Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
File:                     EiTl7_GrwObYvwKeT3MuCrcbwWo.mft (raw, json)
Hash identifier:          HQyEfoutSI/VKiabkJ6FnpWNuVmK/56KGIVmgrt1Qzk=
Subject key identifier:   10:59:4B:5D:58:8F:59:17:93:2B:35:60:57:D5:5C:77:F8:F3:4F:97
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Certificate issuer:       /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial:       01A0DA5FB5E575F610F2CDF9731333FEE19B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
Manifest number:          1A7C
Signing time:             Fri 25 Sep 2026 21:01:40 +0000
Manifest this update:     Fri 25 Sep 2026 21:01:40 +0000
Manifest next update:     Sat 26 Sep 2026 21:01:40 +0000
Files and hashes:         1: 7DKhg71ZB3nnMpauf53JDjRxvcE.roa (hash: JaQt7Bz1hiKlJT1Mi9uSBQ4bdQnONHvQK2D4cbBsnd4=)
                          2: EIlUot-POus86QxUL7xC47CEgA0.roa (hash: fGvFxEuJQZrOhf41jYSYuT3rCT2fv3AUTCj1Ro27Idg=)
                          3: EiTl7_GrwObYvwKeT3MuCrcbwWo.crl (hash: AS+qRfXsnA274S7MtwjajDgZz9eT3LHOsH+PGfZ2euM=)
                          4: IUysQoBsRWVOL5sdLOOClz3M4Tc.roa (hash: Q0b0Ej5B0Uf7P54rUhyCPtXaonVa+DMphvbAdFQOd6c=)
                          5: _D31CaslokzBzJb570s1tCqC6rU.roa (hash: vPfarYHxZRzOYIcHGYTZOf+++xHO9r+2vS0OJV7F/0s=)
                          6: hMkkOV3vcdpEBCz-ov_DfQAHhD8.roa (hash: E0l9RjnNf9Lrz/LeJVfSiJ9Bu3PLC8j0ZQdTbyOvhkY=)
                          7: iIvK0GriwCR5-e0INxYXsaN5HeA.roa (hash: y+xjj91MYcyeEl9ZZP8msaIhf1Zsnrl/qJUlt2VVY1Q=)
                          8: sL9_3JSSE2xT5n7OAXMAHMxKq1g.roa (hash: vGCCVcEYQcDBKDtRD4+hEi2hrb6nrXfbvM90L9lRcO0=)
                          9: xC4HZY2FAIOZlVLev_OryihHWUo.roa (hash: t5wlokLTk+K42yuANt3hwr4tFRZLOSrgIWyKhOKmoyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:5f:b5:e5:75:f6:10:f2:cd:f9:73:13:33:fe:e1:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
        Validity
            Not Before: Sep 25 21:01:40 2026 GMT
            Not After : Sep 26 21:01:40 2026 GMT
        Subject: CN=10594b5d588f5917932b356057d55c77f8f34f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6e:d1:da:1a:68:ce:67:e6:81:3a:80:db:d3:
                    82:20:d3:a7:18:6f:45:40:92:25:74:40:56:5d:ec:
                    50:d7:a0:21:77:3c:78:7d:e1:7a:27:f5:a8:cc:f5:
                    d1:c4:af:65:45:0b:17:f3:2d:b1:8c:dd:e2:fe:1d:
                    ff:c0:15:0e:71:8f:17:14:d5:fc:34:bf:f8:1d:4f:
                    cc:46:50:b5:66:4e:9c:1e:43:ff:b1:a4:7c:69:b5:
                    d9:4b:eb:69:91:86:7b:18:69:16:47:ef:93:ea:2a:
                    dd:2e:72:3e:89:2d:0e:88:43:15:dc:43:02:5a:2b:
                    61:55:3e:91:73:1d:f5:fb:17:03:f4:f3:62:57:26:
                    e1:58:00:63:96:64:b4:0f:54:6b:a2:cc:b5:49:f3:
                    9a:ba:c0:6d:5f:30:ee:68:a6:b0:dd:ae:2e:a4:a2:
                    ef:a8:cc:f0:44:64:4e:4d:49:1a:48:9f:f2:9b:08:
                    f7:1e:89:ec:eb:c8:32:47:3b:34:b4:6e:4f:60:f1:
                    35:7e:4d:71:98:0a:1f:95:fa:92:da:56:dd:e6:66:
                    df:85:7a:20:23:c3:19:67:5a:35:af:6d:a9:4f:56:
                    b7:41:ef:6a:73:23:fd:79:96:71:a7:3a:29:34:06:
                    e2:69:60:b1:3a:2c:86:37:88:6b:a5:ad:b7:81:0d:
                    f5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:59:4B:5D:58:8F:59:17:93:2B:35:60:57:D5:5C:77:F8:F3:4F:97
            X509v3 Authority Key Identifier:
                keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:1f:b0:ed:74:9e:d7:31:9a:83:de:52:27:8a:e8:ac:41:58:
         03:b1:27:a6:68:81:23:2d:d8:77:c3:c9:82:23:6b:b2:ac:01:
         f2:f1:8d:03:70:0f:64:53:83:be:b8:00:d5:d8:5f:cd:68:bd:
         ce:40:f6:4b:cc:3b:f3:fe:34:6a:95:ec:79:45:ca:77:30:c4:
         e0:48:9a:06:29:22:e5:3d:88:b5:32:c2:c0:fd:15:27:c5:06:
         ef:49:ed:2b:df:c2:1e:85:bd:b7:00:e5:0b:44:8c:8b:16:40:
         bb:2e:3d:ff:3b:f8:6b:ec:8e:4f:75:8a:e7:b5:a9:87:93:02:
         9d:d4:f5:db:0c:d1:18:95:e9:17:d1:fd:6d:63:b6:17:dc:51:
         88:18:34:79:cc:0c:c7:48:62:cd:a3:f5:8d:6a:51:0c:9d:ea:
         ce:0e:a8:b8:8e:80:7d:3c:4b:08:4f:bc:31:da:fb:30:b3:6a:
         ec:06:f3:91:a7:22:0b:5a:a2:39:ec:c8:bf:52:15:d8:63:a2:
         e0:55:d1:ee:04:8b:d8:e4:45:d9:57:2c:ae:4e:c1:58:fd:4e:
         b4:ed:d8:20:d2:72:63:fb:89:7a:23:f9:2e:c5:64:da:2f:28:
         4a:07:58:17:fc:2b:15:38:4b:7a:ac:54:82:70:b3:1b:7c:ed:
         35:99:1c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:04:46 2026 by rpki-client