Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
File:                     eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft (raw, json)
Hash identifier:          denRebpf5ZQgL2kWHxAnO5IVFvOh6YUCJV5WpgZZtqw=
Subject key identifier:   9C:03:AD:BE:15:6B:1B:CB:B8:44:AF:49:EC:9B:B6:0D:38:A8:2E:6B
Authority key identifier: 7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
Certificate issuer:       /CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Certificate serial:       01A0E70A190DEE2E673DF25F37BA6CC498FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
Manifest number:          04C0
Signing time:             Mon 28 Sep 2026 08:03:13 +0000
Manifest this update:     Mon 28 Sep 2026 08:03:13 +0000
Manifest next update:     Tue 29 Sep 2026 08:03:13 +0000
Files and hashes:         1: 1pFLtL3u2Mj6D98HAx8GtYTeAwI.roa (hash: pmrWF+lDh+ECpFtkS0mznQOkoYJ7QI62/Hl2UZgNaYA=)
                          2: e7JCKZM7Sj7nZ-jn0culwxxnmRY.roa (hash: uCVQMuNimm2kRxYums+7bm1dwpOCnLao+2OKBBHNm54=)
                          3: eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl (hash: ddYH5sFDBDgXrXcFkOGRO6hlUt8m7IrAZYA1Dts1PxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 08:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:0a:19:0d:ee:2e:67:3d:f2:5f:37:ba:6c:c4:98:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
        Validity
            Not Before: Sep 28 08:03:13 2026 GMT
            Not After : Sep 29 08:03:13 2026 GMT
        Subject: CN=9c03adbe156b1bcbb844af49ec9bb60d38a82e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:79:b5:de:c9:d6:c1:2b:2f:f6:b7:1d:55:e4:
                    36:55:04:d8:66:4a:b6:71:ca:00:80:da:01:6b:56:
                    a8:9a:52:5e:d3:2a:1d:83:08:97:56:2f:17:80:ce:
                    63:e5:d9:4e:95:ab:6b:77:5a:2f:b1:a0:de:18:8c:
                    4c:2d:22:88:5e:cc:54:5c:9c:19:f6:1f:08:5a:23:
                    e5:dd:47:7f:c2:13:66:99:04:30:c6:0f:45:7f:ca:
                    a5:4d:62:10:52:b4:8b:0b:70:9d:45:22:85:20:03:
                    bb:19:b9:57:b1:69:de:e0:2e:f8:df:3b:93:87:f0:
                    64:2f:2f:28:f8:38:75:40:41:43:b3:f1:18:9a:30:
                    46:38:1c:3c:6c:55:2e:d2:92:db:2a:90:af:94:c6:
                    96:60:3f:34:bf:ed:d6:21:51:2b:e9:77:70:db:11:
                    ac:30:ac:f3:18:db:7b:4d:41:02:8e:c0:b1:cf:9a:
                    70:21:22:8d:3a:87:d8:4a:9c:a1:7f:b1:f5:ae:c1:
                    79:39:17:02:7d:ba:f9:c4:73:ab:df:10:b7:10:4b:
                    be:b6:28:ee:61:16:5c:62:73:ba:49:c4:fc:99:f2:
                    d1:65:51:7f:17:0e:66:1d:5f:0c:db:7e:7e:97:3f:
                    b5:56:fd:73:a1:7f:38:f3:61:d9:9a:64:33:86:94:
                    ae:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:03:AD:BE:15:6B:1B:CB:B8:44:AF:49:EC:9B:B6:0D:38:A8:2E:6B
            X509v3 Authority Key Identifier:
                keyid:7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:30:ad:48:66:8a:39:95:8b:16:80:2a:08:bd:a2:e8:98:3c:
         05:43:c3:05:9c:bd:87:08:a8:a9:5e:cb:c7:71:8f:47:8a:91:
         5f:25:e3:8b:94:da:56:d8:fa:57:fc:90:a3:d6:23:21:fe:07:
         d3:9a:7e:17:7d:f3:6a:41:ad:08:31:39:5c:9d:04:9e:8e:8a:
         cb:38:24:1c:eb:a9:ef:0c:b5:5c:15:72:d4:03:b8:74:5f:7b:
         24:ca:14:e9:ec:3b:a7:91:a0:7c:0d:67:8a:2c:fd:af:03:d6:
         bd:18:90:8b:f6:8f:9d:a6:5d:92:1f:3e:17:81:48:1c:66:e2:
         f3:6a:46:54:31:e6:78:3d:b7:06:dc:13:bc:58:64:45:1a:3a:
         d8:9f:54:82:a8:9c:47:b7:88:44:3c:4f:d4:32:3a:2e:9a:0b:
         a0:9d:c7:e6:b9:aa:42:e7:a8:3e:c3:a0:07:63:42:f6:a3:5e:
         53:cc:99:98:07:2d:09:0a:1b:47:4c:39:54:6e:93:6c:32:09:
         3c:ea:8c:2b:65:14:85:5a:52:5d:7e:dd:8b:56:44:8f:92:64:
         de:f1:69:c4:14:b0:03:c1:d9:62:6f:d0:5d:da:5e:87:e3:81:
         d5:6e:df:51:8a:6a:fb:0e:2e:8f:7e:a2:69:fb:62:79:96:d9:
         55:96:20:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:48:25 2026 by rpki-client