Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/EovYJD4lNvrMsk_q06IWK4x2ZiY.mft
File:                     EovYJD4lNvrMsk_q06IWK4x2ZiY.mft (raw, json)
Hash identifier:          7epRzhtADVKk094kk0GrWVXPdw3jopsOlH4G6eE/adM=
Subject key identifier:   53:7A:C5:23:D2:36:1C:65:CD:14:2B:45:E3:22:70:FA:79:65:B0:4B
Authority key identifier: 12:8B:D8:24:3E:25:36:FA:CC:B2:4F:EA:D3:A2:16:2B:8C:76:66:26
Certificate issuer:       /CN=128bd8243e2536faccb24fead3a2162b8c766626
Certificate serial:       01A0D7CC5F77855796A930D609401BA8A002
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EovYJD4lNvrMsk_q06IWK4x2ZiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/EovYJD4lNvrMsk_q06IWK4x2ZiY.mft
Manifest number:          E9
Signing time:             Fri 25 Sep 2026 09:01:30 +0000
Manifest this update:     Fri 25 Sep 2026 09:01:30 +0000
Manifest next update:     Sat 26 Sep 2026 09:01:30 +0000
Files and hashes:         1: EovYJD4lNvrMsk_q06IWK4x2ZiY.crl (hash: QC1yc/FUIdmHSEW+JF8ntwqw/riaq3WH+5JA45dxTgU=)
                          2: R2KDwp-tUXnOEQqIzXntzQBf_KY.roa (hash: 3iTtCDR+0013mzbxoj3heBLQwp68jez1Z1Mf4xqERmU=)
                          3: UOvEHE7WE1z9h4a5DkousVoTRlc.roa (hash: 0Bl+rJ6pbOT4lYSuzTA8nG72C26t2iwDXqXU8W0NYIo=)
                          4: i2pgG51rDNJY2AaIhJMn_qzCAuo.roa (hash: 9DrGq/yzCckExbMfQC8NV5FQG9j+RSWeEt/sBtiHP04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/EovYJD4lNvrMsk_q06IWK4x2ZiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/EovYJD4lNvrMsk_q06IWK4x2ZiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EovYJD4lNvrMsk_q06IWK4x2ZiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:cc:5f:77:85:57:96:a9:30:d6:09:40:1b:a8:a0:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128bd8243e2536faccb24fead3a2162b8c766626
        Validity
            Not Before: Sep 25 09:01:30 2026 GMT
            Not After : Sep 26 09:01:30 2026 GMT
        Subject: CN=537ac523d2361c65cd142b45e32270fa7965b04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:62:fb:7a:a1:56:5f:c0:a6:e1:3d:9a:f1:59:
                    30:de:06:11:ad:e8:cb:8a:bc:9e:9d:cb:87:91:87:
                    fc:95:c6:48:b5:8d:3f:a6:3c:5a:33:aa:e0:60:a7:
                    6f:f2:92:21:24:71:5b:d1:c8:b3:52:58:7e:da:b3:
                    e6:8c:34:31:83:c6:47:14:be:3c:3d:56:6c:7a:14:
                    12:f0:46:91:89:ac:80:99:a1:ff:51:1a:93:16:2a:
                    16:f3:ed:82:84:25:27:bf:01:4e:40:61:17:21:ca:
                    18:12:6b:a3:e1:07:00:f1:5e:4c:d1:a3:a4:5d:07:
                    92:90:c1:a1:6e:45:cd:01:51:38:96:30:91:e5:6c:
                    9d:38:29:32:95:38:ed:ac:c2:89:52:43:81:41:b7:
                    f2:06:6f:f0:7d:92:3f:8a:be:05:3b:ca:7a:59:94:
                    f0:6d:fd:97:2b:1a:da:34:65:66:f9:0e:7c:90:c8:
                    0a:9d:55:c0:ad:8d:f3:b9:8a:4a:ff:57:db:bd:b7:
                    ff:82:36:6c:49:19:cd:72:62:a4:91:27:57:fe:a8:
                    19:d5:67:2a:be:70:56:98:fb:60:ee:1c:60:88:1b:
                    46:d4:ee:d3:3d:71:43:3b:80:eb:66:3f:ec:ef:fc:
                    ac:90:08:81:ae:59:2e:34:43:15:c8:6a:c0:2d:68:
                    b8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7A:C5:23:D2:36:1C:65:CD:14:2B:45:E3:22:70:FA:79:65:B0:4B
            X509v3 Authority Key Identifier:
                keyid:12:8B:D8:24:3E:25:36:FA:CC:B2:4F:EA:D3:A2:16:2B:8C:76:66:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EovYJD4lNvrMsk_q06IWK4x2ZiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/EovYJD4lNvrMsk_q06IWK4x2ZiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/EovYJD4lNvrMsk_q06IWK4x2ZiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:0a:78:97:75:4b:0f:62:d7:4f:8b:c5:e7:21:a5:9a:88:b9:
         b5:7e:91:a6:eb:f4:3e:29:14:43:cc:d6:b9:a9:0d:8b:8c:45:
         c9:b5:f4:72:5f:6c:6e:7f:39:19:7c:92:0a:0d:a1:83:19:66:
         65:7b:a6:d5:af:f9:a2:d6:33:4d:b1:a3:9f:f8:aa:de:eb:6d:
         c8:77:72:86:dd:63:9a:9a:d6:77:6c:bd:7e:b9:5b:47:e2:8f:
         22:d0:df:54:95:b5:2d:e6:2f:41:c6:ae:48:d8:ed:08:a4:cc:
         8a:64:14:be:b4:74:40:49:b0:bb:3f:79:01:84:d2:11:9e:9d:
         93:b3:7b:3c:84:64:be:ab:d6:4b:6f:5e:ab:10:e7:20:93:ac:
         da:47:3e:d0:ca:4c:d8:58:79:34:92:e9:e3:54:ba:43:e9:33:
         d2:27:f7:fc:fb:35:17:84:0e:8d:87:0e:d1:28:ed:70:f0:c3:
         69:33:d1:91:de:cd:c0:ad:78:aa:5d:53:cd:82:e0:21:54:f1:
         d7:bf:4c:da:31:67:85:c8:08:a7:d7:52:06:37:0e:a1:81:c5:
         90:9f:b2:cb:04:9d:8e:0a:7d:7e:d1:a6:ed:f4:14:e2:ad:1a:
         83:8a:c3:1c:68:1e:86:30:1d:90:bd:49:35:16:7b:14:15:d4:
         23:ad:a3:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXzF93hVeWqTDWCUAbqKACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOGJkODI0M2UyNTM2ZmFjY2IyNGZlYWQzYTIxNjJiOGM3
NjY2MjYwHhcNMjYwOTI1MDkwMTMwWhcNMjYwOTI2MDkwMTMwWjAzMTEwLwYDVQQD
Eyg1MzdhYzUyM2QyMzYxYzY1Y2QxNDJiNDVlMzIyNzBmYTc5NjViMDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2L7eqFWX8Cm4T2a8Vkw3gYRrejL
iryencuHkYf8lcZItY0/pjxaM6rgYKdv8pIhJHFb0cizUlh+2rPmjDQxg8ZHFL48
PVZsehQS8EaRiayAmaH/URqTFioW8+2ChCUnvwFOQGEXIcoYEmuj4QcA8V5M0aOk
XQeSkMGhbkXNAVE4ljCR5WydOCkylTjtrMKJUkOBQbfyBm/wfZI/ir4FO8p6WZTw
bf2XKxraNGVm+Q58kMgKnVXArY3zuYpK/1fbvbf/gjZsSRnNcmKkkSdX/qgZ1Wcq
vnBWmPtg7hxgiBtG1O7TPXFDO4DrZj/s7/yskAiBrlkuNEMVyGrALWi4IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFN6xSPSNhxlzRQrReMicPp5ZbBLMB8GA1UdIwQY
MBaAFBKL2CQ+JTb6zLJP6tOiFiuMdmYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW92WUpENGxOdnJNc2tfcTA2SVdLNHgyWmlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUt
ZTA0ZGFjNjFjZTlkLzEvRW92WUpENGxOdnJNc2tfcTA2SVdLNHgyWmlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80YjJjMjMtZjUzNS00YjZkLWE0NDUtZTA0ZGFjNjFjZTlk
LzEvRW92WUpENGxOdnJNc2tfcTA2SVdLNHgyWmlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwp4l3VL
D2LXT4vF5yGlmoi5tX6Rpuv0PikUQ8zWuakNi4xFybX0cl9sbn85GXySCg2hgxlm
ZXum1a/5otYzTbGjn/iq3uttyHdyht1jmprWd2y9frlbR+KPItDfVJW1LeYvQcau
SNjtCKTMimQUvrR0QEmwuz95AYTSEZ6dk7N7PIRkvqvWS29eqxDnIJOs2kc+0MpM
2Fh5NJLp41S6Q+kz0if3/Ps1F4QOjYcO0SjtcPDDaTPRkd7NwK14ql1TzYLgIVTx
179M2jFnhcgIp9dSBjcOoYHFkJ+yywSdjgp9ftGm7fQU4q0ag4rDHGgehjAdkL1J
NRZ7FBXUI62jkA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 14:28:46 2026 by rpki-client