Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
File:                     ECeophKZuAo-cdGpgUJ-wAuEnRc.mft (raw, json)
Hash identifier:          7YsBPexlVChqnCqXhBuirHvVyZTC15Ptsb0fAxINWkA=
Subject key identifier:   13:2B:7C:14:81:F1:EF:F7:76:4B:9D:DC:77:94:71:FA:D0:0B:1B:FF
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Certificate issuer:       /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial:       01A1DD9496F78C62224D69FFC9ED634C1CA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
Manifest number:          0A4E
Signing time:             Sun 15 Nov 2026 05:01:05 +0000
Manifest this update:     Sun 15 Nov 2026 05:01:05 +0000
Manifest next update:     Mon 16 Nov 2026 05:01:05 +0000
Files and hashes:         1: ECeophKZuAo-cdGpgUJ-wAuEnRc.crl (hash: mKlg4vA+cMbyVlPjZa6BttoN1gasmh9H+JKIcBgISe8=)
                          2: NOejcwmPh5BJOHrok8-5R_pK-VA.roa (hash: U6upQkLae5Oi+4csWaNnpSyW7MitDHPojVhGt/0UX1M=)
                          3: VW0Lme2J_yQgUbH90ybvFY78qnw.roa (hash: /vPzz6J6ZRJW/sdj+JpNDbQ6TuWqQBuE3w6F2Mg6BOY=)
                          4: _BcnufwZCW7iXb3pQbGLXXwf_xo.roa (hash: GSjQZe7rnL/Y2iRKRElHvN0TAcPhSGgI4zSSehXhXpI=)
                          5: fthEES7ULueds3FNvYJDhxIkkoY.roa (hash: an/1lrGy32ibi55SrdxYeDyCH0x0JUXmE2+DfK+SDWY=)
                          6: ia3F-LgyjS2O_SDcYVaJOR4gNYk.roa (hash: KOIBwS2FoeIdHxBdEglt6oXyrVyFY6fE/gEORDqk87o=)
                          7: t6obyvkvAWPwFEeDPBbwJkGA0EY.roa (hash: jrevurtFPJMJbx/BHh2rtiqxJidgW6sTzXSqt13Fl+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:94:96:f7:8c:62:22:4d:69:ff:c9:ed:63:4c:1c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
        Validity
            Not Before: Nov 15 05:01:05 2026 GMT
            Not After : Nov 16 05:01:05 2026 GMT
        Subject: CN=132b7c1481f1eff7764b9ddc779471fad00b1bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f1:19:d7:75:11:61:16:91:b7:6a:88:d5:ac:
                    cf:ad:4e:0b:b3:3b:3d:91:19:8b:26:20:40:5d:fd:
                    56:16:8b:b2:10:49:b1:d2:dd:15:ac:ff:2f:f7:0e:
                    2d:d8:57:48:99:d3:f2:b7:d1:d0:12:66:7c:07:7f:
                    c4:d2:c1:b5:5e:34:a1:3e:7c:00:2b:34:de:c7:49:
                    f3:b0:07:03:56:35:7b:8d:4d:8d:c3:24:98:85:f3:
                    fe:86:66:57:f7:c5:8f:e0:64:46:10:19:a5:77:57:
                    34:c6:9a:09:b2:d4:8a:16:f7:88:42:32:ad:46:20:
                    08:59:da:d5:e6:97:83:81:1e:23:2a:b5:2f:96:e3:
                    01:89:17:ff:b9:4e:cd:73:9b:28:08:b7:98:93:34:
                    bc:15:a3:3b:78:e3:75:7d:d0:ca:cc:cc:bc:25:57:
                    95:ae:74:37:b5:40:7e:22:10:87:06:5f:2d:3f:db:
                    f7:6c:88:de:4c:f1:c0:bb:e0:c6:bc:2a:cf:8a:db:
                    35:2a:af:be:56:c1:d9:1d:66:b9:a2:d2:29:f8:df:
                    e5:95:c5:65:d4:ef:03:71:33:af:c9:eb:79:60:be:
                    08:d6:01:16:9f:16:5e:e2:29:55:dc:4f:5a:6a:04:
                    fc:82:85:7c:a0:8e:ef:a0:74:58:3c:61:5b:4d:6f:
                    14:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2B:7C:14:81:F1:EF:F7:76:4B:9D:DC:77:94:71:FA:D0:0B:1B:FF
            X509v3 Authority Key Identifier:
                keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ad:5c:b7:4b:96:d8:73:7c:16:20:48:fb:e6:fd:50:34:81:
         93:92:2a:91:80:b7:62:3f:24:6a:93:ac:80:13:22:0f:71:ea:
         eb:dd:2c:38:2f:3e:16:16:d6:fc:7c:da:e6:23:c2:fc:48:d0:
         06:6b:c6:3c:c5:44:4a:ef:f5:62:7c:f2:d9:8d:ab:ee:85:b3:
         16:3f:2c:4b:b5:06:84:45:e4:06:9e:d6:b8:2e:f5:92:0c:34:
         19:ae:07:0e:c2:4e:bb:88:f4:2e:09:03:48:1b:55:b4:d9:b3:
         6c:74:3a:8d:fd:08:fb:a1:1b:9f:db:94:15:d9:24:6d:2e:b2:
         66:c3:a0:5f:81:ba:5e:5e:21:7d:f1:86:83:a7:ef:75:66:7d:
         2d:e9:3f:f4:55:ac:11:ea:3f:b0:55:5b:b5:f8:8d:b5:de:14:
         46:42:2f:67:ff:b0:47:6f:80:51:85:45:ea:e9:20:aa:74:3f:
         f7:80:59:55:1b:ec:d6:0b:74:9f:fe:7b:fe:f1:c7:4c:f5:04:
         29:1a:89:86:3b:0a:7b:92:7f:de:60:7e:64:99:4c:a9:3b:5f:
         6e:d6:95:f3:f5:e8:85:85:25:75:ed:90:33:24:97:d9:cf:f1:
         6d:a0:e6:c1:2a:f9:75:13:09:00:a0:74:82:12:8c:fd:44:89:
         79:0d:61:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:19:03 2026 by rpki-client