Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
File:                     EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft (raw, json)
Hash identifier:          omjXviXJzIsutTBGPc+1W4oBT6BOkYIcD8TcIohOA9s=
Subject key identifier:   CC:71:65:53:64:9D:C6:87:E4:C0:0B:51:F9:B7:48:FF:22:E9:6D:DC
Authority key identifier: 11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55
Certificate issuer:       /CN=11e512976b91a2967ebce10ed4052ece12b14155
Certificate serial:       01A0CFDB4062F7807FA00CEC458BDD08C363
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
Manifest number:          0DCA
Signing time:             Wed 23 Sep 2026 20:00:47 +0000
Manifest this update:     Wed 23 Sep 2026 20:00:47 +0000
Manifest next update:     Thu 24 Sep 2026 20:00:47 +0000
Files and hashes:         1: C_swQ1amU9xoTLneSqK5rEPwSHY.roa (hash: kd5UBDyTUyD8YdrwighS1kP5DDkufkXNg0jZY2oswQA=)
                          2: EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl (hash: 10pkB6Eybh4lZlq8OAKmmggok6JkV6eQvvq5CiVvTLM=)
                          3: FrHMIqU1nyql5fH458yK8iNimJU.roa (hash: HPL1MkQufVuqDT5rCNUypCZgqKjP0W6MbJyxk8JQnmg=)
                          4: winuxMCIMGCWTsiZdugMqwv5WZg.roa (hash: TKNpHnOSd+fkBMQkgcz+gS3AAX2dTYjFIei9VWwZPxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:db:40:62:f7:80:7f:a0:0c:ec:45:8b:dd:08:c3:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e512976b91a2967ebce10ed4052ece12b14155
        Validity
            Not Before: Sep 23 20:00:47 2026 GMT
            Not After : Sep 24 20:00:47 2026 GMT
        Subject: CN=cc716553649dc687e4c00b51f9b748ff22e96ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:82:b2:f0:ec:08:4d:41:2c:5a:20:77:4e:86:
                    aa:eb:5b:79:3f:b7:34:de:92:9c:70:37:f9:9c:e5:
                    47:b0:83:2e:15:73:7e:d8:c8:f9:06:97:e0:85:73:
                    09:3b:60:58:f9:7f:df:8f:6f:c1:c6:ea:be:10:4a:
                    62:dd:21:60:d5:e0:8f:b2:e3:a5:8f:1e:af:1a:63:
                    c4:4b:ba:7c:51:d7:51:4f:0d:20:e6:73:02:9d:b2:
                    bd:c0:be:c8:5f:93:d4:d3:b6:37:ec:0d:2d:7d:3a:
                    5a:50:af:89:a8:17:a3:96:95:8a:4f:b8:01:d8:c8:
                    01:2e:b8:ab:18:4d:f4:3e:66:50:8b:f0:24:c7:38:
                    21:42:86:3b:8b:05:73:00:ae:75:02:dd:6f:b2:e1:
                    f9:ee:7f:c1:7f:76:37:e7:61:6f:01:a4:9c:54:37:
                    a2:21:a9:0d:c9:92:92:c1:1c:f2:c5:42:27:40:9c:
                    13:a2:cf:13:c6:fc:a2:51:a2:24:f8:44:7c:98:b0:
                    97:e8:96:aa:ed:14:ce:42:73:23:ae:3e:49:ca:36:
                    79:19:c0:ea:79:de:39:f2:72:34:88:c0:8d:5f:cd:
                    c2:bd:76:04:54:d8:23:40:b6:6e:36:4c:27:d3:79:
                    81:7d:1a:32:1e:9e:a2:a9:d7:8a:47:42:3f:e6:a6:
                    92:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:71:65:53:64:9D:C6:87:E4:C0:0B:51:F9:B7:48:FF:22:E9:6D:DC
            X509v3 Authority Key Identifier:
                keyid:11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:4a:62:f0:17:85:a4:26:7b:9a:33:7c:11:fd:02:83:f1:b7:
         77:20:cb:7a:05:f0:52:f3:46:b2:34:59:6d:99:a1:fe:1c:51:
         19:df:07:0c:9e:4d:1d:23:e8:a7:ef:60:ff:d8:5c:7a:e7:66:
         44:67:19:94:0d:90:67:96:fe:9b:85:af:6e:ce:05:5b:ca:65:
         64:9e:24:f6:dd:3e:ff:03:0b:c7:48:0f:06:42:57:df:5e:f5:
         3a:52:ee:68:88:e6:74:aa:a7:57:a8:49:be:06:b5:49:ba:b4:
         c0:d4:0a:47:dc:20:9f:f3:ee:c1:f1:2d:15:59:49:92:16:36:
         8b:a1:02:10:b5:70:de:6e:68:69:6d:0d:69:f0:e2:72:e8:90:
         ce:8f:be:c0:16:55:60:5a:be:96:bd:c4:92:70:a8:d6:6a:d1:
         dd:f6:cc:d3:0c:17:cd:64:c7:1c:9f:0d:56:b7:48:f5:e6:b9:
         58:cf:62:b3:18:6e:ea:73:09:23:78:2c:77:0c:ed:05:59:20:
         41:5e:4d:12:23:ad:e0:5b:76:e8:19:0f:c5:ab:55:34:7b:04:
         cd:1d:0c:42:06:f7:d1:05:59:da:75:c0:e0:06:f5:4a:48:37:
         66:a9:d7:a7:16:6d:9a:40:fd:02:1d:55:bc:92:0d:e7:e0:29:
         37:32:a7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:24:58 2026 by rpki-client