Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
File:                     eUif00bnIUhmFZrC8OycmQxPFLk.mft (raw, json)
Hash identifier:          OUTyAmdlrOEfs4TUWAKcLuzJE7swMu9U7nLW4C6VDis=
Subject key identifier:   A9:5D:68:2D:AF:2C:49:FD:03:A4:CC:96:25:50:DE:28:79:64:10:B7
Authority key identifier: 79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9
Certificate issuer:       /CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
Certificate serial:       01A129566D55E520D060C87EB1CFC7076F91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
Manifest number:          08F7
Signing time:             Sun 11 Oct 2026 05:01:32 +0000
Manifest this update:     Sun 11 Oct 2026 05:01:32 +0000
Manifest next update:     Mon 12 Oct 2026 05:01:32 +0000
Files and hashes:         1: eUif00bnIUhmFZrC8OycmQxPFLk.crl (hash: RIclF+veClteY2ZHwfxdcWm37TRKZ/EHx1JdvgzoDIg=)
                          2: xXtkEiDTV3h7aSqt_vIf9HrpRgo.roa (hash: lE79v8Tfhj6oNafzAQReenYVUCsp4w0Yfeh+M1GdO6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:56:6d:55:e5:20:d0:60:c8:7e:b1:cf:c7:07:6f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
        Validity
            Not Before: Oct 11 05:01:32 2026 GMT
            Not After : Oct 12 05:01:32 2026 GMT
        Subject: CN=a95d682daf2c49fd03a4cc962550de28796410b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:77:8e:20:fa:e9:0c:9c:38:68:74:aa:36:
                    57:ae:9f:0a:16:af:3b:64:34:2f:f4:af:1a:61:a6:
                    15:2e:00:9a:c3:51:c3:e7:e4:67:2e:9f:b4:94:6e:
                    39:f3:ff:49:d8:3b:3b:d0:cb:d3:a5:4c:1f:24:dd:
                    7d:31:42:c4:60:83:d3:fb:81:8c:a5:d0:dd:1f:5c:
                    54:7b:8d:fc:7c:4a:a1:18:16:7f:31:9b:f9:02:b0:
                    75:c8:58:36:31:37:99:4a:0b:e2:9d:b0:ff:d4:27:
                    fd:46:f8:66:90:04:c5:40:83:e1:6c:a9:3e:fa:45:
                    32:34:fa:46:0e:95:d9:42:51:87:57:1e:2d:21:a0:
                    40:64:87:4a:3a:98:32:cf:d4:de:9a:b0:dd:3b:73:
                    aa:cb:71:29:74:06:b7:95:62:c5:95:b0:a2:21:7e:
                    3e:74:0c:f4:97:5d:5f:fc:e4:ed:8e:d5:82:b6:a1:
                    d8:a6:61:db:6b:57:dc:ba:83:75:12:94:6d:fb:df:
                    a2:7c:8e:19:5d:a0:60:f1:3a:39:75:6e:d3:88:21:
                    e4:8a:e5:40:7b:e1:c2:17:a7:c9:7a:dc:fe:b3:7c:
                    da:f0:72:6a:3d:e1:7c:4f:f6:e2:06:46:fc:ce:52:
                    00:df:54:cb:94:4d:25:da:74:1e:7c:2c:66:56:6e:
                    65:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5D:68:2D:AF:2C:49:FD:03:A4:CC:96:25:50:DE:28:79:64:10:B7
            X509v3 Authority Key Identifier:
                keyid:79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6f:73:ce:10:c1:49:30:d5:6e:8d:29:0e:a5:c6:c9:d0:28:
         2e:a8:51:08:4a:5a:05:90:a6:25:2e:a5:f9:9a:2b:08:c1:da:
         9d:ad:01:c0:66:83:01:09:50:74:48:84:62:ef:26:e6:e4:88:
         7d:60:92:9a:fe:f9:d9:5f:a2:a9:fc:52:55:8b:a6:57:f0:03:
         92:74:77:6e:d1:a6:b8:bd:f8:25:4a:1f:4c:cc:5d:20:19:7c:
         dc:34:34:78:e5:0c:20:f0:2e:d1:74:70:eb:db:f4:08:1b:d4:
         c2:e7:6d:de:18:d8:5b:3e:1e:dc:14:12:42:e3:9f:73:dd:7a:
         43:fb:8b:ba:72:23:63:84:42:e7:e6:62:cc:00:9b:d8:97:b2:
         d6:d0:96:eb:c1:ec:c8:a1:ab:ad:eb:4c:c9:05:6f:92:25:9f:
         d0:83:ae:4a:e1:bb:68:a2:ca:11:80:26:2f:62:75:ac:46:b7:
         ee:ff:ce:f4:3c:b4:2f:8d:fb:a6:90:49:9e:b4:5f:2e:64:5b:
         ab:a4:31:42:a8:8f:52:8e:22:04:a1:63:80:36:89:1c:9c:5d:
         ef:12:d5:11:eb:57:dd:6d:84:a8:09:89:0e:81:14:ff:10:b9:
         3e:db:89:e3:1c:3d:41:a4:1c:6d:d1:b5:a6:63:b7:50:2c:31:
         fb:8a:3a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:50:30 2026 by rpki-client