Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
File:                     E-8y2L8VPATGOTviTwYyQ_fop-I.mft (raw, json)
Hash identifier:          wXjaTY8X+u/E2y0ErGYJ3ZGm9tMPyGwlbTTWY9MS2PE=
Subject key identifier:   60:C4:0A:61:1D:09:1B:84:6E:7F:EC:12:2A:68:63:97:92:55:AA:F7
Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
Certificate issuer:       /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Certificate serial:       01A139A4D2B3D0AE03193B34ACFFC3F1423F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
Manifest number:          0D06
Signing time:             Wed 14 Oct 2026 09:01:05 +0000
Manifest this update:     Wed 14 Oct 2026 09:01:05 +0000
Manifest next update:     Thu 15 Oct 2026 09:01:05 +0000
Files and hashes:         1: E-8y2L8VPATGOTviTwYyQ_fop-I.crl (hash: s9mArKEMKYLABGr6IySHRuZGDfH5ROBmzO4HBUaahDI=)
                          2: gXqLoCjch24SvYMMr4ERE1p3TXY.roa (hash: iUQ1Oys+V4y+EkeTDwfkNa5H0Gsu8L8N4uEAk+c5TDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 09:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:39:a4:d2:b3:d0:ae:03:19:3b:34:ac:ff:c3:f1:42:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
        Validity
            Not Before: Oct 14 09:01:05 2026 GMT
            Not After : Oct 15 09:01:05 2026 GMT
        Subject: CN=60c40a611d091b846e7fec122a6863979255aaf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a1:40:01:50:12:11:76:9d:22:ab:4d:92:a7:
                    23:7b:69:0a:01:f5:d9:03:89:fe:e5:f9:98:10:a2:
                    ba:6d:a0:0f:4c:56:ba:9b:01:ba:da:69:0b:70:ef:
                    eb:c5:09:6b:9a:ef:ce:7a:78:e3:5b:96:7f:c8:fe:
                    2b:a4:48:3a:d2:51:96:74:f6:66:25:b4:7b:69:35:
                    0f:c9:52:8f:8e:f1:d1:c7:ff:0e:29:ab:b6:a6:13:
                    59:28:15:0e:93:98:f3:cd:a5:28:53:22:02:5c:dc:
                    cd:e7:f2:fb:1e:c7:78:f2:91:83:47:bd:c1:a4:28:
                    c0:6b:98:88:50:24:c6:3f:ee:ec:fe:80:83:20:95:
                    5e:45:ae:92:32:d4:69:be:f3:5c:df:a3:1b:ce:89:
                    73:51:8b:6a:4b:2c:40:c0:bb:5c:97:0f:12:6f:c8:
                    0b:59:31:97:08:ec:c1:e6:a5:57:d3:57:99:01:b4:
                    bd:a2:9a:da:d2:df:1a:58:85:cb:4a:9f:2f:16:df:
                    63:9e:85:3d:e3:b9:f4:a9:e5:9c:93:3a:79:93:0e:
                    fc:8c:8f:47:fe:d8:af:8e:f9:98:c2:50:b0:04:53:
                    55:2c:87:87:b1:c2:67:0c:b7:3d:81:3c:f4:38:25:
                    d4:d0:d2:2c:b1:3f:70:ff:bc:bb:24:53:c0:b6:91:
                    10:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C4:0A:61:1D:09:1B:84:6E:7F:EC:12:2A:68:63:97:92:55:AA:F7
            X509v3 Authority Key Identifier:
                keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b3:08:14:ee:8e:e3:1f:36:e1:73:4c:a8:07:25:d3:cc:c7:
         92:de:39:13:67:c2:5f:7a:9c:24:81:a0:e5:21:7d:e8:a3:98:
         29:67:ff:c5:9d:a2:c2:41:09:35:3c:00:ef:cc:8c:59:e9:b0:
         35:a9:7b:ea:47:e6:2f:de:87:0b:a0:f1:4a:03:63:1f:c1:79:
         51:e3:86:27:7a:cb:de:72:b6:e9:96:60:5a:92:99:cc:1d:da:
         e8:87:63:6e:08:53:c0:38:1a:30:9d:dc:cd:07:d8:6f:77:5c:
         c7:56:b5:b1:c0:75:8d:8a:de:06:cb:be:7c:71:f6:24:a3:d5:
         e2:38:c4:17:6f:b4:f0:b6:6b:ce:f5:54:c5:a4:cc:3b:7a:35:
         e7:1a:25:4a:3f:f5:16:d3:6a:51:3f:08:42:85:81:2e:33:94:
         24:23:9e:8c:0b:c8:da:c9:11:c3:76:4d:b1:db:f0:7b:e0:bb:
         2c:a3:02:9d:63:3d:75:20:96:25:b4:bb:98:1f:bd:38:51:0f:
         fe:dc:57:70:be:57:a8:67:29:e0:ad:c0:b4:33:1d:83:e8:02:
         1b:a7:3d:a0:5e:94:dc:0f:e0:ec:65:13:12:dc:3f:14:7a:fa:
         c7:a7:62:2f:25:ea:23:f6:e2:37:72:8a:89:2e:43:6b:d9:e9:
         0c:74:64:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:31:56 2026 by rpki-client