Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
File:                     eJkRG_1wuRdE36Skn_kDs5HFwzI.mft (raw, json)
Hash identifier:          1FmLzhzzgpXToYUWpawPKSuqWBMbxKx9AFOj8Ea8u34=
Subject key identifier:   25:35:07:C8:8E:2B:4D:25:62:2B:2F:C5:5A:EF:02:C9:4A:52:9C:71
Authority key identifier: 78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32
Certificate issuer:       /CN=7899111bfd70b91744dfa4a49ff903b391c5c332
Certificate serial:       01A1070198F3C7BD63B9671AE6977925ED0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
Manifest number:          0215
Signing time:             Sun 04 Oct 2026 13:01:47 +0000
Manifest this update:     Sun 04 Oct 2026 13:01:47 +0000
Manifest next update:     Mon 05 Oct 2026 13:01:47 +0000
Files and hashes:         1: SKxfM8vS1jvBfGto0Ag-UhpANXY.roa (hash: WZ4CjS7lVOS4kiwT/i3rrLplH1i4HTFPFyS0A+9Y2ZQ=)
                          2: eJkRG_1wuRdE36Skn_kDs5HFwzI.crl (hash: GQKU2olPM8ingrTEKDGuOnOxpsY5wN7j4lXZFjOoGOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:01:98:f3:c7:bd:63:b9:67:1a:e6:97:79:25:ed:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7899111bfd70b91744dfa4a49ff903b391c5c332
        Validity
            Not Before: Oct  4 13:01:47 2026 GMT
            Not After : Oct  5 13:01:47 2026 GMT
        Subject: CN=253507c88e2b4d25622b2fc55aef02c94a529c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:63:1f:f1:8f:d3:7b:89:11:c1:1b:8d:ff:63:
                    65:52:67:b7:6f:9b:55:e6:5f:26:14:59:f2:54:5e:
                    6a:2b:9c:51:58:d0:9e:06:a2:ec:c6:b4:b6:97:6c:
                    13:ad:cf:12:ae:e9:dd:1b:33:ac:9f:ac:c5:8e:eb:
                    c9:8d:0e:c6:f6:56:7a:84:f0:9a:2a:6b:a3:42:c6:
                    76:3e:e4:8a:a9:c6:38:58:5e:a3:d6:14:5b:56:de:
                    7e:e1:bb:7e:47:e9:3b:e0:af:a1:d6:73:85:31:c9:
                    d2:12:d7:48:eb:95:47:78:b5:73:42:3e:03:94:bd:
                    4d:aa:85:bf:36:03:66:1b:e4:b6:5d:b8:42:89:08:
                    da:cb:89:6d:19:2c:6c:a4:be:2d:39:26:56:6c:4d:
                    a1:8e:43:d2:f5:ce:d8:85:9b:a2:7f:91:b4:23:9d:
                    50:ab:3d:46:7b:5d:25:3b:d0:a4:f6:52:82:4d:80:
                    ba:8c:b5:ad:33:cd:62:cb:26:10:3d:30:64:0c:87:
                    30:fd:e1:8d:00:99:4b:e5:ee:f3:27:ee:5c:1c:b8:
                    68:2e:7c:c1:55:a7:4f:4e:ed:18:42:5f:b9:93:d8:
                    b4:d6:2d:fc:01:8a:c9:07:f8:f6:76:19:d1:77:23:
                    81:1c:e9:31:9c:48:3b:15:ed:9e:1a:c3:8e:b1:08:
                    b6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:35:07:C8:8E:2B:4D:25:62:2B:2F:C5:5A:EF:02:C9:4A:52:9C:71
            X509v3 Authority Key Identifier:
                keyid:78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:80:ac:ab:2b:ed:a0:36:5e:a1:dd:cc:a7:95:52:80:19:8a:
         ce:58:f4:25:04:cf:3a:0b:6c:60:6c:c6:8b:9c:bd:ff:c3:12:
         64:bb:de:9c:62:7f:41:c8:6c:e1:e2:65:5c:72:6b:76:56:10:
         4c:63:71:bf:3b:08:60:0c:e7:bc:29:c9:9e:62:9b:2d:af:f4:
         f5:28:99:ee:17:df:7d:5b:19:70:ae:76:95:a7:6d:4f:56:0c:
         3d:c2:32:92:93:74:e4:fd:ab:6a:23:9e:46:ad:b4:bb:45:2b:
         c4:09:f7:02:6e:43:b4:34:8f:69:65:aa:77:d3:6a:2c:42:ad:
         c8:3e:89:43:5e:44:a0:61:36:c8:72:a8:90:27:7c:a1:35:ac:
         8f:6a:e8:fe:b1:15:7d:d0:0a:69:48:95:b2:38:f8:c7:ca:f4:
         92:43:a8:7c:43:22:e1:63:c2:fa:de:d0:79:bd:2d:27:c7:6a:
         7f:70:4c:0d:0c:6c:3c:bd:24:e9:7c:fe:57:68:c3:56:08:6f:
         81:90:b0:e3:a0:3f:1a:00:b5:ac:cc:b0:16:46:95:ed:a1:7f:
         e5:61:13:84:b2:d0:5e:ac:88:55:bc:f0:f4:4a:5b:29:99:7e:
         9e:1b:9e:62:ea:b1:64:3a:9f:5a:2c:67:c1:f1:b2:9b:bb:40:
         14:d6:61:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:04:45 2026 by rpki-client