Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.mft
File:                     ETxnOiX3XI3gyGD0aRg6cJoXHiQ.mft (raw, json)
Hash identifier:          iui3R2AWM4poyL+71fNx1pWkOsGSmOxYDp5xOAWzAHk=
Subject key identifier:   82:3C:2E:57:5C:96:5F:0A:EE:A8:B7:C7:6B:DA:5D:6E:9F:B9:5B:31
Authority key identifier: 11:3C:67:3A:25:F7:5C:8D:E0:C8:60:F4:69:18:3A:70:9A:17:1E:24
Certificate issuer:       /CN=113c673a25f75c8de0c860f469183a709a171e24
Certificate serial:       01A130A27E52AFC2F2E9CD59DBB4D27A220D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.mft
Manifest number:          0117
Signing time:             Mon 12 Oct 2026 15:01:57 +0000
Manifest this update:     Mon 12 Oct 2026 15:01:57 +0000
Manifest next update:     Tue 13 Oct 2026 15:01:57 +0000
Files and hashes:         1: ETxnOiX3XI3gyGD0aRg6cJoXHiQ.crl (hash: vqyDpWL30jsijwzDKOG1SrVJvpBLxxlfriQ8r5dM3ok=)
                          2: FKTTJ2_pJQ0c4167Z_9foASOfe8.roa (hash: 5QwyJIVruZ9DDqn9rtCcqANTOb2u+3Qm0t0OytggvZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:a2:7e:52:af:c2:f2:e9:cd:59:db:b4:d2:7a:22:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113c673a25f75c8de0c860f469183a709a171e24
        Validity
            Not Before: Oct 12 15:01:57 2026 GMT
            Not After : Oct 13 15:01:57 2026 GMT
        Subject: CN=823c2e575c965f0aeea8b7c76bda5d6e9fb95b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:41:55:de:aa:33:49:1e:a3:88:9a:91:59:a5:
                    09:d6:3b:76:11:1c:71:16:91:25:12:67:a7:5a:c5:
                    3a:19:19:60:33:79:e2:4a:c5:5e:b9:3d:10:4e:2c:
                    96:96:03:53:35:5b:94:e6:ae:35:8e:b2:bc:f5:b8:
                    9b:0e:a0:3e:b9:f2:90:f9:e4:e6:58:76:b7:7a:0b:
                    f1:68:90:ca:66:d4:68:f6:ad:26:e2:c3:7c:d9:28:
                    81:77:a7:1d:0f:57:6c:a0:29:d1:98:d6:60:3c:1d:
                    2b:0a:3b:3f:12:c0:5e:6a:58:58:37:25:c4:3c:0f:
                    0f:0d:a6:10:6f:ef:e4:83:e5:2f:3b:92:6d:6f:1d:
                    fc:47:37:94:6e:5d:75:6e:03:f8:51:73:7c:c8:4a:
                    e1:54:b9:10:4d:0d:df:98:6a:0b:18:56:53:4b:4f:
                    bc:c6:a4:27:3c:83:86:92:99:97:d2:f2:25:3e:87:
                    d9:c2:74:a5:e8:59:b4:c4:d6:90:5e:88:f5:ed:d9:
                    cd:d4:58:ed:9b:13:e4:9c:79:6f:bb:ab:40:ed:ae:
                    9e:6b:cb:21:e1:e6:09:b3:81:ba:21:e4:49:15:11:
                    74:d5:18:50:ce:b6:11:c8:0e:a7:71:ff:5a:47:39:
                    ac:fc:00:84:c3:8b:e9:92:c5:21:a6:9d:78:f8:8d:
                    60:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3C:2E:57:5C:96:5F:0A:EE:A8:B7:C7:6B:DA:5D:6E:9F:B9:5B:31
            X509v3 Authority Key Identifier:
                keyid:11:3C:67:3A:25:F7:5C:8D:E0:C8:60:F4:69:18:3A:70:9A:17:1E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/961aca-f425-4887-af4a-cfa061030346/1/ETxnOiX3XI3gyGD0aRg6cJoXHiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:cc:5b:02:18:f5:20:48:3e:1d:54:68:ef:a1:6d:63:85:1c:
         be:c7:a5:a8:9a:50:ea:cb:ff:4b:fb:85:c8:e3:db:3d:d7:78:
         f2:95:9f:ea:5b:da:5d:b0:9d:bc:c1:cf:9b:14:bf:07:71:d8:
         26:a4:f7:9c:5c:13:3a:88:ee:8e:b6:ff:05:4f:82:d8:46:e6:
         c3:dc:49:bd:46:40:1c:f3:26:3e:43:72:e2:b9:1a:f8:17:5c:
         11:c0:2f:16:94:48:37:02:ec:5c:c5:64:7c:49:9f:10:0b:8f:
         c3:10:72:86:17:86:22:2a:4f:a1:4a:1e:5e:8f:12:c4:72:13:
         03:a4:3f:81:3b:e5:4d:80:dd:64:c1:e6:52:6c:3d:a0:11:21:
         b4:80:b0:8c:68:b5:55:41:af:e1:79:95:a1:aa:6b:d3:91:06:
         6c:31:87:25:b9:82:f7:69:eb:0c:3d:1a:4a:4d:fd:b2:a4:b3:
         54:ae:52:27:d8:97:d3:33:ad:1c:b5:cc:97:7f:a7:9b:5a:9a:
         d9:28:67:78:35:2a:9d:2d:66:b8:5b:f1:08:78:0f:10:cf:92:
         ec:2f:a6:e3:21:b5:0c:da:69:38:1b:8d:f4:97:f4:c9:63:91:
         3d:d7:fe:5c:11:48:26:8c:ae:10:5e:f9:54:b9:c5:48:b3:1b:
         74:23:fd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:00:46 2026 by rpki-client