Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.mft
File:                     eeG1ECkj_kWv5O5x2MfXIadLlXs.mft (raw, json)
Hash identifier:          +ibeTp9CbenNlTHdp6T1UHnaypaeSWbtujefSvi4RTc=
Subject key identifier:   82:54:FF:94:54:2E:FC:67:33:14:CE:F5:D0:AE:DD:F2:40:E5:B9:D2
Authority key identifier: 79:E1:B5:10:29:23:FE:45:AF:E4:EE:71:D8:C7:D7:21:A7:4B:95:7B
Certificate issuer:       /CN=79e1b5102923fe45afe4ee71d8c7d721a74b957b
Certificate serial:       01A1E09646B485CE3741216E1A09A02A39C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eeG1ECkj_kWv5O5x2MfXIadLlXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.mft
Manifest number:          0333
Signing time:             Sun 15 Nov 2026 19:01:47 +0000
Manifest this update:     Sun 15 Nov 2026 19:01:47 +0000
Manifest next update:     Mon 16 Nov 2026 19:01:47 +0000
Files and hashes:         1: 0P2MOC-zABkj2wkrhKo3feyJgm4.roa (hash: ptWNlzPMq1Y8jEA8BdUmma2Y/J+PbhWlBppdHwqFP38=)
                          2: AHAqO1me7Q2s--h2lJgebqIw5iw.asa (hash: h2RJjsngCpCQ1Exj6koTNpi08FwNJUQcJduwFp94muM=)
                          3: eeG1ECkj_kWv5O5x2MfXIadLlXs.crl (hash: QNreyG3TUFGBau4c1r2lxykJKuLYXv1vxFkSUenuJ5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eeG1ECkj_kWv5O5x2MfXIadLlXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:e0:96:46:b4:85:ce:37:41:21:6e:1a:09:a0:2a:39:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e1b5102923fe45afe4ee71d8c7d721a74b957b
        Validity
            Not Before: Nov 15 19:01:47 2026 GMT
            Not After : Nov 16 19:01:47 2026 GMT
        Subject: CN=8254ff94542efc673314cef5d0aeddf240e5b9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:47:ee:70:37:48:16:54:ab:f4:fa:93:e9:c4:
                    42:e4:9e:9d:57:eb:45:bd:7d:de:cc:ef:76:fd:6f:
                    c0:c4:d1:0d:2c:b2:6e:0f:d7:80:c9:56:b7:c0:60:
                    85:b0:1a:a4:a2:fe:f4:39:69:0f:f6:83:fa:93:e2:
                    13:2e:45:89:87:e0:96:96:a1:b3:9a:58:ab:4a:0b:
                    ce:49:38:e7:ec:d6:ef:33:01:1b:21:6e:84:37:0f:
                    52:9b:b8:2b:20:cf:4b:e3:81:79:53:1b:a3:d6:34:
                    3e:e8:c2:c2:54:4c:92:4f:45:ba:12:fa:92:58:16:
                    78:28:69:67:d6:04:80:56:f6:8e:d9:f0:0a:1a:90:
                    50:5c:88:d2:96:7d:a5:3e:bc:ae:05:3c:f0:f9:ba:
                    88:2d:b4:a5:e0:d5:ff:e9:1e:f1:52:91:a4:5c:d0:
                    30:c9:9d:49:24:c6:9e:b9:c9:41:e3:f0:c6:53:d3:
                    6e:85:3c:5e:73:96:5e:65:0e:b3:c8:ee:62:ab:1e:
                    45:ae:b6:20:87:80:11:3d:29:7d:33:eb:71:7a:fd:
                    aa:de:3a:45:d2:27:18:b4:7f:56:5b:4c:78:08:db:
                    d9:b8:9f:0d:3d:2e:ee:1f:23:3d:72:7f:5e:b9:72:
                    39:5f:66:2c:13:74:93:c0:ed:75:4b:0e:3e:10:1c:
                    3f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:54:FF:94:54:2E:FC:67:33:14:CE:F5:D0:AE:DD:F2:40:E5:B9:D2
            X509v3 Authority Key Identifier:
                keyid:79:E1:B5:10:29:23:FE:45:AF:E4:EE:71:D8:C7:D7:21:A7:4B:95:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeG1ECkj_kWv5O5x2MfXIadLlXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ebfd68-425f-4396-afcb-2bbc8001b46c/1/eeG1ECkj_kWv5O5x2MfXIadLlXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:37:28:0b:84:1b:b9:97:09:c6:a3:92:56:04:23:8b:35:66:
         36:f4:e0:35:e7:d8:c5:cd:ff:94:cb:f0:a6:a4:3a:cc:04:dc:
         ce:2d:93:dc:dc:59:d5:8c:93:c5:58:32:cd:90:57:48:10:46:
         14:41:01:3b:74:be:12:21:38:09:c5:18:ed:88:d7:71:c4:6b:
         d5:2f:d0:4a:51:ee:96:01:c3:c8:50:7e:74:5d:2d:62:2c:3d:
         ad:ba:92:bf:bc:67:2c:06:81:ad:3b:3c:07:35:7f:0f:e9:c0:
         bb:8f:13:62:43:b6:c8:a5:21:d6:e0:2e:b2:e0:02:df:1a:c9:
         d2:8b:7e:a0:f4:29:10:3b:24:d7:3f:b0:7c:62:8e:71:f6:51:
         14:3b:cf:bc:4f:e4:4d:4c:ad:45:59:5b:f0:db:0c:fb:38:37:
         1b:dc:8c:5e:2c:4b:07:d8:b5:7b:ca:0c:d5:cf:c7:8f:9c:3b:
         d5:ae:47:79:eb:d8:12:f5:43:5e:5b:67:89:c3:2d:73:82:c3:
         ff:5d:7c:d1:03:04:e3:5e:ff:34:c0:a3:6e:a9:85:24:ef:7b:
         68:8a:1a:92:fb:57:2d:4d:8e:ff:df:02:ae:a2:21:ca:b3:43:
         fe:90:4b:3c:6d:2f:52:bf:74:82:5e:f4:02:ee:fd:65:80:41:
         f4:ed:f3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:34:05 2026 by rpki-client