Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
File:                     eXpIzBPiAOLT84r4MxjRvK9vYzE.mft (raw, json)
Hash identifier:          NkiwaiwmxfpfuWxNy66toC+aeNprRIW0tG7mkPi+ss8=
Subject key identifier:   27:22:88:7A:C8:FE:E9:E2:33:1B:21:10:82:D8:D8:64:25:5D:E8:83
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Certificate issuer:       /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial:       01A1065C53F2534718C9B4F1EA9D2D3EC4B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
Manifest number:          1A8C
Signing time:             Sun 04 Oct 2026 10:01:16 +0000
Manifest this update:     Sun 04 Oct 2026 10:01:16 +0000
Manifest next update:     Mon 05 Oct 2026 10:01:16 +0000
Files and hashes:         1: 1-E7nKdbSLj90sJYSF-rtPPWicJo.roa (hash: OLXm33BZRZAegBXkAQ3qDZFLZUsJCzl2SnjPvzxon3E=)
                          2: CM5wA7_Mj4XNK2JxKM8h4YQ6N-c.roa (hash: vqRJimrGP27MPdv4zjttCm0+Djwer+Zrgp7ip8OhqNI=)
                          3: aXZJm2DRkarUBrcUWpvt5lbMMOs.roa (hash: ui+2DkUuL1ctf7u/JTyn3ysys3DhDdpt7LeK9bC8l08=)
                          4: eXpIzBPiAOLT84r4MxjRvK9vYzE.crl (hash: HSIew7V0Lg6kKUDWQ4Afq7lmISwV9CGADtAms5UOyf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 10:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:5c:53:f2:53:47:18:c9:b4:f1:ea:9d:2d:3e:c4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
        Validity
            Not Before: Oct  4 10:01:16 2026 GMT
            Not After : Oct  5 10:01:16 2026 GMT
        Subject: CN=2722887ac8fee9e2331b211082d8d864255de883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:ab:1a:4b:88:1a:cf:6f:51:bf:db:6f:78:
                    f6:2a:ac:39:41:bd:4d:61:17:de:d4:db:f3:e7:7b:
                    2c:32:db:8c:fb:44:06:81:c5:c6:ba:87:72:99:85:
                    78:84:b8:ce:e6:85:d1:8a:1e:c7:03:98:c1:80:de:
                    87:34:22:14:0a:cd:9e:48:cc:e9:30:df:2f:08:1a:
                    95:35:df:28:0b:f2:b1:97:28:b0:f1:82:ee:3d:cb:
                    5a:14:1d:68:25:f0:26:75:26:48:ad:33:36:4e:80:
                    14:f0:a8:78:16:35:fb:2a:b5:67:b7:60:90:c8:fa:
                    77:d2:39:e5:11:88:35:25:13:1d:11:eb:31:6d:59:
                    cb:19:8b:ff:29:6e:bf:51:1f:3f:00:f6:d3:94:7b:
                    b9:ce:b9:fb:f5:8c:c5:f8:a1:0f:1d:08:79:36:ce:
                    c1:f7:2a:28:e2:79:cf:12:ff:7e:7c:81:c8:87:ec:
                    54:08:96:13:3e:f9:45:33:b1:23:25:8b:58:5c:ab:
                    f4:f1:59:f7:45:59:ac:73:2b:93:8f:ac:12:30:7b:
                    2d:ce:2b:81:d3:d5:31:17:8c:5b:fb:12:3e:1d:81:
                    35:75:0e:0a:36:87:ee:b9:64:2c:23:4d:f1:66:6c:
                    c7:9d:5d:45:3a:80:43:36:fd:36:79:6f:3a:2d:86:
                    f6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:22:88:7A:C8:FE:E9:E2:33:1B:21:10:82:D8:D8:64:25:5D:E8:83
            X509v3 Authority Key Identifier:
                keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:b8:65:f4:93:db:e0:81:d3:b9:fe:1b:36:a4:be:0d:08:27:
         1c:e3:d1:7c:6a:a9:ae:94:c5:c0:89:44:c8:50:79:5d:43:89:
         a7:90:9e:6e:40:69:fc:32:ae:2f:f6:64:77:5b:10:ec:4f:1b:
         5f:69:7f:66:2d:69:63:7f:8d:11:d3:a8:63:ca:4e:f8:11:5e:
         04:c4:7c:62:6f:bc:20:96:07:ee:39:8e:fe:f4:f5:43:04:41:
         ca:f8:fd:2a:98:44:5b:4a:d5:cc:9b:55:f8:79:a4:89:da:18:
         21:b5:75:c2:3d:5d:e6:db:24:aa:37:56:71:cb:36:9a:50:3e:
         fb:8d:b0:d5:40:81:50:13:23:18:3f:f9:5c:cd:7c:b1:06:6f:
         52:17:09:c6:00:5a:ff:ce:66:33:58:b8:58:af:54:bc:ed:ec:
         03:b8:49:85:c7:0b:eb:7d:c8:c1:dc:b8:86:6c:f4:16:ce:f2:
         a2:c3:fd:eb:19:16:95:82:2e:db:dc:10:c8:3b:49:b2:39:0d:
         61:61:71:1d:27:a4:af:20:af:80:6b:a8:ab:1e:fe:fa:ca:03:
         8e:72:98:2c:74:03:6b:01:40:5c:56:2e:63:f9:14:1a:37:64:
         ee:1d:3a:b6:c2:a4:6c:9f:bf:9a:ec:6d:da:ed:c9:f8:1b:44:
         f8:5b:af:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:45:08 2026 by rpki-client