Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
File:                     eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json)
Hash identifier:          tf6SOJS9WfFjbmWlTCAAbkZJd5wPUh4DPimrh8tfQ2s=
Subject key identifier:   BB:76:A3:A7:B3:99:28:49:61:8A:A0:DA:24:56:C4:19:BB:E5:FB:47
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Certificate issuer:       /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial:       01A10F5F9B892E5D5BA1C27B52774EB4F0BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
Manifest number:          16D6
Signing time:             Tue 06 Oct 2026 04:01:26 +0000
Manifest this update:     Tue 06 Oct 2026 04:01:26 +0000
Manifest next update:     Wed 07 Oct 2026 04:01:26 +0000
Files and hashes:         1: IkSWs7EkuQhyXRbP9F6EHBtTz1o.roa (hash: Byu4YYkguBqvjzQYm5SoI51Ex0ZiZOLUbV6kTS2GuBk=)
                          2: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: 1fCmGZksGUb00CXCciF7OmWim2XrRj6tCBvo3QykX8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:5f:9b:89:2e:5d:5b:a1:c2:7b:52:77:4e:b4:f0:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
        Validity
            Not Before: Oct  6 04:01:26 2026 GMT
            Not After : Oct  7 04:01:26 2026 GMT
        Subject: CN=bb76a3a7b3992849618aa0da2456c419bbe5fb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e0:8a:4c:ff:48:28:ca:23:05:50:cb:47:1a:
                    9f:0a:30:8e:6c:29:93:cc:85:ac:4d:86:de:35:9c:
                    8a:40:c2:15:96:16:9a:4e:2c:c6:a0:af:90:f6:d6:
                    ec:c9:07:0d:c9:52:3a:07:43:d2:a3:ab:38:61:ff:
                    ac:b8:48:f9:c1:50:25:19:66:e0:21:4a:6d:84:7a:
                    cc:68:a0:94:37:10:ac:fc:24:7e:e6:64:b0:e8:44:
                    ed:6a:86:ac:88:aa:95:f4:23:71:c3:8e:9f:c6:cf:
                    a2:c9:c8:17:ea:76:96:64:37:9d:07:d8:0b:40:47:
                    f3:2a:74:52:8a:e2:d7:aa:55:65:12:d0:cf:6b:5f:
                    5d:db:8b:54:81:23:e5:5c:4f:37:d5:50:66:9a:65:
                    59:1e:33:8c:d6:a0:c7:06:c5:75:ce:9e:56:f8:74:
                    4f:4b:90:7e:a7:64:d9:a9:55:64:31:09:7a:79:7c:
                    2e:e2:d1:2f:2b:29:b1:97:6c:d9:8c:2a:54:86:58:
                    c5:81:d9:c3:22:22:53:72:c5:61:6a:62:04:a4:39:
                    86:e9:e7:09:18:ed:9f:e1:47:c2:a2:eb:72:ba:b1:
                    b8:d2:19:26:92:fb:9b:5c:7f:06:a4:89:0a:7c:0d:
                    b9:60:1c:b1:e5:0b:1c:31:d2:0f:19:01:00:07:09:
                    9b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:76:A3:A7:B3:99:28:49:61:8A:A0:DA:24:56:C4:19:BB:E5:FB:47
            X509v3 Authority Key Identifier:
                keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7e:2a:5f:a5:6a:0c:a3:66:86:20:7d:4f:84:90:43:61:94:
         69:32:17:98:15:2a:34:41:0a:dc:9f:5b:29:70:7f:af:7e:76:
         b2:fb:be:eb:b4:59:ec:cb:5b:2d:47:fe:88:30:5d:5c:e1:70:
         6e:dd:26:44:59:0e:42:aa:c8:95:db:a1:ec:7f:54:e9:7f:53:
         e2:5d:5b:68:68:b8:20:d4:05:5d:56:00:ac:fa:e6:40:5c:4c:
         93:cf:a9:2d:89:4a:a0:d6:50:46:73:ef:59:12:d1:77:7e:e5:
         6f:8e:f0:94:04:b5:b6:4c:f7:d0:ae:84:d6:7b:d1:b6:9c:78:
         f9:be:0e:95:78:ff:f7:59:a9:8a:46:36:66:08:a5:bf:c2:a1:
         66:a1:f5:68:2b:65:08:18:f1:69:4b:6b:4c:e3:b2:ca:46:d0:
         bb:fc:52:5a:4b:45:e5:4a:6a:28:60:b8:2b:2c:58:64:00:4c:
         5b:9d:32:36:60:87:a9:50:3b:1e:39:f1:c8:f1:7a:74:d6:1b:
         62:74:b5:7b:05:1d:80:a5:34:c5:70:63:69:c6:16:4f:51:a9:
         34:63:0f:54:88:0a:d9:1d:91:f3:ac:4f:c4:33:42:9e:77:e6:
         5a:90:d4:f3:4e:fa:f5:f9:eb:91:b2:06:f4:91:47:4e:51:a7:
         23:38:eb:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEPX5uJLl1bocJ7UndOtPC+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YzIzNjU4MGNjMmVlMTkzZGJkY2MzMTI2ZGY0MTcwY2Mx
MTdjZDIwHhcNMjYxMDA2MDQwMTI2WhcNMjYxMDA3MDQwMTI2WjAzMTEwLwYDVQQD
EyhiYjc2YTNhN2IzOTkyODQ5NjE4YWEwZGEyNDU2YzQxOWJiZTVmYjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+CKTP9IKMojBVDLRxqfCjCObCmT
zIWsTYbeNZyKQMIVlhaaTizGoK+Q9tbsyQcNyVI6B0PSo6s4Yf+suEj5wVAlGWbg
IUpthHrMaKCUNxCs/CR+5mSw6ETtaoasiKqV9CNxw46fxs+iycgX6naWZDedB9gL
QEfzKnRSiuLXqlVlEtDPa19d24tUgSPlXE831VBmmmVZHjOM1qDHBsV1zp5W+HRP
S5B+p2TZqVVkMQl6eXwu4tEvKymxl2zZjCpUhljFgdnDIiJTcsVhamIEpDmG6ecJ
GO2f4UfCoutyurG40hkmkvubXH8GpIkKfA25YByx5QscMdIPGQEABwmbdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLt2o6ezmShJYYqg2iRWxBm75ftHMB8GA1UdIwQY
MBaAFHjCNlgMwu4ZPb3MMSbfQXDMEXzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82OWNlMmItYWEzNi00YmFiLWI2NWUt
ZjllNjUzOWJiZTZiLzEvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS82OWNlMmItYWEzNi00YmFiLWI2NWUtZjllNjUzOWJiZTZi
LzEvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADn4qX6Vq
DKNmhiB9T4SQQ2GUaTIXmBUqNEEK3J9bKXB/r352svu+67RZ7MtbLUf+iDBdXOFw
bt0mRFkOQqrIlduh7H9U6X9T4l1baGi4INQFXVYArPrmQFxMk8+pLYlKoNZQRnPv
WRLRd37lb47wlAS1tkz30K6E1nvRtpx4+b4OlXj/91mpikY2Zgilv8KhZqH1aCtl
CBjxaUtrTOOyykbQu/xSWktF5UpqKGC4KyxYZABMW50yNmCHqVA7HjnxyPF6dNYb
YnS1ewUdgKU0xXBjacYWT1GpNGMPVIgK2R2R86xPxDNCnnfmWpDU80769fnrkbIG
9JFHTlGnIzjrFg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 15:41:01 2026 by rpki-client