Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
File:                     E--253AYyTVaU4hW1OueUGl19TU.mft (raw, json)
Hash identifier:          bcG8vGycTXtGdZ33ObX4Bhks0UwyOygtjCc7kBkvamM=
Subject key identifier:   00:65:FC:29:CF:DE:55:B4:9B:0B:1A:6B:1C:F3:5D:D9:F0:20:FD:3C
Authority key identifier: 13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35
Certificate issuer:       /CN=13efb6e77018c9355a538856d4eb9e506975f535
Certificate serial:       01A0E888D4896582B79949C92977EBB75DC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
Manifest number:          0330
Signing time:             Mon 28 Sep 2026 15:01:16 +0000
Manifest this update:     Mon 28 Sep 2026 15:01:16 +0000
Manifest next update:     Tue 29 Sep 2026 15:01:16 +0000
Files and hashes:         1: E--253AYyTVaU4hW1OueUGl19TU.crl (hash: MDzFCoddgNWpmfbw5nTslut1NKXl769+audP5rb84Zo=)
                          2: pn0eecPtI3ydGJyzmDixGdijU0M.roa (hash: hsAKDf191EtjscgSuEpFCHm/Jr/4jq8uJLk58v0knFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:88:d4:89:65:82:b7:99:49:c9:29:77:eb:b7:5d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13efb6e77018c9355a538856d4eb9e506975f535
        Validity
            Not Before: Sep 28 15:01:16 2026 GMT
            Not After : Sep 29 15:01:16 2026 GMT
        Subject: CN=0065fc29cfde55b49b0b1a6b1cf35dd9f020fd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e2:35:f2:65:dd:1b:e1:bd:32:b1:c0:80:a8:
                    6c:3a:59:5b:df:06:18:37:41:ad:ec:a2:5f:50:08:
                    03:80:e2:09:cd:77:06:c2:b9:26:13:53:c4:62:d3:
                    7f:dc:c3:25:44:49:21:b6:39:4f:04:00:c6:95:72:
                    6f:ad:6b:c2:3c:87:0b:de:c6:c1:a8:15:de:a1:c1:
                    bb:35:7d:13:84:92:71:80:c4:6f:17:5c:63:9f:5c:
                    96:00:43:e0:3a:98:11:c5:97:ac:44:91:40:c9:ff:
                    86:32:09:f7:95:cb:77:b8:7f:69:0e:df:7b:11:c7:
                    19:0a:46:c3:0d:e4:fb:3b:91:bd:6d:b7:92:df:43:
                    1d:5b:de:80:5a:b2:c2:d4:6d:63:49:15:bb:fc:f2:
                    a8:80:3f:35:cc:27:7b:18:f1:c8:e2:6d:38:dc:94:
                    a2:8a:98:2a:f7:32:ff:ff:91:d6:00:79:f0:db:cf:
                    ff:ec:06:9d:b3:4c:83:b7:8b:d3:04:5c:96:bb:ce:
                    85:ed:82:48:2a:9a:bb:55:1d:f6:22:72:ba:f4:01:
                    fc:3c:46:27:fd:05:23:06:7f:02:b5:dc:10:1b:08:
                    df:7c:cf:63:06:c7:50:27:4e:77:d8:27:57:3c:f1:
                    08:53:92:ee:be:88:9a:77:d3:5d:0d:d9:79:5d:b9:
                    f6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:65:FC:29:CF:DE:55:B4:9B:0B:1A:6B:1C:F3:5D:D9:F0:20:FD:3C
            X509v3 Authority Key Identifier:
                keyid:13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ff:b1:1e:38:c1:70:81:40:1e:39:12:ce:41:86:2b:55:61:
         d5:a1:54:c7:8e:a3:97:a1:5d:cd:36:e6:50:a1:17:3c:28:ac:
         9a:2b:db:68:81:b9:39:c6:de:17:b4:94:4a:71:ee:0a:48:f1:
         fc:df:a6:1e:52:83:e9:b4:2f:e2:bc:97:f0:29:a9:70:61:84:
         7f:c4:3d:fe:2e:7a:02:a8:ab:88:63:8d:9e:89:90:b3:fe:28:
         a7:4e:a7:40:1d:19:f4:09:b7:6b:89:b6:f3:77:cf:ed:3b:c7:
         f7:36:59:43:98:fe:ec:5b:d6:e6:3e:69:4f:49:fc:b2:28:69:
         32:8b:2e:dc:d9:47:34:76:ab:bd:a4:9f:59:2c:36:f9:e6:d2:
         3e:d1:c9:73:b8:0e:cb:72:7f:fa:d0:08:d0:6c:d4:66:13:99:
         9b:d2:cd:61:60:15:c4:78:33:47:c2:9a:f9:14:70:5f:72:37:
         9c:e4:ff:cb:55:7e:84:d6:82:9b:fc:d9:38:c6:d8:1e:75:c7:
         0c:d5:59:12:26:b8:2f:c3:04:ca:2b:93:66:c4:b7:29:a6:83:
         a4:00:79:0c:70:48:28:4c:b1:86:ef:14:89:6f:4e:d4:51:49:
         12:0c:fb:4a:eb:f9:6e:09:e4:64:56:2e:65:1d:86:f4:ab:ca:
         e5:60:b8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:18:47 2026 by rpki-client