Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
File:                     EBIhZFi9dgX_lVQP0gTrk6R385M.mft (raw, json)
Hash identifier:          xK7uKz4lSMzIJG22VvsTgE8QXqsc9t15VGvq2o0Ze70=
Subject key identifier:   1D:E0:D5:FA:E9:8F:C3:4B:A7:DC:65:99:EA:61:41:A2:61:03:25:43
Authority key identifier: 10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
Certificate issuer:       /CN=1012216458bd7605ff95540fd204eb93a477f393
Certificate serial:       01A0D192ABCA7FF85D6F6861BABC40CDB79A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
Manifest number:          1022
Signing time:             Thu 24 Sep 2026 04:00:45 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:45 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:45 +0000
Files and hashes:         1: EBIhZFi9dgX_lVQP0gTrk6R385M.crl (hash: JxSter4ZbnZ/jECNgyugg4JlJ8+nUMZbEvOPbZMwvIA=)
                          2: pdO2f_0-TednGBjVCw96KQJOAEQ.roa (hash: kVqemUa01+t3sS70xHfRu7UweHBrH2bnhmrHrJ9ewxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:ab:ca:7f:f8:5d:6f:68:61:ba:bc:40:cd:b7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1012216458bd7605ff95540fd204eb93a477f393
        Validity
            Not Before: Sep 24 04:00:45 2026 GMT
            Not After : Sep 25 04:00:45 2026 GMT
        Subject: CN=1de0d5fae98fc34ba7dc6599ea6141a261032543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4d:8e:43:3d:0e:3c:35:d3:01:b0:1e:ae:b4:
                    17:e4:e3:7a:b5:58:00:4e:31:75:1c:f4:52:db:a1:
                    1d:f6:96:24:4a:eb:71:5b:c7:18:19:26:a4:26:04:
                    61:76:f6:a9:34:e5:b4:16:cf:ea:eb:b6:c5:02:8d:
                    2e:38:4e:82:ff:a7:8e:e1:be:25:6d:15:bf:c5:ff:
                    bb:40:67:0d:a4:fd:51:68:33:05:87:e2:1e:70:e4:
                    86:07:12:bd:ef:19:54:72:94:ad:9d:48:f6:c6:43:
                    b2:13:b1:46:46:08:c8:4f:8a:08:05:1d:40:a4:40:
                    5a:5d:51:9a:1e:2a:1a:9e:15:ce:b3:e3:52:42:28:
                    02:cc:37:e4:61:f5:0a:ad:a9:b5:c8:ca:b2:2b:98:
                    6e:89:d5:b6:c9:67:62:e1:20:50:3d:79:8e:4c:91:
                    a3:77:42:68:14:fc:49:ad:a6:c0:57:00:35:ad:6c:
                    69:5e:1b:c3:94:36:c7:ca:6a:df:3f:b8:23:a7:9e:
                    e6:35:d5:73:0d:35:47:da:5f:ef:f0:bc:17:30:5e:
                    7d:b8:e8:6f:f8:4a:8d:29:24:49:93:4c:b7:d8:aa:
                    a6:39:da:db:7f:85:25:ea:2f:47:01:28:c9:36:7f:
                    16:37:b2:7a:ce:b1:a9:da:9b:2e:de:f2:da:23:a0:
                    5f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E0:D5:FA:E9:8F:C3:4B:A7:DC:65:99:EA:61:41:A2:61:03:25:43
            X509v3 Authority Key Identifier:
                keyid:10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3b:ba:66:9c:25:71:77:bf:8a:e4:44:a2:26:19:7c:48:1f:
         ed:70:89:23:1e:80:00:af:cd:78:1f:1d:9a:da:4b:a9:04:a7:
         6c:5f:57:b1:5e:50:68:33:20:d4:62:90:a1:b4:c4:2b:3e:d9:
         53:9a:a1:ad:be:58:83:71:c3:15:88:c1:87:cd:c9:6a:54:51:
         be:dc:0a:02:eb:61:e6:99:06:65:2b:c8:ad:5c:a9:09:89:49:
         62:a0:a2:ca:b9:de:da:dc:e3:5b:12:e7:a8:8d:a3:a1:67:55:
         32:6b:eb:2e:70:f7:7e:58:e0:93:93:73:eb:46:e6:57:6f:84:
         d9:ae:0b:92:42:54:87:bf:2f:44:85:7d:12:c6:0e:b0:19:1d:
         19:84:95:21:6c:dd:11:5b:ab:cd:41:9f:1b:b8:5f:2c:8b:41:
         2b:a9:1b:f6:9e:42:a6:21:85:a5:24:18:93:ce:08:0b:d0:49:
         e3:81:71:45:1a:12:39:e1:62:3a:64:7f:1f:e1:48:7a:ee:48:
         81:9a:59:c9:7f:be:ee:b0:21:56:ef:8a:6f:ac:57:2c:a4:0a:
         e7:da:95:24:8a:34:ef:da:65:32:cf:0f:bd:e8:e2:75:f7:36:
         7a:c0:c5:d5:84:fe:39:02:fa:a1:ee:4d:5d:39:d2:76:33:e1:
         58:11:3b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:50:27 2026 by rpki-client