Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
File:                     EweT4kpnIB99UrZWaG9D2t46E5I.mft (raw, json)
Hash identifier:          xkPQZHerWjgOo1JIPeAovgP1JMlaCPACKEmDSVMacCU=
Subject key identifier:   D7:C0:26:36:8F:ED:00:7A:16:18:92:BC:4E:A4:D0:94:0F:9E:4F:28
Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
Certificate issuer:       /CN=130793e24a67201f7d52b656686f43dade3a1392
Certificate serial:       01A11D1A84B133F160CD4C5E0F8D2D53E457
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
Manifest number:          1A93
Signing time:             Thu 08 Oct 2026 20:00:39 +0000
Manifest this update:     Thu 08 Oct 2026 20:00:39 +0000
Manifest next update:     Fri 09 Oct 2026 20:00:39 +0000
Files and hashes:         1: DUh21kc3_st9zmx6FjCgEwY4O-g.roa (hash: 6N33Nz1wYaJrweY5UTdtSITSNvvX1UF/vvjIlm8O7gE=)
                          2: EweT4kpnIB99UrZWaG9D2t46E5I.crl (hash: B2cpOSu5TMmDwVLH/JwFgxPFkk/G9hEtjSoEpfTuRgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1d:1a:84:b1:33:f1:60:cd:4c:5e:0f:8d:2d:53:e4:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392
        Validity
            Not Before: Oct  8 20:00:39 2026 GMT
            Not After : Oct  9 20:00:39 2026 GMT
        Subject: CN=d7c026368fed007a161892bc4ea4d0940f9e4f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:05:17:92:94:83:f6:9d:f4:2f:23:a0:0e:2c:
                    ee:b6:65:17:84:81:14:83:17:86:f6:6f:2f:a8:bf:
                    e2:b0:f2:2b:b8:f1:25:a4:a2:fc:a0:af:61:35:5e:
                    5b:51:1c:1f:9d:66:bc:f9:29:78:3b:57:ca:aa:07:
                    9a:e1:48:08:3c:6e:f9:a9:5e:ec:46:a8:66:d5:7c:
                    ca:f2:43:7e:07:f5:f8:eb:03:ab:0a:b9:9d:09:3b:
                    07:84:6e:e9:2d:2b:7c:93:07:d1:c8:99:ce:2e:30:
                    df:b8:0b:4c:a2:68:04:02:62:28:01:1c:6f:43:f3:
                    82:61:e7:03:cb:b8:c2:2e:89:3a:39:d3:a0:2d:c1:
                    d2:b4:05:c4:71:12:9e:89:ad:b3:24:b4:fe:33:94:
                    3f:af:2a:dd:a2:29:ea:61:af:c4:e6:b5:b8:9a:30:
                    8c:77:41:67:e0:0f:88:3c:89:35:5c:c5:33:fc:2e:
                    4d:80:c9:c0:58:80:c2:59:90:b7:78:29:9d:2d:3d:
                    98:6b:e1:21:b2:dc:2b:81:27:5f:c4:e4:ba:42:3b:
                    e6:24:67:8e:dd:12:2c:3c:5a:2e:62:74:fa:03:c2:
                    47:f1:0a:2f:22:4a:97:ad:61:5e:34:e8:8f:39:02:
                    e9:5e:d9:47:89:36:a3:a6:59:00:02:19:2b:ee:89:
                    1d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C0:26:36:8F:ED:00:7A:16:18:92:BC:4E:A4:D0:94:0F:9E:4F:28
            X509v3 Authority Key Identifier:
                keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:14:b5:f9:cc:e7:6c:4b:b8:2d:c3:4f:75:13:52:d4:76:45:
         a0:7b:36:c5:02:3e:7c:e8:a8:ab:7f:70:28:eb:c2:6d:7a:85:
         b0:4d:8c:02:03:1a:24:e2:2b:68:8e:58:5d:61:1e:fd:04:31:
         0e:7a:b1:94:49:7c:5f:8b:dc:f8:f8:55:e7:26:51:09:d3:a3:
         c1:51:cb:ca:c0:e1:3e:66:b3:4c:05:ea:6f:36:ce:d0:c2:b8:
         e6:47:50:c9:07:c3:38:9b:50:67:11:e3:00:cc:b0:62:56:c3:
         34:32:1d:fe:f6:95:f8:08:cd:b2:a2:39:09:99:39:37:fc:29:
         88:22:a3:03:7d:00:72:15:fc:84:38:62:97:08:bd:19:00:d0:
         b3:f6:77:dc:22:66:b3:54:dd:4d:53:e1:0c:0f:38:27:61:12:
         01:d9:25:f3:bf:ae:73:61:b5:7a:6e:a3:bf:f2:1f:d6:91:2c:
         7e:d9:36:8a:79:11:dc:34:68:a3:14:2b:67:da:e2:7b:40:ae:
         af:8b:dc:67:9a:82:fb:06:48:e4:a3:0f:be:da:33:d4:fc:e3:
         ae:1c:dc:45:72:0a:d7:46:7d:0c:cf:ff:8b:63:1b:0a:82:e3:
         aa:84:f9:9c:23:a2:e2:0e:70:94:e6:15:3a:12:0f:6f:a8:8e:
         a1:0f:41:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 04:53:24 2026 by rpki-client