Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
File:                     e71RJyBktjssZjwClroR216iOMA.mft (raw, json)
Hash identifier:          +CPIGWIDhxcCUvwXJXuKRGf/3SwTun+k5wJ3/lQCtVY=
Subject key identifier:   B2:D1:9C:95:15:CB:10:DA:EA:1A:A8:61:AD:3F:1C:04:AB:A3:24:89
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Certificate issuer:       /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial:       01A0D9F191C29218826C99B8978B3A0E2CFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
Manifest number:          1A7B
Signing time:             Fri 25 Sep 2026 19:01:22 +0000
Manifest this update:     Fri 25 Sep 2026 19:01:22 +0000
Manifest next update:     Sat 26 Sep 2026 19:01:22 +0000
Files and hashes:         1: I2q3ifUktwdWLFVk814q3GS4fWI.roa (hash: IGOlAHTyV8D50YrVyxyBur7sPUQLiEB5K2gkPY8V5KM=)
                          2: OxGf8ePayJwU09gGZnySyoA8iyo.roa (hash: yf38tU7zRVwzX10bjvQIj5OiLgW6pM5L8OevnEJQOXA=)
                          3: RVARB5gmjTf2RYyiXEPOpOXxCDs.roa (hash: K6dew7DJ4uzjFiJigW12hfzcSGSynvBz3c731CNk5sM=)
                          4: Tn1byzDG3LC_-4W5cdtymqE-7H8.roa (hash: Lg0SZJ99rab4Y0en6j2xpoNxdMlIboyOteh0f0kPzyU=)
                          5: YueSZbKV98CmzxsiRfWA83jDNEs.roa (hash: pu97V45FIqBvOF8XHHzv+H1DedOkRlyDXAiuHDoYLCw=)
                          6: cGSyEqlaNLY1LymfACjH5x7qwiY.roa (hash: PPsjXk3d3JTucJBSEkB9JMB6kS1QWHypumoBDsX0uds=)
                          7: e71RJyBktjssZjwClroR216iOMA.crl (hash: EOyadAwVzsafZBZo2awcfRKSzynSwKsMqIJAKpQRl/k=)
                          8: gne3kq1o-I5H5isdKeVnYHfgRM8.roa (hash: OHMcztr6MiSOs8pzNesHKIFuwuf6t31tDx5kJSWgBCw=)
                          9: oeuzQUYyPkW-V2UkOlxP_jVk-4w.roa (hash: c4HWnVLhY5gwzEC9ub/fPbXgeg83cue7m376DrPhXoA=)
                          10: w2zX0OlEApQBeN-eJRqrMs7-KhQ.roa (hash: VAl4aNgTKdrb4Wh3EXu5ag7LbozTNcCxOnMz/M31Mvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:f1:91:c2:92:18:82:6c:99:b8:97:8b:3a:0e:2c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
        Validity
            Not Before: Sep 25 19:01:22 2026 GMT
            Not After : Sep 26 19:01:22 2026 GMT
        Subject: CN=b2d19c9515cb10daea1aa861ad3f1c04aba32489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:36:37:8e:6f:5c:ec:5e:04:0c:1a:1f:0e:76:
                    e2:54:b9:c3:41:1f:df:d1:b5:5d:fb:c5:f5:96:f6:
                    50:d0:ab:b7:39:61:95:f7:69:8b:6e:1d:b3:bb:32:
                    27:14:68:11:85:67:d8:4a:23:7d:4e:bf:de:8f:25:
                    e6:9a:2d:56:49:c3:f9:77:de:de:52:08:76:82:3b:
                    ca:55:ee:a2:b5:4b:4f:34:c0:ec:da:5d:6c:34:80:
                    d1:08:9f:6b:42:8d:a4:8b:6f:b5:27:7d:91:17:54:
                    e8:51:9c:5e:15:f9:11:e3:14:e1:19:68:4c:6a:5f:
                    e6:7f:cf:d5:f7:ac:2f:96:d1:fb:a1:3e:12:c2:1d:
                    c2:2c:97:43:e3:90:ff:3e:7d:bd:1e:b8:6f:ae:e8:
                    c8:fb:1e:b3:9f:c3:47:80:9c:c5:5e:18:8f:0b:18:
                    bb:22:68:09:93:7b:2c:82:b8:4a:e7:d7:c8:35:09:
                    75:c7:f4:32:10:4d:e0:b6:3a:99:c5:55:25:5e:28:
                    96:77:82:05:5f:e1:52:0d:a7:f2:3b:5f:72:3f:1c:
                    f3:73:08:fe:d6:30:df:79:f7:77:1d:13:d0:bb:ee:
                    17:ce:98:71:36:21:c2:d0:68:c4:fd:7e:10:b9:7b:
                    9c:cd:e5:2f:09:e3:e0:d3:e4:48:1d:4b:3d:0c:38:
                    e4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D1:9C:95:15:CB:10:DA:EA:1A:A8:61:AD:3F:1C:04:AB:A3:24:89
            X509v3 Authority Key Identifier:
                keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b7:b8:6e:4d:ce:9e:42:e1:a4:7d:a8:f2:2c:2a:c7:77:48:
         0b:dd:47:de:14:92:77:35:d1:99:ed:13:8e:fa:e7:04:00:c3:
         b7:ad:a5:33:b2:2d:8c:b5:61:dc:e0:02:76:e9:65:ad:7c:7f:
         6c:69:00:c5:b4:0b:5f:85:bf:3d:e1:ff:8d:9d:5c:ed:b1:86:
         8d:aa:fb:69:dc:56:b7:1f:09:3c:4b:86:c5:72:0b:ec:95:17:
         03:3a:d7:33:1b:c1:6f:e3:ba:3a:18:04:7d:e9:6b:21:b2:4d:
         f4:a4:b0:ed:81:77:30:24:dd:64:fb:d0:b1:76:b5:f7:ba:44:
         e0:bb:29:aa:53:fb:af:e3:a1:a6:53:bc:f0:8b:e5:af:90:ad:
         10:a1:3f:18:0b:d4:2e:9d:2f:c9:73:b6:f3:92:67:c9:fc:37:
         eb:23:15:5a:41:ce:dd:c8:08:f7:b3:76:08:47:37:dd:56:5b:
         77:e3:e7:59:e9:10:cf:c6:2c:ed:97:a8:44:50:80:82:78:3e:
         cf:06:8e:7f:b2:4e:00:6e:80:33:1f:1b:9a:52:64:99:1e:cf:
         de:8b:2e:20:ff:7d:99:8a:06:3e:af:8c:b7:ef:68:01:74:17:
         65:fd:29:ce:a1:d1:ad:66:1e:c6:66:55:76:3c:15:63:42:02:
         ef:96:87:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:30:00 2026 by rpki-client