Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File:                     EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier:          eI64kJMs19vpIkeNT2Fw0fIG/VUkF0cljD79yATUVXo=
Subject key identifier:   2B:E2:7B:2B:27:55:B1:83:D9:36:7B:87:5D:26:EE:32:76:6B:4E:2D
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer:       /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial:       01A110A96EF9CD9DD073F380E67B8E2E7BF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number:          1A93
Signing time:             Tue 06 Oct 2026 10:01:41 +0000
Manifest this update:     Tue 06 Oct 2026 10:01:41 +0000
Manifest next update:     Wed 07 Oct 2026 10:01:41 +0000
Files and hashes:         1: 1-75h6Z8XZfpA-J4Xkm8JYxrcW7E.roa (hash: YgoOaQlFbXUdsZx8u8PNBd2uQHXrr/r+JgEvwggSZDA=)
                          2: 1-kxJVrZkUbclMp6kSpvfNZEt1VM.roa (hash: sllzVYP/WiMPElY3BFy/EfBmKfiCPi4PRAGGrxfDP7g=)
                          3: 6LKvF_6ld6s3n--fTX7f7BK_ehc.roa (hash: /eEnxWv6EmUP6K8zfowjl8E4hGLa0C38VlYeIpY/h7w=)
                          4: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: 5JLbQXT06fqdfDcE5cGGz5UwYkiDqJ/vcTrlNRddHkk=)
                          5: GHJyTF0ORoaY9AckOmArWob3_HY.roa (hash: uI00sPFgBL2eDPBgh7Ys5Cfku0oem0hVhkVJpAs4CZg=)
                          6: QzNYXaK9Heg5iwI0_fdSvPsjX10.roa (hash: 7DicMrMZcYWPra55/EcMga9qpWnVA1JBNRCO/E/beAo=)
                          7: vsAEpL5w14p4gOY7B1dWMsDjDJI.roa (hash: ULT4TLN8aqk2Vz6VZZi8pMSOHDlIrdLD0OUPI10LgY0=)
                          8: wsgq7r0bmgVuGnMWeJq55bfKJ_U.roa (hash: TZU5rVeqp7nDnIs3V8dsH2Vbd18ixFe0rwWSFe7vxYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:a9:6e:f9:cd:9d:d0:73:f3:80:e6:7b:8e:2e:7b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
        Validity
            Not Before: Oct  6 10:01:41 2026 GMT
            Not After : Oct  7 10:01:41 2026 GMT
        Subject: CN=2be27b2b2755b183d9367b875d26ee32766b4e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:c5:c0:97:db:45:9f:c0:07:5e:64:bd:7c:
                    81:01:52:55:32:82:80:43:df:8c:6b:05:fe:22:de:
                    cc:33:45:e6:82:96:46:ce:7d:74:d1:6d:ff:65:e5:
                    5c:8e:5f:61:42:56:a4:3d:88:36:67:d7:41:cf:c0:
                    c8:3b:41:9b:17:11:f5:86:5d:bb:bc:cf:77:37:87:
                    96:9f:28:f6:0f:2d:90:9f:6c:ab:14:90:3c:7e:fc:
                    74:50:98:18:fe:09:54:fd:81:ec:ff:8e:ae:1f:7e:
                    50:eb:c6:aa:80:70:c3:3f:dc:56:77:7c:73:59:b9:
                    51:9d:cd:74:c1:14:2d:8a:49:f0:c7:aa:d2:6e:96:
                    f8:e8:fe:a7:e8:37:d2:2b:99:74:1a:a3:c2:e6:6a:
                    1d:f7:4e:1f:06:2c:39:2f:af:4d:67:ad:01:4f:a0:
                    18:0b:a3:fa:8d:03:49:e1:b0:b3:e9:ce:d8:5f:1f:
                    97:3e:0c:71:01:a5:cd:0d:a8:1b:40:3a:f0:83:19:
                    bf:fb:18:2f:cf:56:58:de:69:fd:12:7b:c0:60:c9:
                    01:3b:a4:08:44:f9:57:58:3a:46:e9:fc:d3:9d:71:
                    a0:7c:7b:9f:7d:32:b3:3d:67:04:d2:d3:75:8a:fa:
                    fa:10:bf:f6:45:e9:0c:56:d9:e2:19:66:15:f5:30:
                    1c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E2:7B:2B:27:55:B1:83:D9:36:7B:87:5D:26:EE:32:76:6B:4E:2D
            X509v3 Authority Key Identifier:
                keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:dc:f1:bd:2c:78:91:78:91:a4:4b:de:1e:d5:7e:3b:d8:b7:
         68:f0:87:22:ba:58:dc:1e:a3:93:c1:d7:c0:12:99:7c:26:a2:
         c4:d2:98:fe:11:12:f0:19:d8:f1:9a:6d:3e:b6:53:5a:fe:78:
         e7:d3:76:19:1c:9b:63:75:9b:62:5b:76:45:67:44:c7:5e:5d:
         13:84:fb:79:18:57:7a:30:bf:04:7f:34:f4:5b:37:ae:24:0d:
         11:44:45:e3:c1:cd:a5:c6:9a:46:34:e4:6d:00:92:c7:e4:f7:
         f2:7a:3d:62:c1:74:f4:e4:fd:24:e9:d6:a3:90:c8:fe:02:78:
         d1:e6:fc:e9:04:db:a7:94:46:ad:58:ef:43:32:6d:14:ab:82:
         7e:af:e6:01:fd:19:f2:13:43:d1:86:15:b6:45:6d:47:6f:0f:
         23:60:44:1a:e3:ae:25:d1:ab:5e:f8:f3:e9:24:6c:e8:29:73:
         82:3b:7a:42:e8:c3:e9:84:79:e9:35:f9:1a:95:ce:14:9c:ce:
         7c:0e:48:8d:da:1a:06:71:46:fd:b0:2a:42:34:67:af:17:f6:
         56:06:82:0b:19:ce:78:11:1e:8f:bd:4e:4f:53:2b:04:3a:a1:
         b8:00:cb:06:02:f1:00:19:e3:23:be:36:99:ab:b1:36:02:81:
         fd:83:99:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:56:14 2026 by rpki-client