Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
File:                     EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft (raw, json)
Hash identifier:          IkvALdaeH79xZk9BrWy3n/g4Y3Xbx6YYE311vKCk7ZA=
Subject key identifier:   CE:A3:63:03:39:43:98:B4:E6:18:78:9C:FC:EA:A5:9C:14:F3:28:1C
Authority key identifier: 13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9
Certificate issuer:       /CN=1323be6d548145867863b7b2fa464bdf8518a0c9
Certificate serial:       01A10C5E30A297FBD38342A055518890535E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
Manifest number:          1A8A
Signing time:             Mon 05 Oct 2026 14:01:01 +0000
Manifest this update:     Mon 05 Oct 2026 14:01:01 +0000
Manifest next update:     Tue 06 Oct 2026 14:01:01 +0000
Files and hashes:         1: 5O82bj0RVPYC9fHeytygnYo76U8.roa (hash: P+7qJZ65HnaqEFW0awG0yJ2/55GEb9yw1uv5c7sRaVA=)
                          2: 8ZMhpHWpSjesuQ3JK0HQjCVMxBg.roa (hash: M4Nr0Wi/SzNVzQvcJX08oqzRs/vvxC+K5A74A/Zcd8o=)
                          3: EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl (hash: 6TaFfORCUC5BcWMkOy8mWlS/9BaNlcSE1kbXsHssFOQ=)
                          4: JMBywUmb80eS8GOrITuaVx8nCRg.roa (hash: /324/IAHNCGdBytZWzsoLGKPRqjPYfQZAIUmmm6zgwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0c:5e:30:a2:97:fb:d3:83:42:a0:55:51:88:90:53:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1323be6d548145867863b7b2fa464bdf8518a0c9
        Validity
            Not Before: Oct  5 14:01:01 2026 GMT
            Not After : Oct  6 14:01:01 2026 GMT
        Subject: CN=cea36303394398b4e618789cfceaa59c14f3281c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:51:dd:44:43:fd:74:9b:bb:9e:1d:12:37:a4:
                    d5:27:53:32:48:3b:33:05:02:53:fd:76:fd:39:0c:
                    9a:b5:d4:05:1a:6e:b3:cb:38:4b:2f:51:84:7e:19:
                    4d:41:a0:94:3f:00:fd:25:4d:52:7c:63:df:42:0f:
                    04:d1:ff:f0:06:34:92:2a:8a:24:a5:a0:f9:86:ca:
                    d9:e8:47:ce:40:90:16:28:e5:88:93:5e:01:49:53:
                    89:7b:a8:1e:ee:ca:28:b8:d8:98:00:39:79:5d:67:
                    24:37:ad:e0:4c:4d:93:df:b3:49:3f:e7:fb:46:a0:
                    30:9a:15:e3:e4:47:39:89:c5:4d:2a:1d:ba:d9:11:
                    90:5a:e0:0b:d7:49:60:3a:b9:7b:2e:bb:79:2e:0e:
                    e5:1b:5b:81:18:da:a3:17:76:8d:63:ff:90:93:a5:
                    d0:90:16:89:30:1a:69:2a:2e:09:62:36:e6:f5:a1:
                    dd:d2:9e:1b:b2:29:6c:d3:e8:3d:a4:27:63:32:a5:
                    ae:73:73:b1:bd:b5:2b:27:e0:1b:b5:d5:c7:b0:51:
                    64:89:b6:0b:62:ad:26:80:3e:b7:47:91:cf:86:8f:
                    2e:d5:b7:f6:6f:28:ab:16:e4:9d:bf:69:27:8b:4b:
                    23:79:e4:66:fb:12:c9:c1:91:ab:fc:65:c6:5c:28:
                    2f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A3:63:03:39:43:98:B4:E6:18:78:9C:FC:EA:A5:9C:14:F3:28:1C
            X509v3 Authority Key Identifier:
                keyid:13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:57:50:34:4c:11:d0:95:15:2c:a3:a4:41:32:13:ff:85:a7:
         a3:d8:64:02:69:17:5b:80:c6:c6:0b:61:96:e1:ee:2b:e7:3d:
         3d:09:4e:9f:ac:93:d4:97:aa:cf:80:69:f6:f2:40:53:98:41:
         b7:e6:c4:31:03:68:19:ba:cc:ed:d6:1d:b4:24:b7:c5:a0:8c:
         ae:ff:62:72:ec:5c:45:d0:7f:45:78:d4:53:4d:43:8e:a3:2f:
         b6:20:dc:b2:6d:34:8f:4a:59:81:22:96:2c:e2:60:f3:2c:57:
         4b:22:0c:3b:ac:84:0f:c7:b8:85:a3:bc:8e:50:b8:46:64:ff:
         e9:87:e8:9d:c1:81:6a:58:49:5f:68:5d:fc:26:65:bc:32:92:
         3e:22:26:5a:62:14:3e:d6:6d:42:a1:4d:60:27:71:57:df:aa:
         88:ed:1b:b0:7f:49:83:4d:4e:5b:95:95:e1:8b:5b:5d:0c:5f:
         9f:36:cf:f7:09:0d:8e:2a:bd:67:8b:08:cd:1e:a9:9e:7a:53:
         5f:e4:8d:70:ef:22:0c:e6:23:bb:bb:ee:62:8d:1b:3c:92:b4:
         4f:48:1a:cf:21:4d:25:d3:8c:a9:d2:c8:68:dc:33:64:98:d2:
         d0:4e:2f:0f:70:ed:c7:e6:bc:18:41:78:24:17:fa:33:8f:50:
         06:3f:8d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 20:12:50 2026 by rpki-client