Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.mft
File:                     eeG1ECkj_kWv5O5x2MfXIadLlXs.mft (raw, json)
Hash identifier:          SWJSwZPr8sweu716NcrzBaAG8fItIySjeSlOcHClef4=
Subject key identifier:   E7:AC:53:E9:4F:60:83:AC:81:24:F3:1A:18:57:D7:B3:A0:CF:EE:0C
Authority key identifier: 79:E1:B5:10:29:23:FE:45:AF:E4:EE:71:D8:C7:D7:21:A7:4B:95:7B
Certificate issuer:       /CN=79e1b5102923fe45afe4ee71d8c7d721a74b957b
Certificate serial:       01A0E1AAE5F68E54584F39AC1A3D15BBE81B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eeG1ECkj_kWv5O5x2MfXIadLlXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.mft
Manifest number:          02AF
Signing time:             Sun 27 Sep 2026 07:01:08 +0000
Manifest this update:     Sun 27 Sep 2026 07:01:08 +0000
Manifest next update:     Mon 28 Sep 2026 07:01:08 +0000
Files and hashes:         1: 0P2MOC-zABkj2wkrhKo3feyJgm4.roa (hash: ptWNlzPMq1Y8jEA8BdUmma2Y/J+PbhWlBppdHwqFP38=)
                          2: AHAqO1me7Q2s--h2lJgebqIw5iw.asa (hash: h2RJjsngCpCQ1Exj6koTNpi08FwNJUQcJduwFp94muM=)
                          3: eeG1ECkj_kWv5O5x2MfXIadLlXs.crl (hash: cWOEcMi1SCmHyjaSp2llBVaJ8JXRCKfTGdNgmq4ioxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eeG1ECkj_kWv5O5x2MfXIadLlXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:aa:e5:f6:8e:54:58:4f:39:ac:1a:3d:15:bb:e8:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e1b5102923fe45afe4ee71d8c7d721a74b957b
        Validity
            Not Before: Sep 27 07:01:08 2026 GMT
            Not After : Sep 28 07:01:08 2026 GMT
        Subject: CN=e7ac53e94f6083ac8124f31a1857d7b3a0cfee0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:24:7d:2c:ad:42:6c:e2:d1:e6:25:cc:69:55:
                    6b:07:05:b7:06:60:a0:bd:70:c6:00:ad:07:b2:77:
                    20:5f:08:6f:97:29:8d:21:fa:b3:91:77:78:0b:07:
                    cd:a8:ee:20:b4:3b:b4:cc:f7:f6:9b:20:a9:13:11:
                    d9:cc:55:a4:14:88:c7:26:4f:4a:d5:06:ea:a2:b6:
                    10:76:fb:09:75:0f:3e:a9:7d:c4:34:11:79:98:42:
                    4d:86:3b:dc:2e:af:9c:9d:e5:b9:f3:75:68:56:40:
                    3c:dc:07:98:9a:e4:bb:cc:49:8e:2b:15:c9:bd:b4:
                    44:cf:13:2c:e8:bd:29:86:30:d8:d7:36:c0:81:74:
                    50:ed:c4:74:3b:7d:06:ef:77:f7:6d:df:5e:a7:74:
                    b5:19:f5:7d:4f:27:ed:51:f0:96:8e:9c:a0:da:31:
                    da:8d:b3:41:45:e8:07:a1:fa:1d:ab:b9:e9:b0:ed:
                    5c:e0:38:b8:72:92:b1:ad:e1:a1:eb:06:5c:73:86:
                    a8:32:eb:4b:29:05:5b:ed:68:4c:f9:d2:d5:03:9c:
                    76:8e:d1:fc:bd:51:f4:98:9a:1f:8f:f5:b3:3e:d2:
                    b6:d3:3e:21:e9:39:21:38:3f:4a:ad:08:cf:5a:9d:
                    35:c6:10:a8:13:ed:cc:8e:1b:ef:36:39:eb:ac:48:
                    16:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AC:53:E9:4F:60:83:AC:81:24:F3:1A:18:57:D7:B3:A0:CF:EE:0C
            X509v3 Authority Key Identifier:
                keyid:79:E1:B5:10:29:23:FE:45:AF:E4:EE:71:D8:C7:D7:21:A7:4B:95:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeG1ECkj_kWv5O5x2MfXIadLlXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:cf:a6:9d:4e:58:4b:10:18:1c:7e:60:c6:20:6f:31:4e:e4:
         ad:c1:fa:0a:30:e6:01:29:86:c5:78:93:bb:c5:63:d7:b4:83:
         f5:66:3c:cb:84:80:74:34:87:5d:b1:70:9d:9e:6b:b9:63:18:
         d6:06:4e:ec:47:79:43:f6:ee:07:87:01:c7:0e:71:e3:43:dc:
         91:96:9f:66:11:3b:ff:44:87:84:65:90:f2:44:98:ba:d1:ae:
         f1:b8:6b:82:fe:ce:67:62:03:22:b7:4c:13:2b:91:fc:44:33:
         1c:76:33:19:95:74:57:87:f9:bf:2f:97:5d:7c:b4:2f:b2:87:
         78:8d:b0:9d:7e:0a:6a:8b:eb:38:8b:71:27:e8:4a:c4:56:cd:
         d3:ad:43:41:ed:7a:9d:5b:10:e4:50:62:14:a5:04:8d:e9:ed:
         62:d7:99:88:0f:75:84:17:41:9a:e6:9b:4e:e2:44:d3:23:83:
         20:08:0f:d3:00:b2:75:44:fd:4e:b0:e0:e9:2b:68:f0:f7:7c:
         92:39:08:fe:a6:a6:87:46:53:6a:fc:e6:5d:3b:4a:03:02:84:
         73:07:ec:99:4c:a2:33:23:75:29:ec:ae:cc:7f:c5:3a:b3:d8:
         a2:a1:57:c4:fc:a4:23:da:11:49:07:54:4c:dd:60:46:9b:bd:
         62:df:85:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhquX2jlRYTzmsGj0Vu+gbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZTFiNTEwMjkyM2ZlNDVhZmU0ZWU3MWQ4YzdkNzIxYTc0
Yjk1N2IwHhcNMjYwOTI3MDcwMTA4WhcNMjYwOTI4MDcwMTA4WjAzMTEwLwYDVQQD
EyhlN2FjNTNlOTRmNjA4M2FjODEyNGYzMWExODU3ZDdiM2EwY2ZlZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SR9LK1CbOLR5iXMaVVrBwW3BmCg
vXDGAK0HsncgXwhvlymNIfqzkXd4CwfNqO4gtDu0zPf2myCpExHZzFWkFIjHJk9K
1QbqorYQdvsJdQ8+qX3ENBF5mEJNhjvcLq+cneW583VoVkA83AeYmuS7zEmOKxXJ
vbREzxMs6L0phjDY1zbAgXRQ7cR0O30G73f3bd9ep3S1GfV9TyftUfCWjpyg2jHa
jbNBRegHofodq7npsO1c4Di4cpKxreGh6wZcc4aoMutLKQVb7WhM+dLVA5x2jtH8
vVH0mJofj/WzPtK20z4h6TkhOD9KrQjPWp01xhCoE+3MjhvvNjnrrEgWbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOesU+lPYIOsgSTzGhhX17Ogz+4MMB8GA1UdIwQY
MBaAFHnhtRApI/5Fr+TucdjH1yGnS5V7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWVHMUVDa2pfa1d2NU81eDJNZlhJYWRMbFhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lYmZkNjgtNDI1Zi00Mzk2LWFmY2It
MmJiYzgwMDFiNDZjLzEvZWVHMUVDa2pfa1d2NU81eDJNZlhJYWRMbFhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9lYmZkNjgtNDI1Zi00Mzk2LWFmY2ItMmJiYzgwMDFiNDZj
LzEvZWVHMUVDa2pfa1d2NU81eDJNZlhJYWRMbFhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFs+mnU5Y
SxAYHH5gxiBvMU7krcH6CjDmASmGxXiTu8Vj17SD9WY8y4SAdDSHXbFwnZ5ruWMY
1gZO7Ed5Q/buB4cBxw5x40PckZafZhE7/0SHhGWQ8kSYutGu8bhrgv7OZ2IDIrdM
EyuR/EQzHHYzGZV0V4f5vy+XXXy0L7KHeI2wnX4KaovrOItxJ+hKxFbN061DQe16
nVsQ5FBiFKUEjentYteZiA91hBdBmuabTuJE0yODIAgP0wCydUT9TrDg6Sto8Pd8
kjkI/qamh0ZTavzmXTtKAwKEcwfsmUyiMyN1KeyuzH/FOrPYoqFXxPykI9oRSQdU
TN1gRpu9Yt+FtQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:11:24 2026 by rpki-client