Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File:                     eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier:          2/NMnKO3kdLSKw7Lj21kwVtkgWOC8dvmtEEAaLMBa8k=
Subject key identifier:   F8:76:92:DA:48:AF:E6:06:DB:BC:DF:1E:6D:4F:DF:5A:64:A9:4A:4F
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer:       /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial:       01A134104A87880B32CC9AF6825EC680567D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number:          1461
Signing time:             Tue 13 Oct 2026 07:00:45 +0000
Manifest this update:     Tue 13 Oct 2026 07:00:45 +0000
Manifest next update:     Wed 14 Oct 2026 07:00:45 +0000
Files and hashes:         1: Ovz5_uXaopmCFA2hM3c3dActUxA.roa (hash: c9mXjNhTNI7nbpo+Q8eDzbpgYffEF1OmRMytYW5lsxc=)
                          2: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: 9zcrnT13KF0BHzYaKyvi0Elu6EDgJjn2jfYEIdhwNvw=)
                          3: iiLRQTaQQ6IVIkbg2il6ZXlFwVQ.roa (hash: tutx4i5TMPBaqEME1ocqA/S91MUf42k0v3h4figQjcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:10:4a:87:88:0b:32:cc:9a:f6:82:5e:c6:80:56:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
        Validity
            Not Before: Oct 13 07:00:45 2026 GMT
            Not After : Oct 14 07:00:45 2026 GMT
        Subject: CN=f87692da48afe606dbbcdf1e6d4fdf5a64a94a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:11:2a:78:93:01:25:a6:f6:42:13:cf:4b:e0:
                    92:18:83:b7:2e:70:f0:1d:03:8f:65:f9:13:55:93:
                    a5:1f:de:07:38:8e:92:29:54:29:8d:8d:30:db:5f:
                    eb:ae:d7:01:28:a7:c1:03:7f:3e:e5:d4:c3:dd:ae:
                    e0:fb:57:01:8b:12:48:ae:22:40:2a:bd:7d:61:93:
                    c1:2f:a8:66:28:8c:3b:9f:e8:4e:09:3e:01:dd:88:
                    9f:b4:96:d0:34:a0:60:50:82:8a:4a:9e:28:7c:15:
                    26:07:d2:61:a8:34:55:36:9f:31:c1:ad:b9:95:a6:
                    30:44:58:83:86:25:38:13:84:01:d5:3e:28:9e:31:
                    21:59:c9:55:36:3d:45:b2:17:16:5d:1f:7a:cf:4c:
                    f5:f8:a2:32:c1:35:83:87:a5:d9:ab:a1:b6:6a:f2:
                    91:0c:2c:be:fb:78:a4:4a:90:fc:46:c7:f6:98:63:
                    20:1f:a2:f5:e4:eb:3d:71:c9:a0:dc:7e:5e:d7:1d:
                    be:e6:6c:82:3f:25:8c:d1:b8:37:21:17:be:4f:15:
                    d6:89:23:13:b5:fc:3d:07:78:79:ee:21:ce:43:dc:
                    a2:f8:17:0d:e3:91:e4:be:ea:83:67:72:c2:b4:83:
                    f3:7e:05:93:84:3a:00:36:0b:ef:66:cb:a3:05:54:
                    d7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:76:92:DA:48:AF:E6:06:DB:BC:DF:1E:6D:4F:DF:5A:64:A9:4A:4F
            X509v3 Authority Key Identifier:
                keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:65:ec:b6:71:fe:a3:14:5e:d5:d4:60:d9:fe:d4:1b:9b:b5:
         5b:94:a9:a5:c1:d7:0a:d2:31:c5:b2:ae:61:67:db:e0:0f:a6:
         43:22:28:f7:07:18:65:17:ee:cc:ab:33:06:1e:29:78:8d:94:
         08:62:97:f5:88:b4:c3:a3:b8:fc:06:2b:f6:dd:bf:6f:92:20:
         95:d0:ae:66:78:c2:ac:15:fa:be:5e:95:a1:bb:fa:4d:65:38:
         c4:c0:78:30:96:24:45:19:a0:02:89:5c:d2:28:36:d8:cd:0d:
         69:25:58:b8:27:fd:27:25:03:89:fb:6b:93:c2:98:f8:2f:5d:
         87:06:12:63:78:6a:47:30:66:8c:aa:11:5e:ec:ce:dc:a8:e6:
         88:3a:af:3e:8d:fb:67:e2:a9:2a:9e:04:f2:5e:a0:4f:d5:f0:
         02:9f:86:10:2d:24:a4:93:26:08:ee:4a:de:be:81:6d:e8:e3:
         87:6a:a3:09:ee:01:04:5f:99:78:93:54:d9:5a:12:30:1e:f7:
         7b:de:07:e1:a8:c6:39:1d:ab:bf:6b:fd:19:6b:54:53:ee:05:
         43:11:a1:c7:c9:e3:18:04:70:f8:02:ea:4f:16:d4:d3:92:b0:
         39:8a:f9:8e:39:9b:0e:4a:33:86:24:66:83:11:3c:10:b1:db:
         0f:f4:05:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:36:11 2026 by rpki-client