Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File:                     ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier:          afNf4AD7byuxNw4j68aeIozXlzLSaLPU320XFV8WNk4=
Subject key identifier:   01:59:5F:45:A6:B8:00:45:C3:75:D4:51:9B:F9:45:D8:DC:D7:1A:40
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer:       /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial:       01A0D2004C4AED6838EF33252B3FC323F875
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number:          167C
Signing time:             Thu 24 Sep 2026 06:00:29 +0000
Manifest this update:     Thu 24 Sep 2026 06:00:29 +0000
Manifest next update:     Fri 25 Sep 2026 06:00:29 +0000
Files and hashes:         1: L_eXFdCQUF-9eDxelAnxZKL6wnQ.roa (hash: 7d4nHmuLNm2MvlXBb1jvivzyW1JkmgHoj/AiRQe6d+Q=)
                          2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: C7pdsv0yXzMn3Yc9NLGHCwRmx65n1dnJZ7Wo5fu1TDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:00:4c:4a:ed:68:38:ef:33:25:2b:3f:c3:23:f8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
        Validity
            Not Before: Sep 24 06:00:29 2026 GMT
            Not After : Sep 25 06:00:29 2026 GMT
        Subject: CN=01595f45a6b80045c375d4519bf945d8dcd71a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:e3:ed:86:c3:b7:9c:cd:29:8d:a3:5c:c9:
                    02:4d:75:dd:ec:f9:47:28:ee:81:c5:4c:fc:33:59:
                    21:5c:19:cf:04:10:1e:b1:a0:80:ee:f7:20:89:8f:
                    f6:79:6a:67:ad:9c:5b:4d:f0:c6:59:f5:bd:09:3b:
                    8d:7d:9c:75:3c:61:6b:4f:7e:c9:a8:8a:6d:c2:93:
                    96:98:09:ba:aa:1d:23:70:f7:e7:79:e4:dd:3c:94:
                    3f:0d:2d:e5:fc:1a:36:7e:ae:9e:c9:14:58:ba:1a:
                    a5:4d:c7:a9:4d:67:d6:b8:e4:48:d4:d7:c0:c4:6a:
                    14:29:55:0f:ab:27:da:60:3a:ac:d3:63:bd:52:30:
                    10:65:ab:1c:e1:fc:b8:d7:88:52:c6:ec:b1:e3:3b:
                    33:f2:d8:fe:1a:af:79:e3:dd:eb:5f:87:a1:98:13:
                    16:2a:99:7c:68:7f:d3:82:c3:62:7e:09:44:d6:f2:
                    a4:71:d3:9d:4c:4f:42:1f:67:d0:ab:86:fc:af:c2:
                    c9:8a:63:05:c4:f2:2e:92:02:57:0f:10:30:64:4f:
                    cd:29:78:9d:c1:61:43:53:7d:59:06:d6:00:69:e2:
                    ca:c6:94:60:2f:60:26:34:c1:ca:73:44:54:66:0e:
                    e0:c8:21:19:bb:f3:fe:c0:7d:ae:03:cc:9e:4d:b1:
                    a6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:59:5F:45:A6:B8:00:45:C3:75:D4:51:9B:F9:45:D8:DC:D7:1A:40
            X509v3 Authority Key Identifier:
                keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:bd:e6:a9:ab:f0:d2:c2:8e:d6:e9:15:b2:f0:6e:28:97:b7:
         f2:3a:81:5f:59:78:be:1b:a5:19:ed:53:81:76:c8:9e:72:21:
         19:5e:9c:97:34:e9:d4:20:a5:ba:dc:3b:78:26:ea:96:f6:39:
         27:f5:44:ca:8f:bc:a1:af:74:53:e7:a0:a7:01:54:8d:41:37:
         d8:74:a5:f4:8e:71:6a:43:4c:e3:e5:98:bd:f9:00:10:0d:33:
         6d:05:2f:1c:9d:8a:72:30:f1:15:eb:84:9d:44:f3:ca:fb:6c:
         ee:04:42:fd:dd:06:57:10:ff:cf:8c:b0:aa:82:b6:74:4d:5b:
         b7:8b:08:28:af:73:c0:fc:d1:7e:dc:b7:a1:27:8c:09:be:ab:
         c1:d4:44:d3:d3:b0:95:c4:2a:8d:91:89:10:f6:bf:cf:4b:e8:
         d9:d3:26:ae:8c:c5:25:f3:d3:d2:70:41:d4:b1:40:11:e5:91:
         aa:df:fa:27:ce:da:52:b1:ba:e3:df:eb:d7:db:04:b0:c2:b1:
         d9:be:1b:39:08:53:ed:2a:36:3d:6e:61:94:85:cf:89:d9:0a:
         3c:50:1e:77:49:8b:b5:25:ed:bf:c0:57:ab:23:c9:d6:07:2c:
         34:48:ae:a1:29:76:87:d6:66:b7:97:5a:06:de:58:4d:23:ed:
         cc:0d:0d:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSAExK7Wg47zMlKz/DI/h1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNDc4YzVhYTIyNmEyNzhlOGIxOTA2ZjM3MWM2MGNmYzdk
ODdlOGUwHhcNMjYwOTI0MDYwMDI5WhcNMjYwOTI1MDYwMDI5WjAzMTEwLwYDVQQD
EygwMTU5NWY0NWE2YjgwMDQ1YzM3NWQ0NTE5YmY5NDVkOGRjZDcxYTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSDj7YbDt5zNKY2jXMkCTXXd7PlH
KO6BxUz8M1khXBnPBBAesaCA7vcgiY/2eWpnrZxbTfDGWfW9CTuNfZx1PGFrT37J
qIptwpOWmAm6qh0jcPfneeTdPJQ/DS3l/Bo2fq6eyRRYuhqlTcepTWfWuORI1NfA
xGoUKVUPqyfaYDqs02O9UjAQZasc4fy414hSxuyx4zsz8tj+Gq95493rX4ehmBMW
Kpl8aH/TgsNifglE1vKkcdOdTE9CH2fQq4b8r8LJimMFxPIukgJXDxAwZE/NKXid
wWFDU31ZBtYAaeLKxpRgL2AmNMHKc0RUZg7gyCEZu/P+wH2uA8yeTbGm8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFZX0WmuABFw3XUUZv5Rdjc1xpAMB8GA1UdIwQY
MBaAFHpHjFqiJqJ46LGQbzccYM/H2H6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAt
ZDc2ZWM5Y2MwZDI4LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC81MWE1MjAtZTA4ZC00M2IzLWE2YjAtZDc2ZWM5Y2MwZDI4
LzEvZWtlTVdxSW1vbmpvc1pCdk54eGd6OGZZZm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjL3mqavw
0sKO1ukVsvBuKJe38jqBX1l4vhulGe1TgXbInnIhGV6clzTp1CClutw7eCbqlvY5
J/VEyo+8oa90U+egpwFUjUE32HSl9I5xakNM4+WYvfkAEA0zbQUvHJ2KcjDxFeuE
nUTzyvts7gRC/d0GVxD/z4ywqoK2dE1bt4sIKK9zwPzRfty3oSeMCb6rwdRE09Ow
lcQqjZGJEPa/z0vo2dMmrozFJfPT0nBB1LFAEeWRqt/6J87aUrG649/r19sEsMKx
2b4bOQhT7So2PW5hlIXPidkKPFAed0mLtSXtv8BXqyPJ1gcsNEiuoSl2h9Zmt5da
Bt5YTSPtzA0N1w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:06:06 2026 by rpki-client