Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
File:                     ekeMWqImonjosZBvNxxgz8fYfo4.mft (raw, json)
Hash identifier:          /MzUVTWJAhSV5WwQXt9vqg2W4Dq1lBc2AoA8SuHsJyw=
Subject key identifier:   C3:3D:8E:8D:18:13:98:8B:D4:7B:65:EE:50:B0:1D:90:10:C6:F6:AF
Authority key identifier: 7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E
Certificate issuer:       /CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
Certificate serial:       01A0D0129EF3C13AB7ECD8691C61EED3B2B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
Manifest number:          167B
Signing time:             Wed 23 Sep 2026 21:01:16 +0000
Manifest this update:     Wed 23 Sep 2026 21:01:16 +0000
Manifest next update:     Thu 24 Sep 2026 21:01:16 +0000
Files and hashes:         1: L_eXFdCQUF-9eDxelAnxZKL6wnQ.roa (hash: 7d4nHmuLNm2MvlXBb1jvivzyW1JkmgHoj/AiRQe6d+Q=)
                          2: ekeMWqImonjosZBvNxxgz8fYfo4.crl (hash: PJoRIkvdA4fYcuOZsGu1dr85seHdKUym5stN63kRn0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:9e:f3:c1:3a:b7:ec:d8:69:1c:61:ee:d3:b2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a478c5aa226a278e8b1906f371c60cfc7d87e8e
        Validity
            Not Before: Sep 23 21:01:16 2026 GMT
            Not After : Sep 24 21:01:16 2026 GMT
        Subject: CN=c33d8e8d1813988bd47b65ee50b01d9010c6f6af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:58:f0:30:ab:f7:06:e4:46:5f:53:ec:1c:63:
                    e1:59:bc:bc:13:78:c4:4b:53:79:69:a3:ce:af:f6:
                    de:a7:9b:82:c9:5b:dd:5e:87:0c:57:95:4b:6e:9f:
                    af:40:92:9f:c3:40:f3:b0:80:54:1e:cb:ad:b1:c9:
                    cf:98:3b:d4:61:44:1c:8c:11:bb:cd:9a:17:a0:d2:
                    b9:90:ed:3e:3f:16:87:10:40:d9:be:3f:1b:b8:c5:
                    71:a9:27:f3:d9:5b:64:83:08:1d:c5:0d:a6:ac:8d:
                    66:cc:f5:44:f9:74:86:27:78:8b:d7:86:ce:21:52:
                    76:66:d1:32:9a:ea:80:5a:fa:ea:56:04:81:d2:72:
                    16:97:18:6a:16:a6:48:36:db:88:ff:7f:71:fc:6b:
                    d6:0c:8d:a9:73:8b:45:b3:9e:d4:cc:8d:34:e9:12:
                    8b:c0:bb:4d:83:7f:65:8d:db:0f:23:c7:91:f9:86:
                    e3:b1:c3:49:77:0e:4a:7d:a7:63:4f:6b:ca:9a:c6:
                    48:d2:ad:31:91:69:e1:e3:c1:7c:2c:4d:ba:b9:1e:
                    12:39:5e:8f:77:2c:d3:d0:b1:29:26:00:e7:79:2f:
                    23:a8:b7:b6:54:3c:0f:90:02:60:ef:94:38:29:0f:
                    64:c7:04:b8:ef:50:50:7e:dc:9a:b8:ff:9d:02:c8:
                    81:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3D:8E:8D:18:13:98:8B:D4:7B:65:EE:50:B0:1D:90:10:C6:F6:AF
            X509v3 Authority Key Identifier:
                keyid:7A:47:8C:5A:A2:26:A2:78:E8:B1:90:6F:37:1C:60:CF:C7:D8:7E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ekeMWqImonjosZBvNxxgz8fYfo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/51a520-e08d-43b3-a6b0-d76ec9cc0d28/1/ekeMWqImonjosZBvNxxgz8fYfo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:3f:1a:0d:a9:74:51:08:c0:81:e3:bc:7b:2c:8f:74:a8:f5:
         f9:2b:52:8a:48:55:8f:1d:c0:3b:c5:78:1f:52:87:a9:ab:2e:
         28:51:15:a9:76:18:c2:75:9c:d5:50:0b:db:88:0e:6e:e7:f0:
         b4:23:a3:5d:91:65:99:61:81:77:3f:09:0d:1e:6c:f2:9c:60:
         82:ca:35:5c:cf:20:78:9b:ae:1b:c5:fc:64:2d:eb:82:c2:f6:
         2c:b4:b9:c6:ec:25:d8:bf:44:90:4f:cd:59:66:29:d6:42:f9:
         67:52:b0:58:2b:2b:9d:d3:67:88:36:a0:c2:28:75:a8:33:f4:
         a2:75:c5:b3:bb:e5:2c:f3:81:95:82:fe:9d:9a:c7:92:58:59:
         1d:e0:5a:55:e9:e2:b4:25:41:9b:f0:0c:69:08:d5:cc:9c:51:
         44:66:a5:8f:ed:14:b8:2b:90:9f:c3:93:1e:05:3c:22:9b:af:
         49:98:2e:90:9f:6d:e5:0d:e1:c3:8b:4b:96:55:ed:c0:99:f6:
         b8:65:17:80:a3:b8:67:5a:d8:63:0f:86:b2:87:89:04:21:18:
         2f:e5:dc:cc:ed:a1:15:f4:4e:78:0c:0c:bf:7a:4a:7e:e3:ce:
         58:53:2b:15:01:be:49:24:92:02:aa:e0:a8:db:7d:48:27:6a:
         a3:b4:e6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:42:22 2026 by rpki-client