Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File:                     eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier:          g2mV0XzXu2z0UYei7vkbfEAITn7DEQmwiDNPwY+ctBs=
Subject key identifier:   77:DB:F8:8E:CA:CD:7F:0A:45:F6:74:A8:F8:0F:4D:6B:52:9F:8A:FD
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer:       /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial:       01A133A2F51DF1A6D858D112CE55F29E75B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number:          107B
Signing time:             Tue 13 Oct 2026 05:01:19 +0000
Manifest this update:     Tue 13 Oct 2026 05:01:19 +0000
Manifest next update:     Wed 14 Oct 2026 05:01:19 +0000
Files and hashes:         1: 0YhVfBsZbIu7A5iYA94enjAmzkk.roa (hash: HsOjFTzanM+rOeHfu6ck2x7MS7PSUK04NQ5MvXhA+ZA=)
                          2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: rZzQOSxIaGy8ykMI0mF1uJMuyTQi8mdEi/mKI+iUkwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 05:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:33:a2:f5:1d:f1:a6:d8:58:d1:12:ce:55:f2:9e:75:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
        Validity
            Not Before: Oct 13 05:01:19 2026 GMT
            Not After : Oct 14 05:01:19 2026 GMT
        Subject: CN=77dbf88ecacd7f0a45f674a8f80f4d6b529f8afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e8:c8:8b:54:a1:73:6d:b5:b8:c2:12:f5:a0:
                    37:8e:c2:04:78:7b:af:7c:e7:a8:2c:3d:e3:b3:84:
                    ad:a8:7c:22:b9:55:fa:4b:d5:33:48:95:9f:1f:3c:
                    8e:da:44:63:66:5c:68:a1:36:a6:2e:23:e8:ad:6a:
                    0e:7d:e3:bc:03:88:9c:ca:85:13:3c:0a:12:b1:df:
                    fe:e8:8f:ca:61:e6:14:09:ee:86:34:5a:6d:57:38:
                    cd:7f:38:56:ad:59:78:7c:94:ac:92:56:8c:fc:a2:
                    e3:ab:9f:49:31:25:9d:4f:e4:cf:1b:db:7d:c0:b4:
                    a3:91:c4:2e:de:64:03:b7:5e:a9:5a:86:2c:eb:ab:
                    83:c1:13:8a:51:c3:99:a8:a5:f4:a8:06:42:ec:83:
                    fe:9b:5a:7e:57:b3:b5:97:27:79:59:f4:9a:aa:98:
                    f5:93:63:eb:53:4d:9c:cd:cd:72:c0:f2:3e:41:4d:
                    41:ed:11:20:71:0f:d8:c4:1d:22:fd:e5:ce:6e:86:
                    22:16:28:aa:e2:e1:02:fc:f2:26:5a:1e:aa:d0:82:
                    fd:08:9d:76:5e:bd:c9:c0:ce:5f:d8:7a:5c:fc:3d:
                    e7:07:22:82:37:8c:83:a0:97:17:90:8d:43:bb:71:
                    e5:1a:1c:c3:6b:c0:ba:1f:1b:cd:1b:8e:3c:2f:79:
                    58:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DB:F8:8E:CA:CD:7F:0A:45:F6:74:A8:F8:0F:4D:6B:52:9F:8A:FD
            X509v3 Authority Key Identifier:
                keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:47:34:43:fb:64:a8:89:f4:c1:4d:87:1d:0b:fb:e2:3f:b9:
         7c:5b:dd:4a:02:60:de:b6:f0:e9:fc:d6:f2:94:30:49:09:ec:
         da:eb:d1:84:6a:c6:a1:24:eb:d2:c1:94:8c:3e:3c:a7:80:35:
         bb:88:0d:30:19:80:da:a2:f4:bb:d9:e6:ce:a8:5b:ab:e2:93:
         67:c0:bd:25:9f:6e:35:48:21:7d:59:0c:2a:85:13:a9:64:40:
         e7:bc:17:b3:72:28:53:e7:df:5b:5c:e2:a2:00:e6:00:c7:f9:
         24:b3:c8:d1:01:30:8b:16:20:37:57:44:52:99:26:23:ea:75:
         92:34:c2:0a:95:f0:6c:6b:ee:ca:eb:60:53:2b:47:99:53:2b:
         1a:63:5f:9a:34:74:2a:c0:0a:c6:bd:a4:db:08:73:25:be:69:
         5f:aa:7c:ce:11:4a:ae:13:73:71:d4:28:7e:7c:cd:72:b7:54:
         08:3c:b1:b3:8d:6c:d3:b8:82:69:59:92:d1:31:88:99:df:f9:
         5d:e1:a3:2a:01:0e:d4:7e:7f:e3:46:d1:55:79:bb:8a:dc:01:
         8b:2a:b2:79:6b:37:8d:13:fc:27:e2:97:49:97:3d:7e:36:8f:
         69:5d:83:4f:9a:60:16:e6:ec:fe:a6:d9:ca:e6:db:7f:fd:99:
         5f:60:04:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:59:24 2026 by rpki-client