Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.mft
File:                     DvrXVRUW8MTZEtoDE8mVyecU4Jo.mft (raw, json)
Hash identifier:          XvaUDWucUZhvCy/54t1AZmgviuf4k2HDBq3muQePdt0=
Subject key identifier:   EB:59:A8:D8:41:C3:3E:A6:2C:58:4E:04:C2:45:E7:7B:09:A1:61:4E
Authority key identifier: 0E:FA:D7:55:15:16:F0:C4:D9:12:DA:03:13:C9:95:C9:E7:14:E0:9A
Certificate issuer:       /CN=0efad7551516f0c4d912da0313c995c9e714e09a
Certificate serial:       01A0CA474D3AC4C0B3ACF52CC771F7ECC745
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvrXVRUW8MTZEtoDE8mVyecU4Jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.mft
Manifest number:          E2
Signing time:             Tue 22 Sep 2026 18:01:05 +0000
Manifest this update:     Tue 22 Sep 2026 18:01:05 +0000
Manifest next update:     Wed 23 Sep 2026 18:01:05 +0000
Files and hashes:         1: 3DD1GqM4VMCI2iIn07pCJxzLRt0.roa (hash: +QXq2lGOdBUmdmEAE4jHcDP4XRlLl+rR3VZKeTQaV/s=)
                          2: DvrXVRUW8MTZEtoDE8mVyecU4Jo.crl (hash: Xh4U3+hfa2HD12jDUPqSmiD4luXTRmvRAdvAgxAXZXA=)
                          3: kkBwqM6FKohBRjtSHy37ifNbbqU.roa (hash: KLotQf93W8LLpw+t99ysaq1+3XO9F6oWK8lyix0qpLA=)
                          4: s6pcjXYJ_a8ZOjQqNdW7-wk5Uis.roa (hash: Abd/wjefE7vkaUeWVlpKIIf5AMjQUyEpIzPrbaUaKIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvrXVRUW8MTZEtoDE8mVyecU4Jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:47:4d:3a:c4:c0:b3:ac:f5:2c:c7:71:f7:ec:c7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0efad7551516f0c4d912da0313c995c9e714e09a
        Validity
            Not Before: Sep 22 18:01:05 2026 GMT
            Not After : Sep 23 18:01:05 2026 GMT
        Subject: CN=eb59a8d841c33ea62c584e04c245e77b09a1614e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:14:42:6d:75:48:74:28:97:ca:bd:ef:4c:4f:
                    3c:bf:d0:76:68:e3:80:aa:f1:f0:ee:43:59:c4:f0:
                    15:19:4a:c2:4c:99:38:54:a4:59:f0:fd:ed:07:26:
                    fe:41:b4:6e:04:54:88:3a:66:e6:b2:ec:ab:3c:60:
                    39:a0:00:43:cd:36:38:aa:95:51:d2:7a:84:4a:40:
                    50:76:f3:ea:d0:9e:24:1d:d1:05:05:c5:08:dc:63:
                    95:ac:f9:c7:a5:57:23:0f:29:d4:c4:31:fd:c3:a7:
                    53:50:77:c1:e2:5c:14:57:3a:63:c2:3d:47:8f:00:
                    9c:8f:e3:53:ee:b6:08:5f:90:2f:0d:b7:03:c8:c4:
                    86:7a:f5:76:e1:e9:7f:f7:8b:4d:72:d4:ce:25:fa:
                    d2:00:e9:0b:f7:c0:9a:7d:46:3e:f2:f9:5b:ec:8e:
                    e3:3a:13:ba:fa:5f:3d:54:f2:48:54:9a:68:48:e8:
                    ba:d6:b4:6b:57:ed:23:29:2b:3d:c3:af:ce:59:ba:
                    e4:9a:44:ab:4c:1d:47:05:1e:eb:b6:19:90:35:ed:
                    85:42:37:85:58:95:a2:63:b5:5d:6b:be:d2:d0:70:
                    a6:ec:b9:9e:0d:ef:fe:4a:05:8f:71:0f:8a:c5:b0:
                    a1:85:21:32:e3:3b:ff:5b:e6:6c:cd:78:c1:8e:b2:
                    dc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:59:A8:D8:41:C3:3E:A6:2C:58:4E:04:C2:45:E7:7B:09:A1:61:4E
            X509v3 Authority Key Identifier:
                keyid:0E:FA:D7:55:15:16:F0:C4:D9:12:DA:03:13:C9:95:C9:E7:14:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvrXVRUW8MTZEtoDE8mVyecU4Jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e4705c-e6da-422e-859c-3b68a49dc042/1/DvrXVRUW8MTZEtoDE8mVyecU4Jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1b:98:55:4d:48:3b:6d:54:f6:e9:e1:e4:37:fc:a2:85:eb:
         a5:7d:a7:30:1d:fd:bc:58:23:8b:62:d2:4b:d0:dd:9f:e7:e0:
         28:b9:67:5f:35:da:2c:c5:b5:de:e0:51:34:77:d9:6b:b1:ac:
         6c:45:db:94:0f:a3:36:ca:9b:2b:87:d5:e1:76:51:bf:3d:74:
         6d:c4:0c:b6:79:25:93:5d:36:84:f4:87:76:9b:13:ec:48:30:
         41:8c:3d:32:d8:2a:4c:02:84:6f:c1:a1:88:13:30:0a:88:f4:
         0b:ea:f2:e2:8f:87:be:f0:c1:99:65:83:5d:5b:99:1c:12:8b:
         9b:4d:43:a5:ae:25:d3:3b:46:8a:c1:5c:29:33:8d:0e:c2:8a:
         26:1a:53:34:97:42:1e:5a:fc:59:2d:b8:f9:d5:4d:bd:4c:3a:
         4d:8d:df:2f:84:8a:79:8c:1e:01:e4:06:31:b4:40:80:6f:ef:
         fd:ac:ba:7a:d0:13:45:94:cc:a9:91:f2:f9:3f:cf:ec:75:74:
         a8:2e:fe:0e:c1:b8:06:e9:a1:01:e0:ae:0d:11:a5:a5:35:e4:
         93:a9:d2:f0:1d:0f:4c:f8:47:cb:ba:63:32:ae:ec:40:25:b4:
         c2:d4:ed:18:b7:b4:a9:85:fd:b9:24:97:f3:2c:d8:1d:47:d4:
         f6:27:5a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:52:15 2026 by rpki-client