Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
File:                     EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft (raw, json)
Hash identifier:          h8HYSWydJTy9PWqouOXYJMkEC/V7zJynCQ1x8hEBQr8=
Subject key identifier:   16:1A:15:06:F1:0B:C7:DB:86:9F:C5:70:14:E9:57:51:83:6B:7C:8D
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Certificate issuer:       /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial:       01A0CBC7CB1371DB36491F0B6EE71C5477F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
Manifest number:          0450
Signing time:             Wed 23 Sep 2026 01:01:03 +0000
Manifest this update:     Wed 23 Sep 2026 01:01:03 +0000
Manifest next update:     Thu 24 Sep 2026 01:01:03 +0000
Files and hashes:         1: 6NomImNZWaHi6JxMplj9lMIruGU.roa (hash: 66ybrBR0IXxLeTkfJbiHhp6BZdj8GOj7WY0PcGUFYik=)
                          2: AW17FInZXbbfzlPfQfag3e5H2tA.roa (hash: dmQitLz8NUYQglDkSo+N/IQ9Ntp7x8tsHi+hjRpZyNs=)
                          3: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl (hash: cIh50mQfL8UMA5GZq1bcmnE5B2W7io9gZHYwVT0laKI=)
                          4: G_a_D4w6XID3HHcAkDZ33ncczUI.roa (hash: TJwpjG7RY739+T5MlCso7ay89Sk16BHwPqa3u2ERz/0=)
                          5: N6YysdN9coyWq8a_olGcakNcTTY.roa (hash: XflvML4jU8nWdsR81GpugPsjYujETxYvRfm/otH2XUQ=)
                          6: U5qz6xEJwpl9W5yFofcjv_QYJdg.roa (hash: SFU07nCtw7gmZMA4jhGAvEN7wK5wQZgNbDVm6oGSUf8=)
                          7: xdqZMIH3R0kq1OUzrCJ7_j5BrPk.roa (hash: JI0nZYfinXynWc9Z+bVX76ENbeGi+A5V4Zl9wHWDiy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:cb:13:71:db:36:49:1f:0b:6e:e7:1c:54:77:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
        Validity
            Not Before: Sep 23 01:01:03 2026 GMT
            Not After : Sep 24 01:01:03 2026 GMT
        Subject: CN=161a1506f10bc7db869fc57014e95751836b7c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:f9:00:b7:a3:c9:47:d3:d8:0a:1c:af:cc:
                    32:c7:6c:00:76:05:95:6c:b0:22:4b:92:f0:17:31:
                    26:65:c4:6a:5b:a9:4d:13:06:92:3f:fa:7a:41:9a:
                    f7:e5:61:57:e4:c4:0c:07:0d:4f:d7:86:e6:dd:93:
                    b8:5f:82:2e:5b:40:19:90:68:e3:db:7b:f9:f1:15:
                    35:f8:e6:84:54:39:d9:0a:09:e7:0e:f2:0d:44:33:
                    d5:c1:58:e0:c4:d5:e9:6b:8b:9c:f7:8c:1c:4e:3c:
                    7c:13:f9:8f:04:78:af:3b:5c:d1:d6:7e:34:15:2b:
                    9b:00:0d:fc:7c:15:b3:ed:0d:ea:d5:7e:27:bc:fa:
                    e1:df:cd:db:77:db:75:63:c4:1f:cb:ac:7f:fe:92:
                    3b:48:a5:dc:76:59:9c:19:93:72:1e:1c:99:17:bd:
                    c7:92:42:fb:e9:e1:0e:8f:7b:2c:6c:fd:de:e3:3f:
                    a5:b7:dc:1e:23:75:d4:63:37:8f:6a:b4:6d:42:b9:
                    28:02:1e:e7:bf:e3:36:c2:64:71:71:93:6c:f2:85:
                    54:3e:11:83:30:b1:d3:fd:60:f0:6a:59:1d:0b:f7:
                    d6:8b:82:a6:ed:a2:74:cf:3e:a1:33:9d:17:ec:51:
                    53:04:ca:4c:97:91:f3:2e:00:ad:e4:d9:66:6a:ab:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1A:15:06:F1:0B:C7:DB:86:9F:C5:70:14:E9:57:51:83:6B:7C:8D
            X509v3 Authority Key Identifier:
                keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:41:26:00:79:7a:4f:6c:c9:05:03:4f:7c:bd:b0:70:35:f9:
         58:23:ab:e3:ad:46:43:ec:c1:63:7f:fa:7e:4b:67:50:12:61:
         35:7e:b6:67:20:24:62:6e:bf:aa:d6:a1:41:9c:de:f2:f2:66:
         a0:5f:e9:b3:70:c7:09:85:20:0d:c2:38:f5:fe:c6:b0:d5:60:
         d1:ff:c2:c9:d2:10:70:6a:60:50:59:29:20:c6:1a:22:dc:7a:
         f3:68:69:3e:7f:d8:93:79:2d:a9:76:ff:fb:91:b2:be:49:9b:
         d9:e9:67:52:79:2b:7a:81:40:d3:1d:cb:07:4d:69:98:d1:26:
         45:36:65:3d:65:3e:fd:16:3b:67:b1:9a:28:37:35:2c:94:3d:
         4a:97:64:60:07:19:93:fb:64:ef:7e:f0:05:73:2a:83:2a:50:
         8c:87:92:2a:3d:a0:1d:a3:8e:b3:cf:97:37:68:30:9b:8b:29:
         5b:25:b8:91:48:f8:0e:de:24:7b:3d:5d:57:11:2f:23:b9:52:
         79:82:d0:91:c5:79:47:06:22:46:d6:d3:c6:8b:0f:49:9c:1f:
         db:ff:1d:a7:71:87:26:a5:f1:cb:70:53:c4:b5:ce:ab:a5:b9:
         1c:ed:e8:f3:0a:c9:a0:82:a5:7a:0b:f2:70:01:81:4e:79:87:
         fc:66:a5:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLx8sTcds2SR8LbuccVHf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZmU2ODNiMWQ3ZTQ3YjdjN2VkYTE1NTAxNjI3YjcwOTIw
ODUzYTEwHhcNMjYwOTIzMDEwMTAzWhcNMjYwOTI0MDEwMTAzWjAzMTEwLwYDVQQD
EygxNjFhMTUwNmYxMGJjN2RiODY5ZmM1NzAxNGU5NTc1MTgzNmI3YzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulT5ALejyUfT2Aocr8wyx2wAdgWV
bLAiS5LwFzEmZcRqW6lNEwaSP/p6QZr35WFX5MQMBw1P14bm3ZO4X4IuW0AZkGjj
23v58RU1+OaEVDnZCgnnDvINRDPVwVjgxNXpa4uc94wcTjx8E/mPBHivO1zR1n40
FSubAA38fBWz7Q3q1X4nvPrh383bd9t1Y8Qfy6x//pI7SKXcdlmcGZNyHhyZF73H
kkL76eEOj3ssbP3e4z+lt9weI3XUYzeParRtQrkoAh7nv+M2wmRxcZNs8oVUPhGD
MLHT/WDwalkdC/fWi4Km7aJ0zz6hM50X7FFTBMpMl5HzLgCt5NlmaqvbfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYaFQbxC8fbhp/FcBTpV1GDa3yNMB8GA1UdIwQY
MBaAFBD+aDsdfke3x+2hVQFie3CSCFOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTIt
YzRiZWZiMjU2MjJjLzEvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTItYzRiZWZiMjU2MjJj
LzEvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnkEmAHl6
T2zJBQNPfL2wcDX5WCOr461GQ+zBY3/6fktnUBJhNX62ZyAkYm6/qtahQZze8vJm
oF/ps3DHCYUgDcI49f7GsNVg0f/CydIQcGpgUFkpIMYaItx682hpPn/Yk3ktqXb/
+5Gyvkmb2elnUnkreoFA0x3LB01pmNEmRTZlPWU+/RY7Z7GaKDc1LJQ9SpdkYAcZ
k/tk737wBXMqgypQjIeSKj2gHaOOs8+XN2gwm4spWyW4kUj4Dt4kez1dVxEvI7lS
eYLQkcV5RwYiRtbTxosPSZwf2/8dp3GHJqXxy3BTxLXOq6W5HO3o8wrJoIKlegvy
cAGBTnmH/Galhg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:03:52 2026 by rpki-client