Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
File:                     E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft (raw, json)
Hash identifier:          K3EIo0UvTGG9V/W0I6nFSPL+k716eNmqWxRB0uEAZ3U=
Subject key identifier:   BF:89:17:90:6C:2C:9D:A2:05:CE:C3:DD:BB:9A:72:A3:21:D2:55:97
Authority key identifier: 13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
Certificate issuer:       /CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Certificate serial:       01A0E73F7F34C4100D97C1AF7C2926940783
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
Manifest number:          115F
Signing time:             Mon 28 Sep 2026 09:01:33 +0000
Manifest this update:     Mon 28 Sep 2026 09:01:33 +0000
Manifest next update:     Tue 29 Sep 2026 09:01:33 +0000
Files and hashes:         1: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl (hash: 0OeWPfp9PwUN1tMpSEn6r6f5HB0Q7TPPRtDubRhZH4k=)
                          2: sjVifTsqCFnPEPjh_BafeqtcnzE.roa (hash: U+Qobqemfwl34W+0l2bHf3Kc8qUqCwokA6NOdvQQ/0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 09:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:3f:7f:34:c4:10:0d:97:c1:af:7c:29:26:94:07:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
        Validity
            Not Before: Sep 28 09:01:33 2026 GMT
            Not After : Sep 29 09:01:33 2026 GMT
        Subject: CN=bf8917906c2c9da205cec3ddbb9a72a321d25597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:e0:32:0f:e2:9a:28:03:dd:11:bd:b7:86:
                    fc:68:58:bb:b9:1b:9a:11:37:f3:0f:94:69:c3:ad:
                    5e:65:a4:36:ff:73:d9:dd:1b:e2:f6:89:71:a5:e2:
                    14:51:9c:e4:71:e0:5f:fd:63:57:9d:ab:08:90:07:
                    da:98:a2:c2:a6:d7:17:fc:80:47:17:15:19:29:a8:
                    f4:41:60:a7:95:0c:08:9e:4f:cf:5c:55:da:9d:fc:
                    33:2f:ba:00:91:4d:67:c1:d2:3f:79:97:db:0b:b4:
                    33:2b:f8:8b:ab:d8:4f:a2:9d:3d:0b:f4:a8:ed:8f:
                    53:b8:7c:f1:5e:97:17:c2:92:e5:e1:ef:b9:d1:94:
                    12:4e:3d:63:56:54:88:b3:58:12:58:cd:97:57:34:
                    2e:a6:9b:61:50:6b:c6:58:29:23:0f:c5:7e:6f:32:
                    c4:76:e1:dc:e5:3c:6f:1b:1c:1f:be:63:9a:a3:1c:
                    e9:c9:7a:20:6d:38:78:fd:cf:93:fc:7c:5e:8a:f6:
                    6f:dd:f7:50:94:8e:c1:2f:17:69:25:44:f1:a0:83:
                    96:9d:e7:c4:b7:1e:10:7e:4e:73:8a:63:11:6d:88:
                    e3:58:30:8e:20:c5:ae:fa:b3:8d:38:f5:bb:18:80:
                    3d:3e:88:bc:24:ff:65:31:c7:41:74:6e:24:ed:82:
                    a1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:89:17:90:6C:2C:9D:A2:05:CE:C3:DD:BB:9A:72:A3:21:D2:55:97
            X509v3 Authority Key Identifier:
                keyid:13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d9:9c:84:23:ed:ac:2e:a0:62:5f:9c:fd:ef:34:84:e4:b9:
         4c:5d:bc:94:82:00:c5:2a:3e:81:9b:20:85:86:52:d6:b5:50:
         03:83:90:9b:ca:39:54:9f:84:0a:ae:4d:0c:15:a3:ed:1d:37:
         80:f4:9a:c2:66:eb:2a:ea:2b:e8:1d:52:69:c9:4d:ad:b8:11:
         dc:f7:b8:24:89:71:fb:22:9f:50:72:ba:70:4d:56:dc:6c:39:
         aa:82:92:51:3c:23:58:44:b0:bf:7f:e1:34:a8:db:1a:6f:8c:
         46:8b:c9:bc:93:92:5b:e0:6b:0b:d8:1b:8e:87:8f:bf:b5:f7:
         e5:b8:53:08:90:37:2f:71:29:f9:c5:a5:0a:26:65:00:22:30:
         a7:d1:0e:c7:39:2a:6c:a7:b0:99:dc:43:d1:ca:ed:02:c5:68:
         8d:8a:06:27:ab:a4:cd:80:a7:b5:12:a4:7d:1f:71:77:a3:0a:
         e6:ee:31:d9:3c:d4:c9:94:90:19:bf:40:19:6f:35:10:9f:eb:
         79:49:b1:10:0f:75:1d:90:88:b2:d6:96:51:a9:eb:d2:6f:20:
         18:b2:b3:7a:8a:fe:ef:69:37:8b:a3:61:1e:53:9a:1a:19:60:
         fa:ac:75:8b:9d:5e:ed:24:03:61:52:35:f9:32:4b:5d:3a:1e:
         da:23:12:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:49:55 2026 by rpki-client