Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.mft
File:                     EQnNl_ja-OKOnjY_oidxR7iMj9I.mft (raw, json)
Hash identifier:          5maTmmpCGDGVYX+AaE0nYljVxiKmhYK0xMrN40SJ4Uo=
Subject key identifier:   A1:58:CB:9C:0B:E1:EA:09:F3:54:0A:1A:07:4C:08:1D:F9:E5:89:40
Authority key identifier: 11:09:CD:97:F8:DA:F8:E2:8E:9E:36:3F:A2:27:71:47:B8:8C:8F:D2
Certificate issuer:       /CN=1109cd97f8daf8e28e9e363fa2277147b88c8fd2
Certificate serial:       01A1013692A54E79E90377F15BCC6F30D421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQnNl_ja-OKOnjY_oidxR7iMj9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.mft
Manifest number:          FA
Signing time:             Sat 03 Oct 2026 10:01:55 +0000
Manifest this update:     Sat 03 Oct 2026 10:01:55 +0000
Manifest next update:     Sun 04 Oct 2026 10:01:55 +0000
Files and hashes:         1: EQnNl_ja-OKOnjY_oidxR7iMj9I.crl (hash: jaRZuinX+H0KMPz5WmbTHNJI0KteOHpf2qRjVzBra84=)
                          2: MjyhcIDP5Cuj0z7nBld4_C2DGvQ.roa (hash: 4k0Ys4b3Bg2O9bxcwTlvra4F9uJDHWsWf5y4VFTdqqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQnNl_ja-OKOnjY_oidxR7iMj9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:01:36:92:a5:4e:79:e9:03:77:f1:5b:cc:6f:30:d4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1109cd97f8daf8e28e9e363fa2277147b88c8fd2
        Validity
            Not Before: Oct  3 10:01:55 2026 GMT
            Not After : Oct  4 10:01:55 2026 GMT
        Subject: CN=a158cb9c0be1ea09f3540a1a074c081df9e58940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:60:d6:b5:74:86:df:7f:fd:e4:f5:a5:e0:34:
                    fd:06:d9:8d:4d:eb:49:ed:9f:56:71:b4:65:f9:b7:
                    36:ab:33:1b:fd:1f:e1:78:04:9c:10:2c:86:70:09:
                    f3:35:2c:ba:1c:94:c1:ff:1d:e1:87:45:be:81:24:
                    79:4d:61:cb:8d:88:e2:c9:9a:3d:16:ad:e1:89:43:
                    ed:96:b2:cf:bd:a9:68:5b:ed:9e:a1:a2:36:85:19:
                    31:e5:2a:d0:c3:40:d7:a2:d1:59:ff:72:3b:ce:15:
                    a7:f1:93:a7:64:1d:17:8d:fa:cd:94:29:dd:84:17:
                    92:eb:27:c9:a1:13:59:9e:74:8b:4d:77:97:35:7e:
                    04:fc:e1:11:fc:ea:d2:5f:e4:3a:12:81:6d:cf:cf:
                    1b:51:e6:1b:3b:ef:f5:2a:64:31:3e:bc:2b:36:36:
                    90:35:cd:8f:57:04:5d:cc:b0:e0:c5:37:07:4a:0f:
                    40:1a:fe:cc:63:fa:ec:0f:1b:15:70:ac:71:c9:c8:
                    a1:13:35:cc:2a:90:93:1f:c2:3b:03:4b:a0:68:9d:
                    74:68:34:48:57:a1:af:43:14:5c:c3:7a:e5:e0:6b:
                    0f:f5:8e:f9:e1:61:13:88:50:91:7c:be:96:c9:c6:
                    e6:d9:1a:65:ec:95:a3:96:21:d9:92:8c:ec:48:af:
                    23:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:58:CB:9C:0B:E1:EA:09:F3:54:0A:1A:07:4C:08:1D:F9:E5:89:40
            X509v3 Authority Key Identifier:
                keyid:11:09:CD:97:F8:DA:F8:E2:8E:9E:36:3F:A2:27:71:47:B8:8C:8F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQnNl_ja-OKOnjY_oidxR7iMj9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:7e:d2:ef:8a:e1:65:ab:d8:07:29:03:4c:aa:6f:9b:76:29:
         c3:53:15:0f:33:76:ff:aa:1e:27:0a:a4:ce:99:19:3d:7b:3b:
         fb:df:c5:e7:fa:da:55:1a:84:5f:53:9f:31:17:3a:4b:05:52:
         6e:8d:84:2c:0f:f6:f8:1e:1d:a4:68:71:9f:6c:a3:25:6f:19:
         4e:7f:1b:a3:f7:87:3b:80:e3:c0:3d:94:a3:d0:3b:38:d5:56:
         2f:2c:90:7c:25:80:48:fe:08:16:bf:2b:1a:7d:bc:7b:bc:10:
         97:26:d0:9a:9c:94:c7:de:2b:b1:e3:09:6f:1e:00:c6:01:80:
         10:56:51:47:2e:ff:81:61:65:26:76:1b:6b:96:bc:bc:d5:02:
         e0:fe:cf:13:68:dc:aa:f5:b0:41:b6:bb:70:04:4b:b6:6c:32:
         f2:85:73:43:30:38:03:43:5f:51:43:01:77:f5:16:2b:5e:8e:
         1f:9e:f0:1a:19:a9:12:d0:8e:7a:d3:23:ca:b5:86:e3:7b:4b:
         3a:ce:e3:53:15:e8:9c:9a:81:ec:50:87:30:19:9f:f5:aa:8a:
         79:62:07:1f:62:3b:4b:95:db:91:e5:31:cd:a8:e4:7c:34:26:
         37:d6:da:31:e6:8d:f0:ec:bf:b0:0e:35:7c:b6:5e:65:a8:9d:
         77:89:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:16:59 2026 by rpki-client