Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
File:                     EbBIqvW7QvbE2dOHrSen6yGfOII.mft (raw, json)
Hash identifier:          bXZMrRmgxQFrDvW8yHhakapMDj7IKYsww+NSiIdJSCo=
Subject key identifier:   2E:CE:D8:48:60:07:F3:89:32:4C:53:33:00:A8:22:F5:DF:DA:36:9A
Authority key identifier: 11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
Certificate issuer:       /CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Certificate serial:       01A0C5FC3498F0341C5FBD54C0F1DAF9E378
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
Manifest number:          04F4
Signing time:             Mon 21 Sep 2026 22:00:35 +0000
Manifest this update:     Mon 21 Sep 2026 22:00:35 +0000
Manifest next update:     Tue 22 Sep 2026 22:00:35 +0000
Files and hashes:         1: EbBIqvW7QvbE2dOHrSen6yGfOII.crl (hash: MdSu/p9hikcxlcLFdPrw7ClfF/uVv1fjIbrrcPlrVNo=)
                          2: V6MbHQ4IlulkadnPNR4GjRCTQBc.roa (hash: n6NjwhnZOFT/xKrdDQmsqkf3f28sKCszOE0xexeKQjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:fc:34:98:f0:34:1c:5f:bd:54:c0:f1:da:f9:e3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
        Validity
            Not Before: Sep 21 22:00:35 2026 GMT
            Not After : Sep 22 22:00:35 2026 GMT
        Subject: CN=2eced8486007f389324c533300a822f5dfda369a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:91:a8:63:3f:48:b4:ae:4d:2c:64:94:d8:21:
                    8e:a2:94:6f:d9:b4:d4:0e:53:bd:10:70:2b:05:99:
                    0a:1d:e1:48:ba:7d:99:d1:f6:3a:ae:98:cd:0a:b2:
                    59:ef:ac:e9:b8:e6:d9:4b:c3:58:4e:77:c4:d8:5b:
                    ad:3c:af:f3:b1:01:2e:e9:a9:98:69:66:a9:7d:8f:
                    c0:e9:6a:f2:58:e5:4c:78:16:a3:02:61:d7:c9:f3:
                    63:13:fc:e4:ba:aa:60:f4:db:4e:2e:8d:06:70:c8:
                    70:78:e7:af:f3:66:65:fc:dc:7d:c6:4c:81:00:a6:
                    15:7c:21:0c:a3:31:48:bf:94:51:a4:24:dd:38:45:
                    71:54:cb:ff:75:4e:cc:22:7f:36:4f:65:64:c9:ee:
                    67:78:ab:b8:b6:97:a1:db:a3:dc:b7:5d:fc:18:0f:
                    d2:91:08:70:4e:8b:f5:7c:e1:6d:be:5b:5a:c0:2a:
                    83:b8:58:eb:32:f7:91:63:e2:81:87:a0:f0:7a:70:
                    62:07:83:52:f8:4e:a4:23:f8:a7:58:15:ba:b7:fe:
                    63:9a:08:48:34:04:20:71:02:36:3b:3e:7b:31:62:
                    5f:0b:e3:9d:c4:45:73:51:f0:8e:01:f3:7b:aa:a1:
                    38:0a:15:0f:9f:c4:35:1e:24:4c:99:6f:66:54:a0:
                    4e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CE:D8:48:60:07:F3:89:32:4C:53:33:00:A8:22:F5:DF:DA:36:9A
            X509v3 Authority Key Identifier:
                keyid:11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:8c:92:c8:70:78:aa:bc:47:e6:81:ac:87:77:7e:8d:90:95:
         b3:36:91:59:3b:64:b9:42:73:e5:d1:f5:fa:77:77:bd:03:6d:
         06:2b:c7:b5:86:8f:6b:cb:42:f8:92:d7:a6:c2:05:d8:8f:9e:
         9c:92:66:d0:ac:71:4d:e5:59:02:54:05:f8:e8:92:06:2f:5e:
         6b:65:03:f1:6c:5f:0a:f9:9b:32:7d:50:3a:95:50:a3:39:ac:
         3a:f0:85:85:31:11:9c:3e:1a:b8:2b:6a:d1:ce:24:d8:1a:ec:
         aa:fa:36:f1:fb:25:de:94:af:3e:2b:a5:ae:e1:e7:b3:1a:94:
         9e:86:c3:69:d0:a0:af:51:5b:8b:21:a0:fe:8a:8b:c5:9a:10:
         1c:01:f0:50:44:e7:af:6c:f1:af:e8:35:bf:bd:c2:1e:1c:b3:
         6c:9e:9b:63:80:88:ef:93:aa:66:6e:a0:1e:d8:f4:78:ba:41:
         03:88:6f:20:b7:a8:43:90:51:7d:23:1f:67:ee:c2:03:36:d5:
         a6:6b:cc:15:f4:75:6c:61:ca:bc:77:fb:8e:0b:ec:e0:4e:4b:
         54:f7:34:fd:ca:3f:2b:f3:90:df:30:d4:1e:4c:f2:5a:f7:3f:
         ef:a8:da:5e:d4:71:d6:28:82:da:c9:78:23:1c:d5:41:75:e1:
         01:29:37:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:43:22 2026 by rpki-client