Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
File:                     eC-fO7vgtR6p6bLpbGhodI-gePc.mft (raw, json)
Hash identifier:          yKaOVlE456GR+DCeZgVhfLDWWE7zFdqA54YvN5t6D7I=
Subject key identifier:   A6:4A:54:B5:E2:CB:1C:D6:49:90:DF:67:F9:43:A9:7E:EC:99:D2:B7
Authority key identifier: 78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
Certificate issuer:       /CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Certificate serial:       01A113734E9D58B68FB82B50284EE32C6FD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
Manifest number:          0CEC
Signing time:             Tue 06 Oct 2026 23:01:26 +0000
Manifest this update:     Tue 06 Oct 2026 23:01:26 +0000
Manifest next update:     Wed 07 Oct 2026 23:01:26 +0000
Files and hashes:         1: OqblUTqMRXsZt8pZ5pRXhex6Zkg.roa (hash: XCOdkvew4k3OnvrnXuLCOWZ3jOmwLtq3F1NbKBNNtwQ=)
                          2: eC-fO7vgtR6p6bLpbGhodI-gePc.crl (hash: 0kouI0wi4NsRD8jO9NB9Cskv875J70oodY9/iQYGI3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:13:73:4e:9d:58:b6:8f:b8:2b:50:28:4e:e3:2c:6f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
        Validity
            Not Before: Oct  6 23:01:26 2026 GMT
            Not After : Oct  7 23:01:26 2026 GMT
        Subject: CN=a64a54b5e2cb1cd64990df67f943a97eec99d2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:18:fb:5a:7b:ae:83:29:a1:0f:ed:a2:75:ad:
                    41:c7:08:4d:11:fb:ba:0e:b9:30:8c:5a:0f:f0:65:
                    e0:3d:ca:a3:df:78:e7:fb:01:45:dd:c9:66:97:36:
                    74:54:d9:04:d3:e4:0b:08:95:4a:e2:b3:cd:9e:5f:
                    54:87:6b:8e:19:24:96:34:1b:b0:f8:f6:99:20:0b:
                    a8:6f:3e:6d:1a:d7:d6:4c:48:df:45:04:1b:63:f0:
                    8f:0b:ba:49:c0:db:4e:8b:15:22:30:4f:7c:b1:80:
                    b9:0e:4e:b8:2c:8e:cd:ce:ef:ad:da:1b:02:94:c9:
                    ad:95:4b:47:b7:51:bd:c4:d4:58:99:9d:e6:1a:2f:
                    d6:52:68:0d:25:98:0b:18:f4:95:44:48:bc:06:36:
                    c4:73:83:a2:07:f2:a3:6b:c6:06:71:3b:d8:dd:8d:
                    7f:47:e9:e8:88:51:bc:b4:58:0c:b1:0a:a0:e2:3c:
                    6a:77:c1:65:b4:19:8d:d8:f6:6b:8c:93:54:d1:7c:
                    ff:b1:13:be:12:33:09:fa:f9:92:37:6f:74:50:37:
                    e6:2a:d6:96:10:68:54:2b:54:23:4e:fe:43:2e:df:
                    84:54:81:da:51:2f:db:45:82:b2:97:08:49:75:59:
                    ae:d3:5b:d5:3d:37:7a:55:78:28:22:f1:28:27:ce:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4A:54:B5:E2:CB:1C:D6:49:90:DF:67:F9:43:A9:7E:EC:99:D2:B7
            X509v3 Authority Key Identifier:
                keyid:78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:49:b0:e9:dd:5f:9a:08:53:f0:e4:af:d6:1e:3a:f4:f4:44:
         24:84:1a:ce:17:b8:cc:92:55:c8:61:50:7d:30:be:8b:c3:e5:
         34:24:d0:b0:c1:f1:b0:44:61:9d:2f:ea:fd:22:d1:b0:26:6c:
         0c:41:c0:27:e1:c6:f3:e3:0a:10:3a:5e:a0:14:53:ab:93:bc:
         d7:73:a9:70:14:7f:bf:82:66:54:18:69:29:e0:4e:32:ed:af:
         ca:af:2d:b9:b3:13:3c:a1:30:97:91:a0:e6:ed:a4:f8:4f:6e:
         a1:8e:49:ae:7a:20:35:f0:97:c0:a8:f6:bc:50:09:3c:d8:45:
         a8:25:af:f7:bf:66:b5:9e:3b:27:bd:88:55:20:0a:4f:22:c6:
         aa:18:05:99:73:2e:dc:53:44:d9:23:04:7b:19:9b:71:6b:e9:
         b3:86:d7:2f:0b:f4:9a:63:78:be:4d:a9:2f:37:f3:92:f4:f1:
         9a:5b:6c:93:94:80:5c:ba:71:9e:25:7f:61:c6:90:5f:0c:81:
         16:f0:4f:ee:0c:b9:5f:df:a3:c0:6a:e5:bc:c2:0a:2c:82:90:
         5b:22:21:fb:cb:bb:fd:f4:71:be:bd:d7:d1:d0:48:06:e8:74:
         d9:32:b9:65:0c:1f:74:b9:aa:a8:71:ec:78:83:1d:8c:e7:ab:
         02:e3:49:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:15:20 2026 by rpki-client