Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File:                     eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier:          tdpjUsfZraRFCnOHIzqtdNNyT9+9mjCx2ur6WNd54bI=
Subject key identifier:   01:11:65:48:64:76:83:2B:4A:40:5D:50:39:64:BE:B2:5F:A0:EF:F4
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer:       /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial:       01A108141D44AE9A0220595D73B6C033180A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number:          0F33
Signing time:             Sun 04 Oct 2026 18:01:38 +0000
Manifest this update:     Sun 04 Oct 2026 18:01:38 +0000
Manifest next update:     Mon 05 Oct 2026 18:01:38 +0000
Files and hashes:         1: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: 5tT/LPo4Xr6M5cio/ueQ4oXpDnYcFxcvsos+ekuU3S4=)
                          2: qbIaJec-toVL64n7z-uuxLGTIAQ.roa (hash: T1ieQtaDmRsidOYkDXdJkWB5IsW3s99F+xa0mkqLysM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:08:14:1d:44:ae:9a:02:20:59:5d:73:b6:c0:33:18:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
        Validity
            Not Before: Oct  4 18:01:38 2026 GMT
            Not After : Oct  5 18:01:38 2026 GMT
        Subject: CN=011165486476832b4a405d503964beb25fa0eff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:04:9e:d0:b0:60:d3:36:5c:0a:33:9d:ae:1d:
                    e9:1b:8a:9a:27:2e:76:31:8d:5e:7e:d6:84:86:bd:
                    7b:21:65:8f:be:0b:02:b0:ed:6a:01:4c:09:f6:53:
                    99:b1:42:fd:30:fd:e9:10:68:16:3f:4e:d6:f8:7c:
                    f7:a7:a3:a2:89:da:28:a0:94:bc:0a:8c:fb:0b:1f:
                    66:5e:db:16:57:66:41:b0:57:d7:cc:4b:5c:44:70:
                    35:f9:3b:77:b9:3b:d0:ad:95:a8:b4:82:7d:85:9d:
                    44:36:14:4c:63:c9:a5:84:f2:ee:96:7e:2b:78:f7:
                    f7:db:c7:05:63:20:bb:33:80:e6:5e:45:ab:25:b0:
                    a6:dc:62:1e:26:c5:31:b3:11:73:32:cf:ae:90:71:
                    d0:97:78:75:08:7a:a9:cf:5e:50:70:4f:1a:41:ce:
                    03:e8:2b:d0:23:43:29:58:aa:a2:c9:63:e1:1e:e2:
                    16:e3:d5:a7:3d:0d:3c:2a:0e:42:e5:ab:5b:19:a2:
                    20:e3:96:3e:12:cd:c6:cf:05:f6:03:9b:29:01:00:
                    5a:cd:3f:e0:25:c0:56:54:fd:09:f9:7a:d0:99:62:
                    4f:23:a7:ac:e0:51:0b:24:d3:67:b8:37:ad:ee:f9:
                    21:bf:59:d0:08:28:1a:2c:ea:03:0d:3e:24:61:9d:
                    46:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:11:65:48:64:76:83:2B:4A:40:5D:50:39:64:BE:B2:5F:A0:EF:F4
            X509v3 Authority Key Identifier:
                keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c9:a3:3a:0b:79:3c:51:a7:2a:a7:cc:3f:50:6e:48:3f:72:
         ee:0b:00:20:3b:d9:bf:17:57:c6:a5:77:57:25:5d:40:2c:ec:
         c4:56:bd:d7:d3:c9:53:90:74:a0:a3:dd:32:5a:8d:59:41:53:
         ad:74:ce:e8:59:00:0e:14:52:41:3a:99:e5:cd:03:53:b7:3b:
         41:a2:0a:40:f8:f6:c0:e8:0d:1e:5d:af:7e:a6:ef:5d:50:de:
         14:2a:dd:09:35:cb:a5:4d:a7:9c:eb:73:82:e8:28:b3:88:34:
         bb:f6:4b:31:a5:38:30:e3:0f:d0:52:5c:01:c9:b6:52:4e:a1:
         ab:99:16:71:68:59:7f:6e:52:99:d8:0c:57:b1:f8:28:ef:e2:
         0c:af:6f:ea:5a:40:77:1d:cb:d2:1d:c6:b3:8d:67:55:34:b5:
         2a:ac:1e:83:17:e7:f8:ca:fa:3a:89:56:d1:fd:72:4e:cf:d2:
         e3:15:99:33:21:5e:80:3a:80:f4:d2:55:44:9e:2f:2b:6b:64:
         b1:45:cd:ca:fc:16:2f:32:d4:79:5d:c1:ae:59:1f:b8:07:52:
         33:13:d5:30:b8:86:09:c7:74:c2:d9:71:a9:db:cf:1a:18:86:
         7c:9a:76:39:43:2f:a8:96:58:e8:c5:d5:00:bf:7e:ac:cb:16:
         0d:10:0c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:01:20 2026 by rpki-client