Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
File:                     EEXazIN3mMPmzzH00nlGozsN5mE.mft (raw, json)
Hash identifier:          dDxSzSvz7Tb8HsRxRhVrU4YCKXJ4XF4pAaZ/ABAd/xU=
Subject key identifier:   8C:35:A3:A9:4B:66:A9:FB:AD:4E:FD:12:01:E6:88:D3:01:7E:6E:70
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Certificate issuer:       /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial:       01A0D2DE045A231149D28F34D488F5531C70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
Manifest number:          1A8A
Signing time:             Thu 24 Sep 2026 10:02:40 +0000
Manifest this update:     Thu 24 Sep 2026 10:02:40 +0000
Manifest next update:     Fri 25 Sep 2026 10:02:40 +0000
Files and hashes:         1: 005Bqn6EcQE2kRRYutDaRw8mbu4.roa (hash: Ya4LLXNAwjE1h+4Ix0wQYttNBpWpSYxEcBwtehuCJrU=)
                          2: Bsg46Hh18W2wtrBYU_MmVQa11_M.roa (hash: Wi9xpJM6gyN312GNJefY/RNhxBIItO+fm/kcAGluLLQ=)
                          3: EEXazIN3mMPmzzH00nlGozsN5mE.crl (hash: Og/5qkPKI9eBeJRCN61Y/LBVdguYkKEsyyN7CXQux3g=)
                          4: pnsSYMuSCnD02i5X7aNjfb6KV2Y.roa (hash: gAxKlvosqMdTFPRmtfb6Fr6F4VKWhUBjaqqguPZxYyQ=)
                          5: zVElElmNHqfMWbO7Mv_RAuDBQI8.roa (hash: fH2ooaFDH4XMWbMf68BiYaDtG2yS/k654MGObWqqQkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 10:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:de:04:5a:23:11:49:d2:8f:34:d4:88:f5:53:1c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
        Validity
            Not Before: Sep 24 10:02:40 2026 GMT
            Not After : Sep 25 10:02:40 2026 GMT
        Subject: CN=8c35a3a94b66a9fbad4efd1201e688d3017e6e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:f1:6a:cf:ca:57:27:b6:5b:25:41:16:6d:
                    89:68:61:eb:a2:46:ba:b3:07:dc:c9:25:22:5c:28:
                    70:a0:bd:4a:b5:a0:2f:38:49:9c:ac:09:74:3b:fa:
                    ca:e7:63:af:3c:a4:48:8d:c8:d6:a3:fa:99:7d:ee:
                    32:4c:80:c7:37:aa:56:88:ad:32:3a:e6:75:eb:6f:
                    57:3d:d6:33:0a:bc:45:7c:14:b3:e9:e2:b3:2b:8c:
                    08:65:5f:d7:f3:68:e2:21:47:d7:a1:a3:d7:8e:61:
                    20:a0:52:82:1b:4a:bf:57:da:41:9f:21:dd:55:58:
                    0c:ae:a4:00:f0:46:f2:bf:32:a3:f0:c1:a7:7c:f3:
                    09:24:61:49:74:e1:29:46:37:27:62:26:f3:42:f5:
                    50:d6:e6:5f:f4:4d:d7:93:59:d1:1c:22:ec:c7:5e:
                    01:68:ad:bb:d2:52:6b:d3:b3:f4:f1:ac:91:13:d3:
                    2c:ad:1e:70:9c:d6:b4:a5:c2:c7:14:12:30:52:dc:
                    61:e6:82:ac:64:b4:6f:37:9b:89:50:9d:34:bd:c3:
                    27:98:b5:a7:95:08:af:31:90:f9:97:40:a2:c3:06:
                    b5:e1:0f:cf:57:15:67:ce:a9:a2:b3:88:1b:b6:54:
                    9e:da:20:1b:2b:86:5b:62:66:cf:9e:69:d9:13:3f:
                    0b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:35:A3:A9:4B:66:A9:FB:AD:4E:FD:12:01:E6:88:D3:01:7E:6E:70
            X509v3 Authority Key Identifier:
                keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:50:05:e5:c0:92:15:da:4e:a7:52:97:46:12:6f:89:fb:ad:
         7f:31:10:be:35:e1:ae:c6:3a:b3:b3:f6:e7:60:24:e7:a3:a3:
         a7:d5:1c:18:2f:3e:c8:76:52:e5:39:65:b1:51:95:cf:d2:99:
         65:fc:8c:6d:67:8f:f8:70:be:9e:c4:94:9c:de:07:75:cd:b6:
         78:33:5e:05:95:d7:c5:b7:94:95:8c:67:d6:ae:47:14:03:50:
         f3:7b:01:7f:6a:54:54:80:36:1e:5c:92:c8:93:43:0d:12:1c:
         e4:68:27:00:21:bc:74:a4:1a:0b:cc:90:f2:62:c6:1b:67:e7:
         af:99:8e:a8:18:fb:ec:4f:c4:75:66:cc:ea:20:e1:01:d8:60:
         4c:47:73:ab:a7:83:91:17:f1:d7:bb:f7:eb:60:8a:87:f5:b2:
         d6:be:19:c6:48:bd:a9:5f:12:f3:90:21:e0:13:66:a1:d6:b8:
         15:cf:07:68:03:7a:8b:d5:56:4d:1d:e1:91:0c:38:c6:02:54:
         bc:d7:fe:6a:4c:90:a7:69:ae:b2:cf:00:4a:9e:1d:2c:0c:b3:
         7c:ad:0f:46:29:2e:d6:7c:54:49:07:b8:2a:67:15:9f:ad:3d:
         7a:da:ff:3d:a6:53:02:c9:db:95:a9:85:25:66:b1:e6:51:52:
         82:df:b8:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDS3gRaIxFJ0o801Ij1UxxwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNDVkYWNjODM3Nzk4YzNlNmNmMzFmNGQyNzk0NmEzM2Iw
ZGU2NjEwHhcNMjYwOTI0MTAwMjQwWhcNMjYwOTI1MTAwMjQwWjAzMTEwLwYDVQQD
Eyg4YzM1YTNhOTRiNjZhOWZiYWQ0ZWZkMTIwMWU2ODhkMzAxN2U2ZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreHxas/KVye2WyVBFm2JaGHroka6
swfcySUiXChwoL1KtaAvOEmcrAl0O/rK52OvPKRIjcjWo/qZfe4yTIDHN6pWiK0y
OuZ1629XPdYzCrxFfBSz6eKzK4wIZV/X82jiIUfXoaPXjmEgoFKCG0q/V9pBnyHd
VVgMrqQA8EbyvzKj8MGnfPMJJGFJdOEpRjcnYibzQvVQ1uZf9E3Xk1nRHCLsx14B
aK270lJr07P08ayRE9MsrR5wnNa0pcLHFBIwUtxh5oKsZLRvN5uJUJ00vcMnmLWn
lQivMZD5l0Ciwwa14Q/PVxVnzqmis4gbtlSe2iAbK4ZbYmbPnmnZEz8LSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIw1o6lLZqn7rU79EgHmiNMBfm5wMB8GA1UdIwQY
MBaAFBBF2syDd5jD5s8x9NJ5RqM7DeZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEt
OWMxNzRlNTNlNGZlLzEvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEtOWMxNzRlNTNlNGZl
LzEvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVAF5cCS
FdpOp1KXRhJvifutfzEQvjXhrsY6s7P252Ak56Ojp9UcGC8+yHZS5TllsVGVz9KZ
ZfyMbWeP+HC+nsSUnN4Hdc22eDNeBZXXxbeUlYxn1q5HFANQ83sBf2pUVIA2HlyS
yJNDDRIc5GgnACG8dKQaC8yQ8mLGG2fnr5mOqBj77E/EdWbM6iDhAdhgTEdzq6eD
kRfx17v362CKh/Wy1r4Zxki9qV8S85Ah4BNmoda4Fc8HaAN6i9VWTR3hkQw4xgJU
vNf+akyQp2muss8ASp4dLAyzfK0PRiku1nxUSQe4KmcVn609etr/PaZTAsnblamF
JWax5lFSgt+4bw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:14:36 2026 by rpki-client