Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
File:                     EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json)
Hash identifier:          Tv+CPcsRj10JuOUgru5956m+NHRjI+33NeXS/j/I9OU=
Subject key identifier:   98:A5:15:99:90:0C:27:A7:EA:CF:23:27:E4:54:AC:4B:C8:1F:02:E5
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Certificate issuer:       /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial:       01A0CE23946458AA47ACD91392857B5E39AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
Manifest number:          1A6E
Signing time:             Wed 23 Sep 2026 12:00:33 +0000
Manifest this update:     Wed 23 Sep 2026 12:00:33 +0000
Manifest next update:     Thu 24 Sep 2026 12:00:33 +0000
Files and hashes:         1: 8YZRbgY-jKvD5Qx_V3PZvEk7vWs.roa (hash: VWf+UTOiYBb3BuAyoYwwM3l/EA1c3gcBsPIpoLbePt4=)
                          2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: uZNsli7u0HvGak5nOxniv/yWOHhx1s5i6ec1U9e3yKU=)
                          3: H3xTPmvK9zSgTcG__u3TwIPowUk.roa (hash: LbE0stmwuty2WSYq6lcYUDzFt6TCqOOwuZiyFMFNrDY=)
                          4: LIjz0LVWHyiVRe41t0otex5cgKk.roa (hash: kK1oc6nFnO7s7B7iKpi9xLLSYXGDXAKQ7beSDUR4qc8=)
                          5: O6ZAZ4typgOI3suTxfN-rxJmiqo.roa (hash: vmBhZBWRzaR03mbT3PYidf4G6v/Azs/K8CL0/p3O6Bg=)
                          6: bEr1knk29A1thJBkv70_tj5F5_4.roa (hash: HBKJUp0spY1+ZHU4KZ7GZ9vGaUpCij2jKbgcOJbWUBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:23:94:64:58:aa:47:ac:d9:13:92:85:7b:5e:39:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
        Validity
            Not Before: Sep 23 12:00:33 2026 GMT
            Not After : Sep 24 12:00:33 2026 GMT
        Subject: CN=98a51599900c27a7eacf2327e454ac4bc81f02e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:03:ec:ae:df:7e:8c:78:d5:c3:f2:42:9c:6b:
                    5e:80:6e:cd:0e:8d:95:81:c3:be:47:73:8c:ac:e3:
                    ad:05:e2:d8:f6:c4:c3:81:77:34:0b:3d:6a:9d:a6:
                    07:9e:f2:9f:84:6a:c5:a6:3b:c6:0e:00:b1:d1:5f:
                    d1:9b:c5:d7:43:83:92:dc:d0:43:27:31:31:d8:dd:
                    5a:54:41:d2:a5:9f:89:e9:59:81:cc:0a:62:15:51:
                    11:32:66:d7:ce:05:1a:22:11:4b:5d:09:0c:e9:6f:
                    fe:70:65:da:e5:1e:73:ce:cd:48:0e:b3:dd:e0:6d:
                    3c:e1:32:46:7b:9f:63:48:e2:41:4e:4e:34:f6:4b:
                    7a:f4:ff:97:38:7b:b0:df:27:5f:ba:f3:1f:b0:e1:
                    11:6f:8e:9a:bf:35:20:9e:8e:5f:ca:83:37:58:75:
                    9d:a8:e6:01:9f:94:4b:29:ec:4f:92:e0:fb:92:ca:
                    94:a6:c3:db:4b:31:25:7a:cd:1c:48:d1:c3:49:ae:
                    cc:c5:e4:0f:53:4c:08:9c:17:4a:c5:d2:56:db:81:
                    48:c4:5e:5e:71:cb:79:18:f0:7e:af:c7:fb:06:76:
                    c0:a3:ba:28:b3:58:6e:05:0d:97:39:ec:3b:12:f1:
                    5c:f1:3b:0d:77:c4:e6:9c:7c:fa:51:da:c1:31:b2:
                    a2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A5:15:99:90:0C:27:A7:EA:CF:23:27:E4:54:AC:4B:C8:1F:02:E5
            X509v3 Authority Key Identifier:
                keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ae:c7:48:77:09:1f:17:de:86:79:43:9c:60:31:53:08:e2:
         18:13:a5:76:ea:63:3b:14:8f:7c:4e:58:88:b1:a4:24:05:64:
         f8:a8:64:7c:c2:3b:c9:c8:64:96:7b:c3:74:8c:a0:3b:b3:5b:
         b7:ed:75:3b:85:37:85:bc:27:6b:c1:28:07:06:28:89:ad:00:
         43:c4:5b:05:84:09:4c:bf:f6:45:59:d8:4c:c8:18:3b:24:be:
         90:ca:72:f9:33:42:14:a9:f5:59:27:08:2f:78:69:93:38:55:
         53:6d:b0:68:66:d3:4e:5b:1b:a8:3a:74:9d:79:02:a0:b2:83:
         ce:94:26:94:6b:86:0c:35:8b:1c:19:5f:70:f9:7e:49:6b:05:
         a4:0e:52:5e:69:62:90:33:af:8f:e5:3d:41:b7:1d:0e:86:6a:
         1e:14:df:95:94:11:eb:ae:35:bc:1b:e7:98:5c:e8:44:ac:03:
         d2:d3:9b:cd:d5:08:66:0d:b4:73:a1:17:7e:c3:86:91:d5:28:
         e1:2f:b2:38:31:bf:93:de:9f:09:af:ad:eb:0e:7f:ca:a9:92:
         dd:18:46:70:5c:f7:07:52:1f:e8:f1:34:6e:b3:16:88:33:88:
         b6:41:6e:22:12:db:58:af:5a:77:ba:d8:df:47:a3:37:25:0b:
         40:5d:e7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:16:56 2026 by rpki-client