Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File:                     edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier:          s3Bi+9W1EMpX6grTu2a+YpgRFHc2Aq2r8zgqDyxy3X8=
Subject key identifier:   43:C5:1A:67:F9:68:FE:C7:15:42:18:91:3A:CD:3F:BE:CD:03:92:2B
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer:       /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial:       01A128E8FCA2D261A38EA7729744F3DDA8FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number:          11BE
Signing time:             Sun 11 Oct 2026 03:01:59 +0000
Manifest this update:     Sun 11 Oct 2026 03:01:59 +0000
Manifest next update:     Mon 12 Oct 2026 03:01:59 +0000
Files and hashes:         1: 8x6YocXhEAE4EUV764wUI2PKiKU.roa (hash: yeyp7+DYbQfuSd5MS8n2WSRAshm6pVInjHRluL8iOew=)
                          2: a_FCKCt6dnU7F2M3SMQI1J1wlrw.roa (hash: AtVF3QXcvO4VESZ6rn9J2bX+Ej+cAO1z0o2Qbw21J8E=)
                          3: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: 7sb5q36LqQMp1sPmgc8xRkXgl/3dhJ7Qvby8dJXimPw=)
                          4: oG6E9ZToy7RTlQOkPq4zuV7XG0U.roa (hash: 2JYfuKBfp+nWk/czqBEKKIWfjScVuKeSQovGMXxQmwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 03:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:e8:fc:a2:d2:61:a3:8e:a7:72:97:44:f3:dd:a8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
        Validity
            Not Before: Oct 11 03:01:59 2026 GMT
            Not After : Oct 12 03:01:59 2026 GMT
        Subject: CN=43c51a67f968fec7154218913acd3fbecd03922b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:08:8d:c1:b2:c9:87:21:88:53:a0:2b:14:c8:
                    8c:cb:f4:8e:00:1d:83:3e:33:98:4b:01:7b:02:3d:
                    64:f4:84:fd:68:73:6e:9a:09:7b:0d:19:29:c9:40:
                    24:2b:ae:3f:f9:19:00:f8:39:ff:56:b4:5a:b5:19:
                    8f:d4:99:ee:59:e4:67:08:b6:89:81:c8:e6:fa:e5:
                    d2:0d:2f:60:d4:b1:be:30:5e:08:6f:8a:41:80:5f:
                    1d:9e:eb:30:71:ed:aa:58:8b:cf:d1:ee:f7:b6:30:
                    8d:73:fc:98:7b:07:08:1e:d1:bc:9b:03:1b:cf:75:
                    88:a1:67:8a:95:0e:c1:b1:9e:01:7e:ac:da:54:a3:
                    2e:23:06:89:6a:a2:e7:8e:7a:b6:af:22:45:28:2a:
                    79:27:26:65:ba:c6:7c:d2:68:cf:67:0c:62:ed:44:
                    1d:6c:ef:4e:9f:47:9c:d7:92:e4:b8:cd:65:2e:db:
                    22:b1:07:5b:3f:88:34:bd:09:cb:93:7b:19:07:4f:
                    fc:20:66:90:40:3f:87:8f:6f:43:d5:15:c6:24:7d:
                    b6:94:0e:4c:ed:ad:30:0f:d7:e4:54:9a:72:56:47:
                    fc:39:7e:c1:52:56:69:ac:7f:fd:47:36:fa:7e:8a:
                    77:4c:98:c1:7c:01:5e:ad:b0:0f:2e:5c:b0:45:b4:
                    15:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C5:1A:67:F9:68:FE:C7:15:42:18:91:3A:CD:3F:BE:CD:03:92:2B
            X509v3 Authority Key Identifier:
                keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:48:53:fe:e7:b8:62:a2:34:76:70:3d:fd:a2:ca:51:d2:18:
         97:09:9a:de:56:6c:3d:bb:3e:ac:7c:06:ea:2f:2d:04:f5:7a:
         bd:3e:c4:02:88:15:55:c6:a5:c4:88:63:18:55:68:4c:a8:94:
         bd:0c:ac:e2:15:0e:fc:0c:6f:05:9b:88:45:6f:fc:84:19:a1:
         56:1b:53:84:ee:7d:51:16:85:37:39:a6:77:b1:1c:3e:8f:02:
         aa:a6:b3:7d:c7:19:10:bb:92:0c:41:2d:a5:a4:60:bd:b8:d7:
         40:85:7c:44:73:0d:6e:04:05:e5:68:7f:9b:46:7f:a3:e0:15:
         93:d3:eb:79:03:a0:26:b7:ee:92:35:b4:c0:2e:30:f6:03:2e:
         9c:1b:5a:9c:b3:86:57:f3:4a:bd:61:9d:83:3f:dd:24:af:ee:
         8a:ff:65:35:45:1c:89:58:7c:0b:77:cf:77:14:4e:9e:90:3b:
         f5:3f:dd:ab:ce:ad:cb:31:70:6c:20:10:ab:86:a7:36:39:6f:
         27:06:46:65:12:db:22:6e:97:f0:49:99:4e:5b:aa:d4:c5:b5:
         f0:b5:5c:d3:80:52:01:5f:16:9a:12:34:e4:ea:f8:85:dc:67:
         8a:a0:7d:f6:c5:6b:1d:3f:e9:8d:fc:89:50:0d:1a:24:57:e0:
         13:67:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:46:46 2026 by rpki-client