Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.mft
File:                     eYi_KMUlxS0YbAAMm97ZwXdcEp8.mft (raw, json)
Hash identifier:          hYEJ2jfj6UwNvx2C1oliDJT2ZtyFLUDjsCEj0L9IAU4=
Subject key identifier:   70:32:12:AC:0A:86:3A:72:C8:AF:6C:9E:EC:1B:67:B6:86:83:2B:BE
Authority key identifier: 79:88:BF:28:C5:25:C5:2D:18:6C:00:0C:9B:DE:D9:C1:77:5C:12:9F
Certificate issuer:       /CN=7988bf28c525c52d186c000c9bded9c1775c129f
Certificate serial:       01A0D5DEA6EACBCB5289FC8657E315C21EB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eYi_KMUlxS0YbAAMm97ZwXdcEp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.mft
Manifest number:          E8
Signing time:             Fri 25 Sep 2026 00:02:13 +0000
Manifest this update:     Fri 25 Sep 2026 00:02:13 +0000
Manifest next update:     Sat 26 Sep 2026 00:02:13 +0000
Files and hashes:         1: eYi_KMUlxS0YbAAMm97ZwXdcEp8.crl (hash: 6yDx3900zMBkNOQ2t7vbXgf75/ozVRnEgzPhU6pMJk8=)
                          2: qTje26BZZKRMARRDkJdC0IeHiRU.roa (hash: oaFttIih0ec3ogfrn2Cq/QjqWOUDC1z4Lnrsr8BVOtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eYi_KMUlxS0YbAAMm97ZwXdcEp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:de:a6:ea:cb:cb:52:89:fc:86:57:e3:15:c2:1e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7988bf28c525c52d186c000c9bded9c1775c129f
        Validity
            Not Before: Sep 25 00:02:13 2026 GMT
            Not After : Sep 26 00:02:13 2026 GMT
        Subject: CN=703212ac0a863a72c8af6c9eec1b67b686832bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:09:9a:73:0a:34:5e:9c:5d:36:9e:3e:0f:
                    89:a5:93:8f:42:a4:a4:e2:44:e0:c4:d9:f4:59:57:
                    2d:98:f5:54:8d:97:ca:f6:ab:41:4d:fe:1a:c0:e7:
                    53:c5:d4:f2:5b:b7:41:4d:99:ed:a3:50:f8:66:61:
                    e6:35:1b:4b:ef:8e:87:bd:3f:e2:88:41:27:2b:71:
                    b2:6c:e4:63:6c:8a:b9:3f:d0:8c:2f:ec:77:f7:d9:
                    7c:d9:48:c7:e5:62:85:3a:27:78:63:9e:73:74:d2:
                    c1:a4:db:03:a9:71:74:45:39:e0:c5:cb:03:34:64:
                    55:05:66:5d:a8:2b:94:e2:7a:ea:6d:89:19:8c:7f:
                    d3:18:df:a0:f1:47:04:38:8f:54:a8:d9:ec:57:69:
                    f3:ed:4a:a2:d3:69:66:13:77:43:54:42:2b:44:e8:
                    5d:92:7c:2a:9c:2c:63:b7:ea:2c:5d:b9:ff:88:b9:
                    fa:b6:37:66:34:db:64:9d:a4:08:8e:bc:ba:61:5d:
                    76:2e:0e:8e:93:8f:87:f6:ec:f4:59:db:a0:c5:1b:
                    f7:76:b1:33:da:64:b6:18:d2:c3:66:f2:a1:80:16:
                    84:12:e4:94:23:6c:ac:6f:5f:1d:0e:f0:89:5a:bd:
                    27:ef:08:88:19:5e:c2:ef:ee:5e:40:df:99:3e:74:
                    2c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:32:12:AC:0A:86:3A:72:C8:AF:6C:9E:EC:1B:67:B6:86:83:2B:BE
            X509v3 Authority Key Identifier:
                keyid:79:88:BF:28:C5:25:C5:2D:18:6C:00:0C:9B:DE:D9:C1:77:5C:12:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYi_KMUlxS0YbAAMm97ZwXdcEp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:6c:f9:4b:98:0e:35:c1:e0:b5:5a:6c:b4:b5:e7:f3:ba:66:
         99:7a:72:c7:3c:96:f9:dd:4c:aa:2b:8b:4b:21:e2:15:fc:11:
         91:05:de:a8:45:d4:4f:d4:a3:b7:94:ca:ff:52:15:cc:6c:3e:
         ce:86:11:18:51:a3:76:98:f0:62:f8:cf:35:9e:d0:54:1f:68:
         a8:40:2a:e4:b4:91:5f:33:f6:ca:b5:b2:f2:98:15:7f:70:e5:
         8c:cc:2c:3d:b6:13:30:b1:79:b7:a8:94:b3:eb:f2:67:43:ea:
         70:11:dd:1d:5f:68:23:d7:ba:d2:cf:03:57:46:53:bf:36:47:
         04:36:90:c5:70:b2:86:8b:b7:df:b7:c2:11:8f:8a:bd:83:02:
         83:79:da:d6:b0:0e:9e:d2:74:3b:66:df:30:6c:24:0c:0e:89:
         16:ed:4f:c6:e7:cf:0f:5b:8c:61:48:bf:0e:5f:84:3f:4f:0b:
         06:21:f1:7b:bc:63:e5:a3:9d:70:46:c0:12:5a:81:23:f9:b1:
         11:f1:46:6b:aa:2c:c8:00:62:0e:1c:a6:af:23:9d:53:d2:f1:
         51:1e:8d:fa:e9:43:02:b7:f6:2e:fa:1b:c0:dc:dc:17:a2:4e:
         12:c1:10:ad:64:e9:f3:22:9a:a4:2f:21:fa:f8:00:91:00:ed:
         60:c3:23:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:52:47 2026 by rpki-client