Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.mft
File:                     EQ_DrECkDY4ObxdbgrOP8fj4haA.mft (raw, json)
Hash identifier:          EeFzEOiY226eBck0d1383K7mfNyI/KpyAYHak47ftIw=
Subject key identifier:   0D:91:D3:31:D9:D0:59:0A:5E:9B:8D:49:10:61:B6:B5:A7:57:8B:3C
Authority key identifier: 11:0F:C3:AC:40:A4:0D:8E:0E:6F:17:5B:82:B3:8F:F1:F8:F8:85:A0
Certificate issuer:       /CN=110fc3ac40a40d8e0e6f175b82b38ff1f8f885a0
Certificate serial:       01A12B0D6B0905362F9130A231BDBC9989A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQ_DrECkDY4ObxdbgrOP8fj4haA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.mft
Manifest number:          7C
Signing time:             Sun 11 Oct 2026 13:01:01 +0000
Manifest this update:     Sun 11 Oct 2026 13:01:01 +0000
Manifest next update:     Mon 12 Oct 2026 13:01:01 +0000
Files and hashes:         1: EQ_DrECkDY4ObxdbgrOP8fj4haA.crl (hash: p9nN4y86SXlyyp5z7nsDApl6uKbrIg51TjEU3uqGQlw=)
                          2: TUf12jhMmcLOANf7cgOVkVeYwW8.roa (hash: 7Fp06A3yhCRN7VwSugruMcOv/NybhwRNEN+T2UwHQGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQ_DrECkDY4ObxdbgrOP8fj4haA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:0d:6b:09:05:36:2f:91:30:a2:31:bd:bc:99:89:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110fc3ac40a40d8e0e6f175b82b38ff1f8f885a0
        Validity
            Not Before: Oct 11 13:01:01 2026 GMT
            Not After : Oct 12 13:01:01 2026 GMT
        Subject: CN=0d91d331d9d0590a5e9b8d491061b6b5a7578b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2e:71:e3:7b:75:c8:e0:6a:d4:e5:bf:50:5f:
                    73:1a:d1:4e:5b:24:bf:3e:39:87:ec:ad:0a:34:48:
                    ca:c6:26:ce:5d:37:b0:46:7e:38:ca:88:e2:88:75:
                    bc:40:25:24:dc:77:40:ec:41:55:b3:38:3e:17:23:
                    a2:58:d4:5d:24:72:6c:70:f8:b3:05:c1:98:ea:27:
                    07:95:0e:a3:66:f8:ae:fe:29:ab:fc:5b:32:80:e4:
                    36:01:3a:49:f7:fc:8a:db:d1:78:90:81:a2:33:c1:
                    03:96:9b:e1:7d:11:9a:4b:98:b7:4a:64:9a:d3:af:
                    d7:4c:f6:f3:98:12:22:1e:a8:da:2d:6a:ae:17:ba:
                    3d:dc:ec:2d:76:a4:86:1a:e7:72:5f:65:30:84:6d:
                    0e:47:bb:fc:bf:d8:31:49:eb:4a:ad:44:b5:33:6c:
                    37:e9:f9:57:8f:fd:43:46:c0:5d:0b:49:9b:2a:df:
                    8f:52:8c:6f:69:ea:04:c3:26:d6:ff:86:df:54:c4:
                    15:0d:45:3d:28:e9:33:3b:68:f7:4e:e7:08:d7:0e:
                    8f:2c:48:96:76:43:e0:6c:99:e6:9d:62:d0:03:4b:
                    ba:19:98:5b:8d:46:9a:ae:f1:7b:af:7d:e1:dd:e5:
                    49:ff:75:4b:9d:90:15:a1:21:76:a4:55:d3:ec:db:
                    bc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:91:D3:31:D9:D0:59:0A:5E:9B:8D:49:10:61:B6:B5:A7:57:8B:3C
            X509v3 Authority Key Identifier:
                keyid:11:0F:C3:AC:40:A4:0D:8E:0E:6F:17:5B:82:B3:8F:F1:F8:F8:85:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ_DrECkDY4ObxdbgrOP8fj4haA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c7:42:98:51:4d:10:eb:07:99:b5:c4:09:70:b3:e6:9a:a4:
         ce:a3:d6:a2:8c:44:72:73:36:9f:29:b5:a3:35:d4:7e:1c:c3:
         ec:33:d2:2b:7c:c7:67:0d:53:6c:aa:b2:3b:ca:cd:8e:53:d3:
         db:40:3b:c3:0f:6f:07:05:ea:38:e3:9d:ab:b7:a0:38:27:0f:
         51:58:41:57:e2:9c:78:bf:c4:a9:88:93:46:e3:a6:c6:81:73:
         d3:bc:44:a0:d0:ac:7f:8e:21:54:e8:c1:fb:7b:e1:ff:25:55:
         f9:c5:4d:af:fc:56:ef:44:1e:30:ed:c0:8b:db:91:69:84:14:
         84:58:a0:c8:e3:55:df:02:07:8c:9d:03:8e:1e:2a:12:16:ec:
         83:42:31:e0:94:49:ee:3b:f2:b0:1d:31:81:cc:99:49:9c:58:
         f4:00:50:1f:62:24:51:87:5e:2d:96:05:d1:a3:18:ff:3f:df:
         57:eb:ab:4f:69:f6:5c:c8:8f:43:d2:81:62:78:b4:e8:c8:11:
         30:a4:cc:25:64:19:77:97:13:aa:1a:3a:63:95:9d:1d:f7:b9:
         c4:21:4c:23:4a:91:bd:07:dd:ca:86:4d:d9:1c:3c:85:dc:87:
         d1:f9:40:e6:de:a6:05:53:4a:49:75:e5:f7:a5:cf:8b:95:83:
         c7:ca:8e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:56:46 2026 by rpki-client