Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
File:                     eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json)
Hash identifier:          tZb+yoUDXGji4CqNDs8pLS8Up0bdroWIB+0m2PgS05s=
Subject key identifier:   A7:28:48:89:83:17:0F:79:6C:2D:C7:5D:53:F3:31:82:13:96:CF:7D
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Certificate issuer:       /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial:       01A10D70949C5F65F48093331FE5B7388C31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
Manifest number:          16D5
Signing time:             Mon 05 Oct 2026 19:00:44 +0000
Manifest this update:     Mon 05 Oct 2026 19:00:44 +0000
Manifest next update:     Tue 06 Oct 2026 19:00:44 +0000
Files and hashes:         1: IkSWs7EkuQhyXRbP9F6EHBtTz1o.roa (hash: Byu4YYkguBqvjzQYm5SoI51Ex0ZiZOLUbV6kTS2GuBk=)
                          2: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: Z5mbVdxRcX1NOPK+l0u6nt4nLhzaPx07Xqss4ULqSLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 19:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0d:70:94:9c:5f:65:f4:80:93:33:1f:e5:b7:38:8c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
        Validity
            Not Before: Oct  5 19:00:44 2026 GMT
            Not After : Oct  6 19:00:44 2026 GMT
        Subject: CN=a728488983170f796c2dc75d53f331821396cf7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:2b:04:9a:ab:e9:15:73:24:db:cb:cc:da:
                    33:32:74:6e:03:7e:c7:86:8f:fd:31:66:58:cc:23:
                    74:f2:1f:60:85:d6:c5:8f:05:14:1e:c6:44:54:c1:
                    02:7c:91:a1:4c:fb:7e:11:c4:c6:c4:42:0c:8f:ac:
                    6d:d6:d9:f8:f9:b9:ee:b5:14:a3:dd:8e:67:f3:5b:
                    a2:84:2f:8a:eb:5d:73:8b:cd:84:93:f6:1f:12:78:
                    15:96:e5:52:64:1b:ac:e7:d5:49:65:07:b1:b3:4b:
                    9a:68:71:ca:0a:44:4d:9f:99:68:94:0a:44:d3:43:
                    98:d0:e4:17:79:1c:e4:e6:23:8b:8f:31:40:3e:2d:
                    75:5f:08:45:e2:cd:02:93:bf:4e:cb:0d:44:0b:72:
                    40:97:2d:07:1b:ce:fa:32:d3:12:2e:ae:5c:28:1e:
                    36:f4:6b:9d:7f:8a:c5:75:8e:59:e3:61:ac:48:a1:
                    8b:85:e4:48:1d:85:39:0d:42:78:dc:92:eb:79:c2:
                    4e:6c:15:d9:04:ab:1e:e3:10:cc:2e:e1:e4:f1:f2:
                    65:ed:1b:36:9c:2c:25:dc:26:c1:ea:14:2e:2b:98:
                    82:99:1e:67:ed:7b:37:66:fe:b4:16:93:66:e1:9d:
                    20:62:b1:b9:2c:b0:5d:5b:a1:5a:87:3a:dc:3a:6f:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:28:48:89:83:17:0F:79:6C:2D:C7:5D:53:F3:31:82:13:96:CF:7D
            X509v3 Authority Key Identifier:
                keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b7:f2:6c:8a:bd:e7:20:ee:2a:d7:5c:ca:01:ec:0e:c7:b8:
         eb:04:20:01:17:b6:41:39:2a:c6:55:d3:88:4f:61:24:41:04:
         a6:1d:73:4e:fa:40:11:54:37:52:11:14:5d:9b:22:3b:16:31:
         7a:9f:f3:ee:5d:f1:9e:07:24:79:fd:ad:37:2c:69:ff:81:5e:
         aa:66:aa:d7:87:fd:9a:8e:fc:ac:f6:9b:c3:42:63:f1:32:85:
         0d:11:78:ee:b5:f1:02:82:ce:5d:6e:05:6f:85:85:ef:91:55:
         6c:bb:03:64:fb:97:88:54:c8:7c:9d:0d:d9:36:b6:2f:f3:12:
         78:a7:54:37:d9:5c:b5:95:95:34:13:81:6d:f3:b0:dc:02:43:
         59:40:88:b9:43:9a:d4:fc:bb:56:1d:7e:ca:aa:7b:84:3d:8c:
         59:a7:c8:02:81:12:3e:c5:8f:6f:4b:e6:2c:fa:e9:b3:a8:e7:
         0b:b6:27:1f:78:5f:de:7b:b6:aa:e7:74:9b:a5:43:1c:de:51:
         3b:04:5c:76:8e:e2:c1:10:fc:54:1f:54:21:ea:c7:34:35:d4:
         b7:2f:a9:7e:3b:a6:41:2e:44:8b:89:fc:e1:e9:82:bc:41:8d:
         c1:04:78:2f:e8:6a:2c:ad:20:64:ca:32:81:1e:0b:c2:d0:3f:
         7d:95:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:17:27 2026 by rpki-client