Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
File:                     EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json)
Hash identifier:          38isqKDDTCo7ADU+yI5RUbX8rtEvBIKCz5BYPGhxh+Y=
Subject key identifier:   D6:A7:4B:01:EF:86:89:7D:8B:D1:1E:2C:05:4E:EE:43:02:92:F2:68
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Certificate issuer:       /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial:       01A0D15C31C577DC6F10831B5D93DD6A5659
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
Manifest number:          1B97
Signing time:             Thu 24 Sep 2026 03:01:15 +0000
Manifest this update:     Thu 24 Sep 2026 03:01:15 +0000
Manifest next update:     Fri 25 Sep 2026 03:01:15 +0000
Files and hashes:         1: 0kwfeb-8KYnjT1DaXTFg8NKV5Qs.roa (hash: NXuZo/nEKglyJiMys1lOF8MOKYcVQUjHhjrhGVTXb8w=)
                          2: 1ZS7cc_tEEysPYF4DOTIIcIT1ao.roa (hash: lmYN+w7oqIwz91IkaBPnHvUwV7oLDKZRMqJbBK9c1n0=)
                          3: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: LPTjvQPqsPO1NSZz1SQTWVkJuwhQ+p6LMHiFeyuXZcs=)
                          4: ExQa4_rJNaEHp9KaigvNnKDL6eU.roa (hash: 53Hf9NPeMQ6qfBPkcUTSGvezuAg+cEKzzFuOc90DUbQ=)
                          5: Gk-3Xu_izSB_f9RVT4Mx95fzdwQ.roa (hash: qSiZYwUebITVF7msT4gMb3T5zA9NBTdfmsfNp4wHc7k=)
                          6: Kuq3P7Qo7dY0uDSDfQAvQ-YqzYw.roa (hash: SgrkljN25ZyMwMNQeGikKgqlI+HrgpswmKROiJL7Gko=)
                          7: euBXC6rwjNF3N0PD1PpJMyMwSCI.roa (hash: 0lWahyGCdWHgLVF3U4IuMMbV9OFbVd1ssMeGsLZit7k=)
                          8: j3miBQqNH9MvtZNlx1-gjZqrqlE.roa (hash: smq4tHXaK2J5Z2RTwqeV0To7ZSM03HiBGbCe7Zo0HKc=)
                          9: vIuaHhw5-i00cPHH0vZ_LmseB00.roa (hash: bHcmA3+3imH7FcDE4PSlxFxFCMqyJAFjvPvcad59hYc=)
                          10: ySs7SU4bjzILxeAanv2fHUaKWo4.roa (hash: vb17VAVAufTzdYM1PaHWAgbmbK4CVZyUxS9hbwz1Rb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 03:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5c:31:c5:77:dc:6f:10:83:1b:5d:93:dd:6a:56:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
        Validity
            Not Before: Sep 24 03:01:15 2026 GMT
            Not After : Sep 25 03:01:15 2026 GMT
        Subject: CN=d6a74b01ef86897d8bd11e2c054eee430292f268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:21:49:86:04:aa:3e:5f:ec:67:cb:50:b3:c0:
                    d9:a0:46:ff:95:10:d2:3b:15:69:67:c9:61:30:65:
                    d8:f1:61:3a:f5:22:d4:b9:5c:6e:96:e2:03:bb:a4:
                    77:10:e3:77:e8:6b:f8:f9:e5:18:86:55:99:78:d8:
                    1e:ef:58:1c:bb:5a:27:ee:b6:09:77:8d:54:92:13:
                    8b:b4:b3:ea:77:e9:23:62:0f:62:19:44:04:e6:12:
                    8f:93:3a:00:a0:fc:c7:06:87:82:41:4d:41:52:ce:
                    95:d0:eb:8e:b9:14:6f:65:51:3e:6e:33:0e:b5:c4:
                    31:bc:f3:55:a2:d7:98:9b:cb:56:67:ed:9e:b2:94:
                    bc:9c:2a:d3:2e:f9:61:09:25:f5:9d:f6:b3:9b:ab:
                    ee:fa:5a:57:00:18:f1:b3:f9:bc:44:a9:3e:ac:6b:
                    b8:12:0f:45:53:3e:a2:5d:b4:82:88:b3:a1:a8:0b:
                    aa:f1:e0:d1:06:8d:2c:30:43:89:ff:5f:f3:22:5c:
                    a3:fd:d4:29:e9:dd:04:d2:8a:a3:c4:3c:72:79:64:
                    28:5d:99:e0:3b:4a:cf:87:45:4e:ee:ee:1c:f1:c7:
                    58:39:1f:5f:a7:51:d2:02:a9:d2:66:3d:5d:f9:30:
                    75:77:22:cb:95:e5:6b:c2:aa:b8:7d:60:c8:1d:ff:
                    90:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A7:4B:01:EF:86:89:7D:8B:D1:1E:2C:05:4E:EE:43:02:92:F2:68
            X509v3 Authority Key Identifier:
                keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a6:ca:39:6c:b1:32:3d:65:6d:ea:40:b1:fb:1a:08:58:c8:
         ca:8b:86:76:d6:ce:e4:6b:3a:9a:53:85:16:a6:2c:49:99:a9:
         92:a5:22:9a:7f:38:44:51:24:64:f4:8e:62:bf:29:26:8d:7a:
         37:1d:06:c5:a9:2a:25:0d:5e:52:9a:21:d0:f4:7c:fb:09:bf:
         4c:07:50:fd:20:0d:d0:fa:97:1e:58:80:a1:a4:c3:ce:b5:00:
         04:ea:5d:87:5b:3e:a2:bc:be:ce:1e:40:2d:f3:f6:19:3c:44:
         f8:15:b5:3e:a5:8e:b4:be:19:21:ee:17:df:85:a7:e5:57:b4:
         d7:8d:b4:ce:3a:5f:1c:a7:b0:c0:77:90:8f:99:f4:49:06:87:
         65:4f:74:90:d5:43:06:5b:fe:f4:40:87:5f:24:0c:19:40:52:
         4a:87:f2:d4:b5:9c:23:1f:d7:c4:2e:02:bd:a6:7b:1c:d2:54:
         45:03:94:0d:aa:8e:6d:32:00:ac:d7:24:e4:5f:63:c3:da:58:
         37:89:9a:59:2f:e9:0b:9f:9a:a8:89:5f:15:60:63:90:e2:72:
         6c:19:d5:6e:73:32:51:d2:8a:94:36:e8:b4:d5:86:16:fb:70:
         f4:0e:ce:e9:25:fe:ca:d5:8a:39:dc:1c:2c:31:d2:35:9b:f0:
         ab:f0:6e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:21:51 2026 by rpki-client