Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
File:                     e1l6Sw_khublyFue4D5ym97H570.mft (raw, json)
Hash identifier:          /L5xdp0Eya3nEZA/mQRKwgrZMrHGz6MONZ+bdI2LkhQ=
Subject key identifier:   78:D2:D6:E2:5F:66:DF:7B:A0:D6:AD:E3:7A:75:58:5A:3F:76:18:B8
Authority key identifier: 7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
Certificate issuer:       /CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Certificate serial:       01A0CA7D7809D92823D2E7BB612EEE172305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
Manifest number:          0DEC
Signing time:             Tue 22 Sep 2026 19:00:15 +0000
Manifest this update:     Tue 22 Sep 2026 19:00:15 +0000
Manifest next update:     Wed 23 Sep 2026 19:00:15 +0000
Files and hashes:         1: V9PWKj4xB85axZ-pPoY3y8jfmGI.roa (hash: IXWd/a+RKpFfjxBBgClFTno9TLNCTt1rJRxcU8qS3Bw=)
                          2: e1l6Sw_khublyFue4D5ym97H570.crl (hash: 5RShczxyokEOrxEXbr9HmbvkHYwURMtfxK82IlsywD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:7d:78:09:d9:28:23:d2:e7:bb:61:2e:ee:17:23:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
        Validity
            Not Before: Sep 22 19:00:15 2026 GMT
            Not After : Sep 23 19:00:15 2026 GMT
        Subject: CN=78d2d6e25f66df7ba0d6ade37a75585a3f7618b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:25:0a:7f:75:89:a7:51:a9:17:ec:c1:90:d8:
                    a4:eb:34:56:e2:92:81:cb:f1:ee:bf:cf:44:cc:f5:
                    10:4a:ab:e4:70:f9:35:22:b9:68:43:e1:ae:71:b0:
                    81:d3:12:d5:24:78:12:e5:78:57:a5:e9:ea:b3:b2:
                    bd:6c:18:ca:5d:29:da:06:c0:1b:bc:ac:77:e2:e2:
                    2b:38:4f:d7:18:da:68:1a:7e:79:9c:c8:cf:56:79:
                    da:b9:f5:3e:29:2e:a0:bb:74:30:ef:c5:03:2c:60:
                    d3:97:76:1b:f7:2d:47:99:91:87:fd:be:c3:93:dd:
                    aa:47:fa:b4:48:6a:91:93:ea:48:44:ab:bf:05:37:
                    a6:c5:a5:e6:a5:7d:cd:c0:5b:dd:85:9f:55:ab:58:
                    1a:af:91:bb:cb:30:1c:cd:1e:ba:ed:73:70:1d:d5:
                    b1:53:6a:53:0d:cd:91:e1:d5:33:52:b9:27:e1:fe:
                    3d:e7:3f:f5:ef:b7:76:4c:47:63:c2:c3:8a:b3:04:
                    b4:5e:03:0e:3e:7f:fd:74:a0:17:c4:aa:cd:67:3e:
                    0d:a9:17:7e:29:6b:87:a0:5e:d9:ef:87:42:47:8d:
                    2a:c4:e0:3e:f8:7b:bc:6d:a4:78:6a:b1:c3:54:42:
                    0c:fb:cd:ea:1e:76:50:74:1a:aa:ca:91:8d:30:ef:
                    1d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D2:D6:E2:5F:66:DF:7B:A0:D6:AD:E3:7A:75:58:5A:3F:76:18:B8
            X509v3 Authority Key Identifier:
                keyid:7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:8d:55:d4:0e:06:f1:c3:1b:ca:40:dd:7a:8d:5f:0f:69:4c:
         b9:27:08:bd:e6:df:89:66:fd:5d:1e:65:91:ba:eb:f9:27:cf:
         ba:d4:b2:ab:1f:8f:00:53:a7:da:d1:64:15:73:14:dc:40:19:
         47:7b:49:c5:c5:d3:77:81:c3:ba:2c:a7:cb:59:f7:49:01:35:
         ec:c7:01:b0:8b:0f:84:de:57:86:fd:2b:98:32:72:7f:f7:14:
         84:64:29:31:a1:19:27:f2:4f:9a:d8:1e:cc:cd:05:af:cd:df:
         94:08:68:f7:e2:04:10:ec:4e:2b:1d:d4:de:3b:ae:e2:56:98:
         59:38:4a:95:c1:f7:f1:83:84:66:4a:fe:0a:1d:7e:ab:dc:99:
         74:b5:06:59:b7:91:46:2f:1f:52:cb:bd:a6:97:b9:60:15:c7:
         e6:a3:6b:5b:44:34:82:7d:ac:93:2b:6b:81:7a:f9:1d:d4:78:
         04:33:d4:72:0b:dc:2a:58:25:e8:12:76:c7:25:a3:4a:4e:61:
         e1:8b:58:c7:fc:70:11:2a:6c:8a:67:8c:93:90:4d:1c:7e:84:
         ff:02:ce:a7:04:f4:62:fe:75:43:95:b0:f6:e6:01:ca:fd:45:
         0a:0f:6f:66:42:47:8d:b2:0b:d0:d8:f0:10:e0:42:d5:71:56:
         07:4e:46:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:22:33 2026 by rpki-client