          3: eIehaWWHX29TvMMfDkk6lhVOt7k.crl (hash: Qlw/m5YzetNb/jY628oyZXw5Z5N69r9rWdSDGjOGUb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:6e:84:5b:36:54:cb:b0:0b:da:d1:70:c9:c4:17:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7887a16965875f6f53bcc31f0e493a96154eb7b9
        Validity
            Not Before: Sep 24 08:00:53 2026 GMT
            Not After : Sep 25 08:00:53 2026 GMT
        Subject: CN=ba6fceb7e28f66990cf0ab537c07c0e54bb3255e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:23:20:31:c0:c6:d3:fe:4b:e3:c0:92:7c:67:
                    08:44:9a:6d:ec:18:32:f5:ea:2d:85:eb:6b:d2:fe:
                    e7:d3:13:ea:40:4f:c1:13:c5:a3:04:d8:81:15:4a:
                    a0:31:77:eb:a7:3f:15:54:3e:96:37:a8:02:53:68:
                    5b:de:a2:09:20:ee:2c:7c:4e:5f:e2:63:8b:c8:32:
                    a3:90:2c:8b:ce:b0:7e:2c:6c:ec:b3:fa:89:77:45:
                    c7:ba:b1:46:22:46:8a:c8:c8:d2:38:a1:1f:6e:77:
                    e3:cb:e2:80:1f:8b:75:b9:ec:41:66:69:24:fe:ce:
                    3d:0f:ee:01:38:41:ac:c8:5e:03:c4:de:7f:6c:92:
                    2f:fd:42:31:1d:3d:0f:04:9b:96:cb:2a:46:4a:af:
                    b2:42:b9:e5:4d:89:4a:f5:7b:f8:07:b9:5b:d6:f9:
                    8a:d2:8e:47:36:d7:14:b7:db:cc:c0:ad:11:11:11:
                    64:cd:7c:aa:f8:9e:90:31:ba:cf:77:11:ed:73:a1:
                    a3:9b:d8:45:63:bc:a3:86:e4:05:bb:64:f8:b9:2e:
                    51:8d:51:0a:b2:d1:4d:1a:b6:86:6e:aa:91:20:41:
                    45:74:5f:96:c4:e8:d7:5d:82:1e:f1:88:83:6b:6e:
                    41:f0:3e:11:4c:ba:84:77:46:85:14:4b:d7:1d:30:
                    47:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6F:CE:B7:E2:8F:66:99:0C:F0:AB:53:7C:07:C0:E5:4B:B3:25:5E
            X509v3 Authority Key Identifier:
                keyid:78:87:A1:69:65:87:5F:6F:53:BC:C3:1F:0E:49:3A:96:15:4E:B7:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIehaWWHX29TvMMfDkk6lhVOt7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/197eec-762a-4e42-b9d2-7568a10df443/1/eIehaWWHX29TvMMfDkk6lhVOt7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:24:9c:b8:1a:56:6b:18:67:78:c5:f8:a9:c0:44:ed:a8:48:
         ab:f9:51:76:76:ad:99:e8:35:25:13:4d:15:eb:0c:44:47:b1:
         49:a8:ae:df:b3:d2:87:4a:fb:61:23:4c:45:07:92:38:af:f6:
         59:82:eb:81:4f:cb:84:c0:cc:ab:b6:c5:6a:37:43:e6:9a:dc:
         58:6e:8f:7d:5f:82:ba:87:d1:94:73:b8:b4:d0:f4:01:b0:78:
         bb:27:99:56:87:ed:90:c6:81:5b:6a:84:8e:89:b4:53:ce:5e:
         97:86:40:e0:3d:e7:4a:1c:bf:f4:88:5e:7a:ac:38:b9:8d:a2:
         4f:2c:1b:38:67:fa:c1:63:85:83:f8:22:e2:f4:bf:9e:b5:d2:
         83:9c:73:ed:5a:49:83:c6:91:a5:64:46:8d:14:af:38:13:b0:
         78:3b:81:7f:26:22:ef:aa:74:b7:f0:a3:3f:39:41:8c:77:56:
         04:54:88:d3:09:db:a5:23:40:36:c9:a3:fc:bd:21:53:e2:4d:
         98:03:4f:69:18:bc:27:75:5d:9c:08:36:17:cd:7d:1e:9b:54:
         40:49:f3:59:89:9e:54:49:48:88:95:d7:f0:ed:90:30:92:e5:
         e9:0d:d2:da:70:6c:f3:f8:cb:d4:dd:99:01:2b:be:35:f9:a3:
         89:37:a4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:15:14 2026 by rpki-client