Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
File:                     EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json)
Hash identifier:          G06hjSvoWPsrao16Siu0XAwEL3Ey60fSqLrVzZKKj0I=
Subject key identifier:   CF:50:E0:8B:AD:B6:5F:28:9B:47:20:01:73:20:C6:9E:AD:EF:35:62
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       01A0D310976081B8FD952BF223E17FF1F50D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
Manifest number:          1B3A
Signing time:             Thu 24 Sep 2026 10:57:54 +0000
Manifest this update:     Thu 24 Sep 2026 10:57:54 +0000
Manifest next update:     Fri 25 Sep 2026 10:57:54 +0000
Files and hashes:         1: 1-wR4cTw3cnRKpfnM4kFkDlqOmpM.roa (hash: uANSR1y8ArwMRJWs9G2MLV5dcv0JI9ZhZL82nYHfPJ4=)
                          2: 1yQrs5HP9XIaoTvb72_pfqznw5g.roa (hash: yz35x7CqiZJ94ld5AFj0y0ZNW6s7eAQtnm0UEs/oenI=)
                          3: 3ueobkuqCRrYHcS_Ra615Z2wF5U.roa (hash: K0AzKxQwm7htko0KmC5TywH8R8BPhkqCaEM5jSmKm3g=)
                          4: 3xzArYOAxgWc4aUVyuLW5cctBic.roa (hash: 1e/deWnq1m7f4YnRkd3T/eFSvZzxSX+ubkiEGm+dFs0=)
                          5: 964mey1ll-AqSTVqRVFMkmj9R7A.roa (hash: /W32m1FUs/kl31E7I7cB+ItUJPiLNdIiU90WMvkjKtY=)
                          6: B3lzECI8w3HbbNBrJuEUc9_EF5k.roa (hash: rCmQl/ONc/o8391GBO724j7HH/p+HUU/e7ohTDKTGvw=)
                          7: C0pO8vmI8i0pyw-YO-sHomGs8Lw.roa (hash: 6noZcpiWmpaT21H7qsONWigBYFMG0N39ym2hGf7vBbs=)
                          8: CFjoGu1xIkRD4AXMx7qb8Qjapqw.roa (hash: JzMpItX6WpyBwW2pJ22HiX4G0oRhcgR43KfhB90tGRs=)
                          9: DJFcihK3KyDMA5inHd8qVc8pMd8.roa (hash: 7aHvIhUD1Pwu4HtX5DwhI19v0UPceOldhZKd58QrEWA=)
                          10: D_g2kJlELMuoefn2HH3Y2o0l5YQ.roa (hash: dyiFDNNm4intjG5QxyjFGbaTlhBNt77Zx7ofZH6deL8=)
                          11: Dt8fw0fBEcEty4mj1leXNAQgZ9s.roa (hash: y8aICBxGhhhT6yCX7J0nu8TCySSKB7GMI2H8C1V8oWQ=)
                          12: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: eslpqyGOpmIwV8pNJ7+1/7EorTQbjUX8TPCYPbSeaN4=)
                          13: N7wIAVShGLQyli3xNuOZyqJnQO4.roa (hash: AgMVywaJAsy8gUEhbniXUCBpJabLSJ38CmQWxUFEkEI=)
                          14: NkUv8tT-ajiDpIriTdTmg1rESxQ.roa (hash: seqVba1oO6/3hfFI32i0NdWB9EI7RH+MCROkDPZc0ZY=)
                          15: OfJWGzh3EJhJDnotwpPBu62vy1g.roa (hash: MhO2XX5OLieGQFxwEuA3XpaP5smjhsn06HFUwLnfiN4=)
                          16: PS0PsdnY-HZeeZ1Z52R3bkK0Hfw.roa (hash: 8DMzuZuwaB5js5sn1MRMLjpEkzq82jGppMDxBhQkY2I=)
                          17: QI6P2rjg0KTEHj0abHLeX5NrCNw.roa (hash: cNfX9kMj7jm75WwWsewudy5zy4Y1MC/doZUI28Cxpqs=)
                          18: TVQnbaL3VCztBv4q7ycrZZTOHOc.roa (hash: bC6KDiPDLB7pjAOZ1rB1QtdHfKPoray7E8FKc5HGj+g=)
                          19: U2pLLOkiHMn0rCPB16cgMVj-e5k.roa (hash: NZC/aPt8M4oyJlk7EBhhsouZdc1pvAlNzS2p5zGb/cI=)
                          20: UVz7Jz-vRbmjv60CUdJRwlL5d9k.roa (hash: 2loeiAsnCgkFA+e/zul6V4oJZslxwq6RTKrln0d3znk=)
                          21: X9pqJ_bWAmfpFd9hCW3HufAy5B4.roa (hash: SE7pkhcUNXRDeV5ZRqQnZ58B47F0LyM4s+/68mhkYxQ=)
                          22: _-TiV1qoAPPw8SPSrMcBVzTznwE.roa (hash: Pvgk+aRssPeQ+g6cPNxNpBek3/VhtaCOTsYLRLNNB4o=)
                          23: cZX0XiKgTVRStj-qdJuTen7BOJ0.roa (hash: EC0B5N4ujSfAORvQJwcrZWB4mhWoJIUXusoMRH6vkfU=)
                          24: k-6qmVeKEUGc-0cz5Hnsx9hmUPE.roa (hash: 5Ng2eom8lxcHR5nDEgtd/5I+6rVuKWoiMkhVtoQFVJM=)
                          25: moww7p-LOqTrUFdCMgiOcUbWkq8.roa (hash: 0LuJenOzhHfNNzAchlSo36Em1kGuq8Y2UA268LygX3g=)
                          26: pA1ysw7euEwsawBt3WsvgzNCTVc.roa (hash: IHFmvwJcfsynVr/cn/JAzWiobBCXWx/OYDSpOIF4AC0=)
                          27: shFmXFepoVkoPuQaH7iwNirZ3XU.roa (hash: jDkMxVrrv2BYtLq4CSplaeMuVqAXK6DpU5S2779dHHY=)
                          28: tuOyzSJGsdbEh4RXvNAltEvaihU.roa (hash: G2o6sCc5sztEjyYV0w4l3dxyOyYv/hTu3DhW9esUzC8=)
                          29: tuh9bTDNsuijEEF_1hjMDBzb60Y.roa (hash: NaMz9HaNco8VZFC2aGISUfFdhyLdNpp7L/OREqXeFJg=)
                          30: uX4xjA4a9NlDQbfRFcZwVkyWUus.roa (hash: f6MBYwHAEYsVkFoRtsJQxmJ3Dq5gG+hbXJYYbrTiM9Y=)
                          31: v-hy-AA0bMP0YRPYj1qavNzCvXY.roa (hash: 7R193xmOU591Bwip4tiZ71RqXjAryXJbfj2mjnypeSE=)
                          32: vcKGcg7yfm5OJBRmK9UMG7YPxlE.roa (hash: lC2nvLTapMxLzuBLLcR7m2BlyD8SVIXqzMfLdXwZD5U=)
                          33: vuRjeq6Hw4CRVKhaZ9mJU5QQ-8w.roa (hash: IY4BrewFqRlekR75+D0bMoN40ONA0lrT3ykyZO92GIg=)
                          34: wJhBirIGDG5CpWVFPtacVacZOVI.roa (hash: 3n/bwQkmOj6Btxw1bOnJ8wdv1zKEZOjjavJjnLqf2ys=)
                          35: wOT7IZMsm5x7gOeHRQ2TeKPsneo.roa (hash: XWPZK9lqHn6jVyfOlaTnmEq4ouLn7+wTN51iKWqUouQ=)
                          36: xUFWVXWG8jvZRSVOePtSKH6GSXc.roa (hash: SPlD00845Cci2SPbrzXpwUia+Xpnie29kSvO/GdHQ7U=)
                          37: yV7jKZqczgrPDGRpe_5ykccZCz0.roa (hash: CXmYu488BCna3Chnev81BlIc+TedhSwGv5Tq+LkVCsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 10:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:10:97:60:81:b8:fd:95:2b:f2:23:e1:7f:f1:f5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: Sep 24 10:57:54 2026 GMT
            Not After : Sep 25 10:57:54 2026 GMT
        Subject: CN=cf50e08badb65f289b4720017320c69eadef3562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:53:a6:73:23:5d:17:86:ae:c0:1d:a1:86:76:
                    1f:cb:18:81:cb:16:b6:e4:22:c7:76:b3:7a:47:61:
                    5d:0b:1a:19:e4:19:fe:56:31:71:91:c5:30:86:52:
                    0d:8d:11:25:af:95:ea:64:0e:47:d6:88:bb:71:41:
                    a8:05:3a:70:b6:a0:a0:a2:50:72:ec:5b:c6:b3:b5:
                    15:a2:b6:11:73:82:1b:d6:09:75:c3:e7:7e:4a:7d:
                    a5:60:36:e0:c9:0b:5a:94:e4:32:55:81:05:20:28:
                    f2:f5:49:a5:7f:ab:76:d5:c9:00:2c:6b:39:1d:99:
                    ee:a2:3e:43:00:fa:a2:12:4b:7f:be:af:e7:86:52:
                    c2:8b:c6:5c:0e:5d:b4:16:71:a8:f3:a3:2c:7c:95:
                    25:7f:6a:4e:5d:8f:1c:43:91:dc:c0:70:d8:eb:78:
                    74:c4:e2:49:1a:2c:7b:5b:57:c8:08:d5:8a:98:95:
                    2a:4f:0a:a4:1a:87:2f:e6:97:bf:b0:1d:d0:fd:21:
                    35:7f:bb:67:67:f3:50:2c:fb:7a:cd:08:a7:7a:aa:
                    86:c7:26:00:69:a7:bc:5c:b8:65:ad:1e:61:f0:20:
                    62:03:34:d0:b5:4f:97:85:3f:1f:f2:36:11:fa:30:
                    4b:fa:cd:9b:8f:c3:dd:d1:db:b4:b5:44:2c:5b:e8:
                    93:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:50:E0:8B:AD:B6:5F:28:9B:47:20:01:73:20:C6:9E:AD:EF:35:62
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:4f:20:dd:00:3a:c3:0b:98:e7:00:e6:5c:1c:ae:ca:28:a0:
         f7:04:1d:12:31:b8:01:96:16:c2:1f:b2:de:f6:88:99:f6:a1:
         1e:e0:01:58:eb:d7:3a:9a:e3:2b:2c:f0:e3:f2:f3:4b:75:94:
         db:09:da:eb:ce:82:0b:06:8f:f5:44:ba:63:33:65:6b:cd:2b:
         61:59:21:3b:2c:f3:e6:42:fc:59:23:26:48:8f:39:4d:4a:25:
         1b:72:aa:80:4b:ed:d6:d0:83:6d:f8:9c:0a:86:b3:29:76:96:
         cd:c2:04:10:70:73:6e:20:c5:5b:ce:8c:a3:16:22:e3:ce:17:
         20:9b:cc:35:c3:cd:1d:8a:cb:77:65:15:9b:c6:e9:f0:8d:18:
         dc:61:13:99:7b:72:52:3b:75:a8:50:4d:a2:0f:5d:bc:a9:25:
         31:ea:51:8c:07:b4:9c:2e:48:71:54:9a:e2:c6:93:5d:d7:72:
         2a:d1:05:93:53:79:67:1a:0a:b6:1d:fd:ab:8d:2f:d7:fc:05:
         44:84:c8:b8:af:f7:b4:76:59:c6:f7:43:6b:3e:1f:fa:c2:4d:
         a8:96:cc:8f:13:8b:ad:09:df:5d:15:71:28:86:38:9f:41:aa:
         cd:af:3e:8f:dd:5f:48:cf:b4:3a:33:a1:d6:25:10:eb:ab:6e:
         d1:a2:3a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:13:30 2026 by rpki-client