Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
File:                     eA-Kp9juLNFxq6aAElVCf5qr5UY.mft (raw, json)
Hash identifier:          UOFCsaIayTqFmgdjGgR2N0FDBm+Y6KFwInD+OdtW9fA=
Subject key identifier:   2F:C8:C5:08:A9:7B:0A:3C:F6:E7:2A:61:EC:68:41:CC:D1:1A:FD:6F
Authority key identifier: 78:0F:8A:A7:D8:EE:2C:D1:71:AB:A6:80:12:55:42:7F:9A:AB:E5:46
Certificate issuer:       /CN=780f8aa7d8ee2cd171aba6801255427f9aabe546
Certificate serial:       01A0D382D49155C2CD534AB5AD958261572F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
Manifest number:          01A3
Signing time:             Thu 24 Sep 2026 13:02:41 +0000
Manifest this update:     Thu 24 Sep 2026 13:02:41 +0000
Manifest next update:     Fri 25 Sep 2026 13:02:41 +0000
Files and hashes:         1: 00GxFGgSEySvshhLvY9ijcX9cHQ.asa (hash: XgApdRt20J6F9KR7+CzL9K2aoKUuYUpSKhKCy3ZojEY=)
                          2: eA-Kp9juLNFxq6aAElVCf5qr5UY.crl (hash: 2znjG5qzcRLlimxaIlWW6joLyKLBbjLMEUi/rbNQMPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:82:d4:91:55:c2:cd:53:4a:b5:ad:95:82:61:57:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780f8aa7d8ee2cd171aba6801255427f9aabe546
        Validity
            Not Before: Sep 24 13:02:41 2026 GMT
            Not After : Sep 25 13:02:41 2026 GMT
        Subject: CN=2fc8c508a97b0a3cf6e72a61ec6841ccd11afd6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c1:86:0e:d8:aa:3a:7a:72:59:7d:23:92:63:
                    34:9a:64:31:0f:80:f1:c7:e1:16:25:3b:db:6b:04:
                    6b:87:e8:a3:0d:c1:1d:61:19:a9:25:95:59:83:ee:
                    97:85:b4:f7:ec:37:8f:c2:75:fd:96:f7:a8:4c:83:
                    d3:02:9c:20:01:12:72:54:fa:ff:c8:b5:cc:af:45:
                    5a:bb:d7:2c:f8:e0:02:5b:48:6f:8f:3c:09:c6:35:
                    ef:fb:00:82:c0:e6:d2:0a:94:18:b3:82:c0:55:f2:
                    66:d2:ba:a7:e2:c9:54:70:d9:df:6e:0a:38:ca:4e:
                    7f:40:2a:a7:38:72:8f:b3:a0:8d:6e:10:38:0d:e3:
                    6e:4b:4f:0a:32:3b:a5:a2:41:66:c7:8c:e3:bf:a7:
                    81:97:32:d3:4e:dd:a6:11:b8:42:b5:78:06:9e:7f:
                    04:00:6b:5e:97:4f:3a:9b:9a:40:91:96:64:3d:b1:
                    e6:7e:f0:62:03:a7:cc:42:7b:f2:2b:3d:53:56:d9:
                    cc:c9:37:10:28:fa:f2:7e:29:38:73:f4:ed:32:69:
                    11:2f:af:75:0f:7e:6e:ab:4a:7a:3d:5b:c3:b0:a6:
                    48:86:10:61:d2:12:9f:e3:85:b6:0e:06:57:ad:c1:
                    43:79:4d:87:18:5b:86:a6:ee:4f:ef:9f:f0:62:23:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C8:C5:08:A9:7B:0A:3C:F6:E7:2A:61:EC:68:41:CC:D1:1A:FD:6F
            X509v3 Authority Key Identifier:
                keyid:78:0F:8A:A7:D8:EE:2C:D1:71:AB:A6:80:12:55:42:7F:9A:AB:E5:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-Kp9juLNFxq6aAElVCf5qr5UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1cf486-8cfb-43eb-a655-0c9feb7da02d/1/eA-Kp9juLNFxq6aAElVCf5qr5UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:04:1f:f0:a9:bb:e0:cd:10:8d:96:81:8c:82:99:51:85:83:
         94:8c:7c:f5:c3:19:82:3e:7d:a9:7f:48:b1:68:5e:4b:8d:ca:
         e5:e9:44:0b:ef:b3:6e:27:5b:53:3e:73:b1:54:2f:64:85:4f:
         a0:fa:c6:e6:7f:b7:65:32:7d:d6:01:95:af:11:ef:12:15:03:
         65:95:4d:2c:b0:34:3f:c0:49:df:b9:9c:56:f2:69:8b:d1:58:
         51:ab:48:a7:ec:3e:47:38:e8:3e:b9:c7:3f:41:a7:af:42:5e:
         9d:a9:20:5b:4f:e7:6f:23:10:37:4e:b4:f7:29:49:e6:57:06:
         2d:02:38:66:10:0a:fa:cb:fc:9a:cd:92:02:88:08:a2:2a:4e:
         9c:61:87:51:7e:c3:77:92:e1:e4:ba:04:26:68:02:21:43:13:
         8c:9b:22:22:cf:21:fd:c1:7b:1a:c2:be:63:ea:4a:dc:7d:1c:
         a7:e8:bd:fb:8d:d1:18:5c:15:c9:c7:db:05:dc:74:cd:2d:7f:
         35:cd:3a:ce:88:ba:45:18:c5:b9:ca:82:4f:92:5f:06:9a:2b:
         91:63:26:fe:91:58:ac:1f:77:f4:de:de:6c:32:c6:70:08:60:
         11:f9:49:cb:b3:2c:95:42:ac:83:67:6d:9e:d2:7b:20:8a:3c:
         1e:84:66:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:04:57 2026 by rpki-client