Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.mft
File:                     eIg7YYtrAGVxBZ8c86EfylqHXjY.mft (raw, json)
Hash identifier:          1sbOSEZRYxBDkkRHupcwjVx2nK9DEHMgMwph00rj2aY=
Subject key identifier:   C7:6F:65:2F:A8:72:38:93:1C:6B:84:EB:0C:A9:A1:C9:5E:16:AE:99
Authority key identifier: 78:88:3B:61:8B:6B:00:65:71:05:9F:1C:F3:A1:1F:CA:5A:87:5E:36
Certificate issuer:       /CN=78883b618b6b006571059f1cf3a11fca5a875e36
Certificate serial:       01A0DF4E7BC3AB1F624E3CB3D4D19CD17D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIg7YYtrAGVxBZ8c86EfylqHXjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.mft
Manifest number:          20
Signing time:             Sat 26 Sep 2026 20:00:57 +0000
Manifest this update:     Sat 26 Sep 2026 20:00:57 +0000
Manifest next update:     Sun 27 Sep 2026 20:00:57 +0000
Files and hashes:         1: 47xkWnrIUB_j1TqpoRepDZ7NLpc.roa (hash: EdLvqub2w6o7cqpTXnk7ZfHL9LQiKqXm0wipsfY473A=)
                          2: QiwnNNOVeGs7cGV74UrLTMRIryk.roa (hash: LxMeRxrO9SVWS/nhHbMWcxGVg8DoiI2RkXKJ+Tb5EHM=)
                          3: eIg7YYtrAGVxBZ8c86EfylqHXjY.crl (hash: 411hsMb7miwOCUtGF0vTtmuj+MD+MLtYBtLfMQ3ypFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIg7YYtrAGVxBZ8c86EfylqHXjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:4e:7b:c3:ab:1f:62:4e:3c:b3:d4:d1:9c:d1:7d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78883b618b6b006571059f1cf3a11fca5a875e36
        Validity
            Not Before: Sep 26 20:00:57 2026 GMT
            Not After : Sep 27 20:00:57 2026 GMT
        Subject: CN=c76f652fa87238931c6b84eb0ca9a1c95e16ae99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:18:52:91:67:fa:8f:6d:c1:24:26:5e:c9:93:
                    f3:08:4f:d7:db:db:3b:58:20:6b:ad:40:27:f6:d7:
                    00:19:fd:62:37:10:56:b7:86:14:1b:ac:60:f2:2a:
                    b7:52:1c:3c:4b:1d:8a:eb:3a:5d:70:5f:b1:ad:d3:
                    6e:e4:22:fe:0d:43:d8:90:30:2e:15:12:29:c4:96:
                    9a:f5:da:af:9e:75:cd:22:42:a6:10:79:c3:92:a4:
                    c1:b7:e0:3a:cc:d9:be:d1:89:9b:be:f0:2e:9e:20:
                    87:58:36:57:a2:b8:4c:86:d0:60:8a:85:cc:5d:6b:
                    06:27:bb:df:5b:36:93:6b:c2:d1:62:9e:6d:8f:9b:
                    29:88:3a:30:ca:ff:1b:9d:b2:af:e3:e9:01:50:be:
                    21:2c:29:87:da:21:8f:94:62:68:c8:6b:63:1c:18:
                    4a:29:20:12:dc:ca:61:2c:d7:66:ae:16:7f:56:3c:
                    f7:97:08:e2:5b:e6:2d:6b:f9:f7:32:19:05:72:76:
                    2f:90:06:a1:7c:59:fb:82:2b:0d:8a:17:3c:54:87:
                    b7:3b:02:2c:73:a2:95:38:1b:ca:7c:15:c1:3e:5f:
                    3f:34:61:7b:7e:49:df:2b:71:00:25:f8:23:86:c9:
                    98:43:a3:74:81:58:6b:66:19:2c:17:f9:5d:54:ca:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6F:65:2F:A8:72:38:93:1C:6B:84:EB:0C:A9:A1:C9:5E:16:AE:99
            X509v3 Authority Key Identifier:
                keyid:78:88:3B:61:8B:6B:00:65:71:05:9F:1C:F3:A1:1F:CA:5A:87:5E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIg7YYtrAGVxBZ8c86EfylqHXjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:34:d9:71:b8:1f:78:36:62:c7:bb:36:4c:5a:da:f0:88:8e:
         7e:a1:b5:1f:11:af:22:f3:a8:e7:9a:63:51:e4:9f:82:70:fe:
         69:c3:bf:e5:bc:89:7b:9e:ed:9f:e4:06:4a:cd:8b:19:02:2a:
         e7:7b:2f:45:39:db:3b:73:05:06:e6:fa:f2:5d:56:e5:62:d2:
         93:db:fe:ae:90:ec:b2:48:e3:56:c7:b3:7a:0d:28:f7:0d:47:
         8b:f9:68:67:08:e8:7b:70:79:ba:d7:31:fa:83:5c:31:c9:b7:
         bb:d6:d6:b7:3d:f3:c9:73:5d:6b:60:67:97:24:01:6d:81:ba:
         f2:81:64:70:8e:b1:a6:89:97:50:61:97:bb:15:e5:36:44:6c:
         c8:0a:b0:dd:30:c8:0e:10:f1:f7:98:65:0c:f9:59:de:42:a9:
         d9:a2:d3:06:72:6b:cb:4b:5d:95:ff:71:29:be:68:d4:e8:0d:
         f7:dd:78:eb:30:1e:b4:02:a1:f7:49:bb:d7:6a:31:e0:8d:ae:
         3d:1d:78:15:97:3a:ae:4e:f6:32:48:f7:ed:53:50:6a:e4:bc:
         60:39:98:31:f4:1b:ad:d6:47:3a:db:8f:04:1a:5c:75:4a:81:
         d6:7b:3e:43:10:f3:44:36:de:f2:5c:77:95:7b:7d:e6:00:26:
         a9:26:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:59:55 2026 by rpki-client