Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
File:                     egz9WlEBPl_WyvgJh4BHpgXunW0.mft (raw, json)
Hash identifier:          Ewbd2ZCvzDgtED4rsKK/ZlQMSpyuIXK57Hiul/wcxoM=
Subject key identifier:   AF:59:FA:29:3A:82:BD:13:F8:24:9C:C8:ED:92:CC:61:7E:3D:56:A8
Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
Certificate issuer:       /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Certificate serial:       01A0E13D0B3375E94F7887DCBF6CA0080584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
Manifest number:          1A77
Signing time:             Sun 27 Sep 2026 05:01:08 +0000
Manifest this update:     Sun 27 Sep 2026 05:01:08 +0000
Manifest next update:     Mon 28 Sep 2026 05:01:08 +0000
Files and hashes:         1: YzKdAdfCvvdPIE3XweETh9g_RFE.roa (hash: EgUeeu3aDHtFIVk2MBTs7H5c0TYshnD2NTKZbs5UU/Q=)
                          2: egz9WlEBPl_WyvgJh4BHpgXunW0.crl (hash: c0lrM7tm1rntsCn8tpLiXg5dPwNLuxt+rCXpM/7rP34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:3d:0b:33:75:e9:4f:78:87:dc:bf:6c:a0:08:05:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
        Validity
            Not Before: Sep 27 05:01:08 2026 GMT
            Not After : Sep 28 05:01:08 2026 GMT
        Subject: CN=af59fa293a82bd13f8249cc8ed92cc617e3d56a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:68:ab:92:8f:ed:e4:b9:88:eb:71:57:e2:
                    78:41:78:10:57:32:d7:67:9c:9e:91:60:57:93:6c:
                    8a:22:20:fc:d7:15:7c:ec:05:18:79:d8:3f:fc:95:
                    3a:f1:b6:87:96:14:34:38:81:34:db:e0:82:6d:34:
                    3d:ad:f1:d4:0f:52:b4:25:c9:52:49:dc:79:33:f5:
                    73:dc:4a:d9:71:91:bc:52:f6:ed:d8:e6:6f:98:68:
                    b0:1a:d7:12:86:9e:be:f1:c5:fa:90:e4:43:74:f2:
                    9f:9b:04:05:bd:59:ba:49:02:90:62:77:26:22:84:
                    92:0d:be:1a:fb:43:d9:97:04:ec:f6:ab:61:73:bf:
                    a9:94:af:74:db:3d:b1:a3:84:4d:2e:57:9b:35:93:
                    23:8c:89:4e:92:1e:ca:62:86:69:62:61:61:0e:54:
                    52:ac:78:7b:84:5c:ab:c1:24:37:13:62:2c:b4:c3:
                    cf:05:ad:0f:a3:65:2f:e9:91:6b:e3:a4:5a:6e:7d:
                    be:fb:89:7c:67:14:cb:d2:4d:29:0e:37:be:08:9f:
                    4f:41:70:d7:1a:96:da:e9:23:a1:4b:ff:37:78:4b:
                    d5:b0:73:a9:2e:22:e5:1d:0e:b1:00:b5:5b:ab:96:
                    e0:42:93:0f:a0:c8:a5:df:36:fc:df:78:22:e0:07:
                    03:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:59:FA:29:3A:82:BD:13:F8:24:9C:C8:ED:92:CC:61:7E:3D:56:A8
            X509v3 Authority Key Identifier:
                keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e9:e8:12:c5:f9:3e:df:65:b6:c5:c6:d8:1d:97:d6:45:14:
         57:08:3e:e1:50:10:48:f0:91:1c:02:09:e5:c3:4a:99:94:af:
         0e:0c:f0:83:8e:a2:60:c6:ca:98:87:41:1c:df:86:08:89:7f:
         fc:89:f4:57:0d:16:00:b4:85:24:5d:59:7b:2f:5a:9f:93:97:
         51:f7:61:73:a7:c6:aa:3e:3a:b9:2a:86:ef:f6:a1:cd:bd:db:
         a4:7b:6e:3f:b2:f3:71:77:ee:c4:24:fc:a1:23:9d:8c:df:2a:
         c5:74:b1:b0:d1:1f:52:4a:9a:6d:96:c0:ab:fb:33:46:0b:65:
         5c:d4:75:d2:73:95:cc:e0:e8:77:6b:3c:49:e1:a5:f6:ba:25:
         97:24:89:f3:1b:ab:d5:b3:61:c1:f7:85:68:65:ae:f5:bc:ec:
         f8:9d:a9:f4:16:62:56:f1:91:a7:59:1f:fe:63:c0:b2:34:8f:
         74:a0:5d:80:04:48:ab:b0:3c:89:09:74:50:bc:22:6f:59:23:
         64:04:0b:c3:57:81:5f:f2:75:2e:40:22:b9:5e:42:f3:cf:67:
         61:b6:0d:d3:5f:b7:e2:ed:b8:a0:2d:c0:61:56:e8:f6:51:bc:
         56:92:8f:59:0b:78:20:b3:f5:41:67:25:da:fc:01:e1:08:a7:
         52:5f:b5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:32:02 2026 by rpki-client