Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
File:                     1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json)
Hash identifier:          C2eJ0kTdGvnLf+Aah56V+pZ86VttU4el3+qps5kcf0g=
Subject key identifier:   BC:91:AD:0A:3B:8D:8D:53:06:73:A0:56:34:DF:AA:43:33:D0:0E:83
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Certificate issuer:       /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial:       01A0E5BEFA2EEE28F3BD491A99A2CB0C986D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
Manifest number:          1016
Signing time:             Mon 28 Sep 2026 02:01:33 +0000
Manifest this update:     Mon 28 Sep 2026 02:01:33 +0000
Manifest next update:     Tue 29 Sep 2026 02:01:33 +0000
Files and hashes:         1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: VMM6CP8lcBpDB8hbKZfeetbq/YUucJsGk/C+DWtKZKM=)
                          2: PYSOuEJKXfFv96PrgahNaZWMo90.roa (hash: 1YHoKoxpfqieDN1YXiLCsR8fSH3v1YL6XK2N4m5fa+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 19:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:be:fa:2e:ee:28:f3:bd:49:1a:99:a2:cb:0c:98:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
        Validity
            Not Before: Sep 28 02:01:33 2026 GMT
            Not After : Sep 29 02:01:33 2026 GMT
        Subject: CN=bc91ad0a3b8d8d530673a05634dfaa4333d00e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:89:d8:7c:9d:b6:fd:38:d8:e2:74:d9:5d:
                    29:de:ee:23:43:95:4a:2b:d6:bb:59:2d:9b:f4:be:
                    24:fa:12:3d:b2:4f:45:6a:48:34:ab:26:ba:6d:9d:
                    ad:e9:be:e9:34:75:ed:63:f5:bf:8d:9f:9a:7e:ea:
                    e8:85:72:25:e0:cc:f4:5b:d7:c3:f4:e5:25:78:72:
                    8a:7a:43:28:e3:38:40:de:bc:42:5f:32:c3:ad:a2:
                    9e:a2:38:02:4e:a2:52:fe:f9:21:5c:72:63:a4:83:
                    d3:57:6b:e2:d1:13:74:57:25:f1:56:2f:c4:f7:b7:
                    77:42:2a:fc:4f:6a:5b:d9:64:8e:0f:82:5a:61:bf:
                    ac:12:36:fc:1f:d8:35:9b:1f:ba:9a:44:d8:31:d9:
                    68:d8:98:3e:be:92:1e:c4:7d:3c:3d:83:b3:da:fb:
                    ee:1d:57:5e:de:f4:80:de:d3:ae:53:10:f2:ca:10:
                    23:d8:36:90:8d:da:6e:33:68:bd:2f:ef:c2:4d:40:
                    f6:63:cc:34:d0:47:47:0d:bc:64:0f:d4:54:ef:0a:
                    25:28:e2:02:26:ca:be:74:73:b7:8f:1b:53:d6:fa:
                    4e:c2:fb:b5:cd:e6:59:c2:5b:10:78:92:e9:3b:37:
                    4e:63:cb:5c:b0:9b:6f:ef:5d:d0:19:96:27:aa:ca:
                    b9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:91:AD:0A:3B:8D:8D:53:06:73:A0:56:34:DF:AA:43:33:D0:0E:83
            X509v3 Authority Key Identifier:
                keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:71:e5:6e:4d:1b:73:07:38:60:cf:f9:c9:a1:3b:1a:b9:39:
         89:25:fb:9f:8f:49:f5:64:d6:c6:57:e4:e8:28:21:fa:e8:9d:
         5f:08:57:23:9e:17:f3:98:2f:39:14:17:e8:e4:c6:df:00:87:
         0c:fa:fa:61:b7:c8:d0:47:3f:79:59:22:09:a7:fa:4e:61:db:
         65:bc:52:13:92:a4:30:eb:cf:fb:e1:8c:fd:ed:01:11:f2:93:
         9f:24:06:fc:fb:b8:00:4a:4f:42:d6:2b:4c:e5:8d:32:8f:a2:
         53:f5:af:ab:9a:b0:d2:5f:92:15:e8:e9:d6:12:d7:21:19:6f:
         23:1c:ec:5c:cd:b6:05:a9:e6:2a:32:16:22:57:cc:64:d7:cd:
         b9:d4:48:6e:85:46:e9:05:ad:2a:81:37:06:3f:cf:ba:0d:72:
         32:8c:6f:0d:59:85:e4:d5:a4:7d:30:9a:05:7d:1b:f6:3c:46:
         6f:5d:81:10:46:86:58:69:c3:00:bb:47:f8:8a:02:61:8d:cb:
         db:f5:d4:39:6d:40:e3:75:78:62:8e:c6:50:18:aa:fe:96:ba:
         43:33:03:32:bf:e1:7d:30:5f:a7:03:d4:d4:58:05:8c:77:08:
         7b:95:0a:26:ca:44:3c:4b:a4:7d:5b:fe:eb:9b:7f:46:81:04:
         76:d5:c0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:10:03 2026 by rpki-client