Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.mft
File:                     EiYCPefEJ0FZDyyXFAZwkVhSNm4.mft (raw, json)
Hash identifier:          Gp2oZypIgVkS5g+6Zto8GaAtZK9DIyR5MtmtcW4idro=
Subject key identifier:   B8:89:7F:44:54:54:E3:C9:4E:55:D9:05:76:4B:0C:C3:2A:0E:5E:B0
Authority key identifier: 12:26:02:3D:E7:C4:27:41:59:0F:2C:97:14:06:70:91:58:52:36:6E
Certificate issuer:       /CN=1226023de7c42741590f2c97140670915852366e
Certificate serial:       01A0D56FD236432247CC65B73EF85E0FDA9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EiYCPefEJ0FZDyyXFAZwkVhSNm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.mft
Manifest number:          D9
Signing time:             Thu 24 Sep 2026 22:01:10 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:10 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:10 +0000
Files and hashes:         1: EiYCPefEJ0FZDyyXFAZwkVhSNm4.crl (hash: IsOeVBzmjHXUMLNk5fbYASPH6qw0iAtpBqVjrwQjP98=)
                          2: mJVNX_CVE3Scl_hPiobgJUhSU1s.roa (hash: Cir8Mch33lIGR800fZufkQADOlq/aWOCF2L+npd2Dzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EiYCPefEJ0FZDyyXFAZwkVhSNm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:6f:d2:36:43:22:47:cc:65:b7:3e:f8:5e:0f:da:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1226023de7c42741590f2c97140670915852366e
        Validity
            Not Before: Sep 24 22:01:10 2026 GMT
            Not After : Sep 25 22:01:10 2026 GMT
        Subject: CN=b8897f445454e3c94e55d905764b0cc32a0e5eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:55:9b:85:1e:57:79:19:b6:cf:c8:5e:45:
                    f6:97:ad:08:24:b4:78:c2:08:32:7d:c8:fa:2f:97:
                    a9:99:fb:c0:5c:81:96:bc:41:e9:d2:b7:ef:ff:fa:
                    0f:7b:84:65:2c:b5:54:08:14:30:09:ce:0b:05:99:
                    88:88:a3:73:12:80:cf:80:b4:0d:5d:5a:6a:6c:78:
                    78:b5:1d:61:dd:9a:4b:69:4f:ea:16:1b:be:3f:3a:
                    c6:15:78:5e:3e:73:c2:e5:0a:43:5d:5c:44:48:25:
                    28:6c:16:cb:af:cd:f0:f4:fc:bb:04:aa:75:8a:0c:
                    6a:b8:b5:70:10:95:9d:13:7b:76:99:2a:c4:47:f5:
                    0e:e9:43:91:e0:f6:fe:a5:ea:af:b2:cf:4c:57:9b:
                    ea:54:db:9c:53:e3:d8:f2:ad:0e:c9:08:43:dd:c8:
                    75:cb:32:a6:56:e3:b9:75:99:b1:54:1b:73:26:b2:
                    bf:0b:54:c1:02:5b:2c:26:25:8c:80:d1:4b:68:03:
                    8a:fc:e4:12:c1:14:e3:6b:82:4f:00:49:e7:96:d9:
                    db:01:b8:1d:c7:27:ce:16:9d:0a:39:60:78:08:b0:
                    8b:d9:4b:7d:59:ad:a3:c9:ad:55:b9:b3:8d:69:7d:
                    be:c4:bb:bc:3f:d3:63:5e:e9:3f:af:9a:00:30:ca:
                    0f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:89:7F:44:54:54:E3:C9:4E:55:D9:05:76:4B:0C:C3:2A:0E:5E:B0
            X509v3 Authority Key Identifier:
                keyid:12:26:02:3D:E7:C4:27:41:59:0F:2C:97:14:06:70:91:58:52:36:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiYCPefEJ0FZDyyXFAZwkVhSNm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b5:15:bd:49:d8:43:ee:84:1a:ac:5c:51:46:c7:14:ff:8b:
         53:23:41:13:d5:25:04:1a:3b:bd:93:d5:aa:75:a3:a5:a3:a9:
         09:06:e0:c6:c6:c3:98:9b:c6:ec:fd:da:0a:26:d3:f1:3f:62:
         8c:d3:88:97:ae:9d:b1:ce:0c:6e:33:fb:15:3c:39:8a:7b:6e:
         02:81:a9:58:02:39:c8:a7:d8:05:a4:f7:7e:76:91:8f:8f:9d:
         c3:1d:f3:27:9b:18:82:d0:be:26:dd:b8:45:a7:bd:47:a4:6f:
         74:a7:33:1b:df:46:36:fd:da:70:53:a3:e0:66:91:6a:ca:45:
         f3:8c:0c:47:58:b9:bc:94:cc:e7:f1:e7:1a:19:a2:fe:10:51:
         72:43:73:e3:3b:39:e9:41:a5:31:8a:b1:ad:c1:98:4e:fc:90:
         22:0d:74:a5:d6:5c:f9:5c:fa:fa:f3:a0:56:09:37:67:16:30:
         fa:4d:fe:c1:2c:cb:6e:2d:0b:3e:d1:12:b0:f8:8a:db:70:a0:
         7b:ad:d2:32:df:f9:f5:a9:01:cc:52:d4:de:45:b0:52:30:16:
         3f:dd:39:3c:36:c9:b6:f8:6a:46:26:42:74:2d:e2:bd:de:69:
         b9:75:80:3d:57:fe:93:6b:a6:da:8c:b3:1d:d4:49:73:3e:4d:
         16:ee:f2:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVb9I2QyJHzGW3PvheD9qcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMjYwMjNkZTdjNDI3NDE1OTBmMmM5NzE0MDY3MDkxNTg1
MjM2NmUwHhcNMjYwOTI0MjIwMTEwWhcNMjYwOTI1MjIwMTEwWjAzMTEwLwYDVQQD
EyhiODg5N2Y0NDU0NTRlM2M5NGU1NWQ5MDU3NjRiMGNjMzJhMGU1ZWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc1Vm4UeV3kZts/IXkX2l60IJLR4
wggyfcj6L5epmfvAXIGWvEHp0rfv//oPe4RlLLVUCBQwCc4LBZmIiKNzEoDPgLQN
XVpqbHh4tR1h3ZpLaU/qFhu+PzrGFXhePnPC5QpDXVxESCUobBbLr83w9Py7BKp1
igxquLVwEJWdE3t2mSrER/UO6UOR4Pb+peqvss9MV5vqVNucU+PY8q0OyQhD3ch1
yzKmVuO5dZmxVBtzJrK/C1TBAlssJiWMgNFLaAOK/OQSwRTja4JPAEnnltnbAbgd
xyfOFp0KOWB4CLCL2Ut9Wa2jya1VubONaX2+xLu8P9NjXuk/r5oAMMoPwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiJf0RUVOPJTlXZBXZLDMMqDl6wMB8GA1UdIwQY
MBaAFBImAj3nxCdBWQ8slxQGcJFYUjZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlZQ1BlZkVKMEZaRHl5WEZBWndrVmhTTm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wZWFiYmItNWE2Yi00MzQwLWIyZDMt
YmZjNzJmN2Y0MDlmLzEvRWlZQ1BlZkVKMEZaRHl5WEZBWndrVmhTTm00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8wZWFiYmItNWE2Yi00MzQwLWIyZDMtYmZjNzJmN2Y0MDlm
LzEvRWlZQ1BlZkVKMEZaRHl5WEZBWndrVmhTTm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLUVvUnY
Q+6EGqxcUUbHFP+LUyNBE9UlBBo7vZPVqnWjpaOpCQbgxsbDmJvG7P3aCibT8T9i
jNOIl66dsc4MbjP7FTw5intuAoGpWAI5yKfYBaT3fnaRj4+dwx3zJ5sYgtC+Jt24
Rae9R6RvdKczG99GNv3acFOj4GaRaspF84wMR1i5vJTM5/HnGhmi/hBRckNz4zs5
6UGlMYqxrcGYTvyQIg10pdZc+Vz6+vOgVgk3ZxYw+k3+wSzLbi0LPtESsPiK23Cg
e63SMt/59akBzFLU3kWwUjAWP905PDbJtvhqRiZCdC3ivd5puXWAPVf+k2um2oyz
HdRJcz5NFu7y4A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:43:43 2026 by rpki-client