Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
File:                     eY4NpPkQB7IkdorLTRMfElF9K3o.mft (raw, json)
Hash identifier:          s6nI5OjPkE0hR6lpzqRLVLZkjCwBXL1kJhSkldvZJjA=
Subject key identifier:   72:A6:8B:68:B9:47:39:1B:1B:73:BA:BA:02:D0:79:F0:46:A1:AA:51
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Certificate issuer:       /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial:       01A0D07FA41CB4E87FB4EEB64A4EC4494978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
Manifest number:          0C8C
Signing time:             Wed 23 Sep 2026 23:00:20 +0000
Manifest this update:     Wed 23 Sep 2026 23:00:20 +0000
Manifest next update:     Thu 24 Sep 2026 23:00:20 +0000
Files and hashes:         1: FfmG2YSQtCzDZf7LGo-eF1wiE1s.roa (hash: qrm8Hvv6ZY4XD/rO0TyVVz8/PmIjDcXusRWAzudBFPw=)
                          2: Q-_VAhr_3KM6k7h05hr8GonF39M.roa (hash: sBlSBxemwWOVZDZUFiQlhe/vEkuAulILbiLVu6l2Y+s=)
                          3: _gMstHGZPe_7SzCes23Xk4_prxs.roa (hash: UfaVFa/Va8RG4LCVknZ/sC6sc8zENIigGZfQiIzmNA4=)
                          4: eY4NpPkQB7IkdorLTRMfElF9K3o.crl (hash: aPPj/6jv5yZo91J9tuGk10IFI6rzq17N4q4ZK2EXKyA=)
                          5: swQMeQBE5wb78ss3tCTd5K3tnlI.roa (hash: uIGxjGabnvBWdl9aXtwznXWVFMHKBrwT9BZDyH0VO8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:7f:a4:1c:b4:e8:7f:b4:ee:b6:4a:4e:c4:49:49:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
        Validity
            Not Before: Sep 23 23:00:20 2026 GMT
            Not After : Sep 24 23:00:20 2026 GMT
        Subject: CN=72a68b68b947391b1b73baba02d079f046a1aa51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:eb:4a:11:0a:ca:c5:93:57:79:8f:63:11:83:
                    ce:72:89:bc:43:6f:e1:6c:7b:da:c9:b6:2f:ac:9e:
                    42:87:66:22:d6:88:13:53:90:af:32:70:f5:66:de:
                    7a:55:89:f1:3f:58:5d:25:78:7f:b0:21:e2:23:f9:
                    0e:66:8d:2f:ee:2f:61:97:71:a5:3d:f4:5e:a5:6e:
                    61:50:12:20:ea:4d:ab:3d:8d:ef:ea:52:b3:3d:72:
                    02:83:80:28:8c:14:20:99:f6:1c:40:5e:0a:ab:4a:
                    26:1d:c2:bf:fb:ca:59:9d:e4:ae:73:f5:f2:0f:23:
                    2f:51:48:db:7e:d6:37:36:3c:1d:94:30:e7:91:94:
                    70:f6:c8:d6:b6:db:91:3e:2b:2d:d9:ba:f3:a9:3e:
                    10:47:a5:6c:2e:f2:7c:a1:f4:9e:9f:08:f1:8a:3a:
                    2c:4c:36:7f:ad:db:e3:c8:d5:5c:51:12:e6:77:f5:
                    0b:ae:bc:d8:2f:d8:92:d7:d7:bc:8a:a4:67:78:bf:
                    12:2a:9f:f9:93:c3:df:91:60:0b:a2:9a:af:2c:9e:
                    49:da:3c:69:a0:c1:60:a3:11:8f:2c:7b:d3:3f:9c:
                    30:60:e0:3d:61:cd:80:a4:e9:65:b2:ea:fa:4f:9f:
                    24:d2:f7:0b:ae:91:b3:b4:9d:46:d9:18:70:06:a4:
                    35:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A6:8B:68:B9:47:39:1B:1B:73:BA:BA:02:D0:79:F0:46:A1:AA:51
            X509v3 Authority Key Identifier:
                keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8f:61:4b:f1:71:a5:35:fb:68:d4:1a:97:93:0c:57:be:94:
         84:14:b0:eb:76:ef:67:cc:9d:72:41:42:2c:9b:28:7a:15:9a:
         a9:6f:ff:b0:39:52:37:c6:cd:3b:a4:71:e5:26:8e:51:f9:b5:
         85:4f:a4:71:ef:d4:7d:e9:64:e7:e5:90:65:4d:19:32:6d:61:
         71:b4:c5:29:2e:cc:aa:d1:59:de:bf:cb:05:1f:40:7d:f5:5d:
         f0:18:aa:f0:41:0e:2b:e6:05:4f:1c:71:d8:76:62:99:c1:53:
         53:7e:98:ed:4e:d9:60:2b:ef:fc:e9:80:86:33:27:24:ba:42:
         1b:74:f2:a2:f9:49:13:85:49:ed:64:f3:51:a4:c0:4b:12:73:
         d9:9d:b1:c0:7d:95:40:75:59:cc:e9:53:4b:e6:38:0d:ab:2e:
         f9:6c:0f:56:c2:a1:f5:87:22:c5:8a:3f:80:73:91:df:a4:0e:
         2e:a1:a5:7b:b5:e5:f7:5c:ab:4b:bd:20:cb:f1:ae:13:4b:52:
         27:81:3b:88:7f:85:e8:3d:01:28:87:2c:05:51:2e:50:3f:99:
         e6:87:c0:05:b3:24:3f:e0:23:10:90:1a:13:4e:5b:20:b5:84:
         49:e7:62:13:73:16:0d:98:67:f0:91:6c:e4:29:06:dd:65:d7:
         4a:f5:25:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:02:17 2026 by rpki-client