Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
File:                     eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft (raw, json)
Hash identifier:          EFytGZGCR1NZg7a1qbecdnVCz7FKcGh/VlO8yZjZQ4s=
Subject key identifier:   4F:97:DB:24:D3:90:EF:79:DC:B9:3F:4B:BD:81:58:A0:6F:9A:C5:A2
Authority key identifier: 78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
Certificate issuer:       /CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Certificate serial:       01A1046E10CE0D8866DB1B515273DA28B163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
Manifest number:          0A63
Signing time:             Sun 04 Oct 2026 01:01:24 +0000
Manifest this update:     Sun 04 Oct 2026 01:01:24 +0000
Manifest next update:     Mon 05 Oct 2026 01:01:24 +0000
Files and hashes:         1: SEbMX_kWUsX_R1OTVRjFem2rhCY.roa (hash: XiNk8rorUk0GfMBPxUagzsQDmXdqYnZd77EYh58Os5s=)
                          2: eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl (hash: +MpeM3JbOGq10AuOeeQ3vVFz41ZYVdIOWYzkl6RXlvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:6e:10:ce:0d:88:66:db:1b:51:52:73:da:28:b1:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
        Validity
            Not Before: Oct  4 01:01:24 2026 GMT
            Not After : Oct  5 01:01:24 2026 GMT
        Subject: CN=4f97db24d390ef79dcb93f4bbd8158a06f9ac5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:ad:06:f8:3a:d9:09:12:a1:ea:6c:e2:3f:
                    c0:c5:27:ab:0b:db:38:04:6c:22:f1:a3:be:5c:47:
                    46:bd:ea:40:85:34:29:81:f5:89:36:75:13:a4:86:
                    40:b4:ed:0d:a8:21:08:77:72:a4:ed:fc:0c:d2:a8:
                    51:9b:db:89:75:64:18:8d:31:07:ab:f9:ee:1d:1b:
                    a8:8a:0d:63:cb:93:7e:90:ce:fe:51:78:c9:d1:c2:
                    76:76:18:5d:2e:55:d8:45:4a:5c:8c:8b:69:fc:fc:
                    06:96:87:ed:41:eb:57:80:77:d3:67:ec:cc:8e:86:
                    c7:32:5b:a2:84:6a:80:30:30:4c:6b:95:66:27:e8:
                    6f:5c:ed:ef:3e:f7:f6:21:8a:bc:b7:b7:ae:9a:f2:
                    0b:3b:d7:e3:78:f0:a2:e8:24:3a:6d:e5:7c:ee:ec:
                    16:76:fd:94:07:64:c5:46:b8:6e:db:ad:2e:09:c0:
                    ec:47:08:43:71:7f:94:26:8e:53:ce:1e:0e:69:1f:
                    eb:a3:14:7a:b3:8d:99:ac:3e:0a:cb:14:93:b4:c6:
                    a1:86:b6:9e:65:7d:ff:e4:f0:ab:bb:66:48:48:4f:
                    b0:bc:ca:df:fe:bb:03:17:f5:ac:8f:bd:64:95:72:
                    59:6f:63:da:72:95:a4:b1:b7:da:a2:1f:04:ca:14:
                    b5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:97:DB:24:D3:90:EF:79:DC:B9:3F:4B:BD:81:58:A0:6F:9A:C5:A2
            X509v3 Authority Key Identifier:
                keyid:78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:74:36:48:67:7a:6e:3f:83:c5:48:46:9c:7f:ae:ec:90:b6:
         9a:3c:74:0c:77:74:58:ae:55:75:15:3f:e8:f3:44:26:90:57:
         40:62:78:02:c8:2d:14:01:fc:86:b4:bd:fa:1e:14:46:ef:4e:
         83:d0:a4:79:ee:0a:1e:6d:7b:34:69:b7:1d:20:b2:38:31:f5:
         33:a0:e0:44:fc:fd:ff:d4:14:f0:b4:05:26:ac:b0:c8:bf:1f:
         78:a8:bf:e7:bb:43:98:2c:45:c3:ea:36:a9:d3:68:e9:87:45:
         84:5e:95:fa:dd:d0:83:f1:75:dd:aa:51:f8:c0:ba:30:77:f9:
         56:0b:aa:4b:2e:47:d5:4e:93:bb:4a:45:68:1c:cb:3b:94:ba:
         f8:c2:71:bd:5d:05:63:b5:8d:65:eb:1e:cc:f0:35:79:e8:a1:
         7f:ce:e6:e5:03:a1:b1:8e:46:c4:b7:52:47:64:de:e3:67:07:
         76:b2:a5:f0:a7:2d:2c:7e:50:98:a7:b9:f4:5a:37:30:b5:e4:
         04:00:b5:cf:c3:ac:be:a9:ce:f9:00:7c:86:00:df:41:1b:1e:
         a1:68:38:ed:98:99:d5:65:79:b7:27:b0:c7:5a:50:0d:c4:de:
         84:67:67:dd:3f:21:fe:04:00:06:18:3f:ab:48:ec:6c:27:93:
         b9:f3:f3:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEEbhDODYhm2xtRUnPaKLFjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YjBiMTlkNTBkNjFhN2UzMzNmM2QzMDBmMTE0OWNlZmRl
N2I2NGYwHhcNMjYxMDA0MDEwMTI0WhcNMjYxMDA1MDEwMTI0WjAzMTEwLwYDVQQD
Eyg0Zjk3ZGIyNGQzOTBlZjc5ZGNiOTNmNGJiZDgxNThhMDZmOWFjNWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbetBvg62QkSoeps4j/AxSerC9s4
BGwi8aO+XEdGvepAhTQpgfWJNnUTpIZAtO0NqCEId3Kk7fwM0qhRm9uJdWQYjTEH
q/nuHRuoig1jy5N+kM7+UXjJ0cJ2dhhdLlXYRUpcjItp/PwGloftQetXgHfTZ+zM
jobHMluihGqAMDBMa5VmJ+hvXO3vPvf2IYq8t7eumvILO9fjePCi6CQ6beV87uwW
dv2UB2TFRrhu260uCcDsRwhDcX+UJo5Tzh4OaR/roxR6s42ZrD4KyxSTtMahhrae
ZX3/5PCru2ZISE+wvMrf/rsDF/Wsj71klXJZb2PacpWksbfaoh8EyhS1pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+X2yTTkO953Lk/S72BWKBvmsWiMB8GA1UdIwQY
MBaAFHiwsZ1Q1hp+Mz89MA8RSc7957ZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lOGNmYjAtOTU2OC00MTU3LWI4MDIt
ZjBlZDlhMmFiNjU0LzEvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lOGNmYjAtOTU2OC00MTU3LWI4MDItZjBlZDlhMmFiNjU0
LzEvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3Q2SGd6
bj+DxUhGnH+u7JC2mjx0DHd0WK5VdRU/6PNEJpBXQGJ4AsgtFAH8hrS9+h4URu9O
g9Ckee4KHm17NGm3HSCyODH1M6DgRPz9/9QU8LQFJqywyL8feKi/57tDmCxFw+o2
qdNo6YdFhF6V+t3Qg/F13apR+MC6MHf5VguqSy5H1U6Tu0pFaBzLO5S6+MJxvV0F
Y7WNZesezPA1eeihf87m5QOhsY5GxLdSR2Te42cHdrKl8KctLH5QmKe59Fo3MLXk
BAC1z8OsvqnO+QB8hgDfQRseoWg47ZiZ1WV5tyewx1pQDcTehGdn3T8h/gQABhg/
q0jsbCeTufPzNQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 07:46:05 2026 by rpki-client