Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
File:                     EDqpCejbAPg3ekUNvKV9BR9L9DU.mft (raw, json)
Hash identifier:          q7McIpz8rMfOVWHtrKrb54Z1ygsFxHy0/8x5VEHyQRg=
Subject key identifier:   20:0F:E5:67:49:A6:CC:4F:52:99:03:29:A7:3E:12:B2:3D:28:EB:71
Authority key identifier: 10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
Certificate issuer:       /CN=103aa909e8db00f8377a450dbca57d051f4bf435
Certificate serial:       01A0C47B7053F3C934939128D801C697B0D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
Manifest number:          1A66
Signing time:             Mon 21 Sep 2026 15:00:18 +0000
Manifest this update:     Mon 21 Sep 2026 15:00:18 +0000
Manifest next update:     Tue 22 Sep 2026 15:00:18 +0000
Files and hashes:         1: EDqpCejbAPg3ekUNvKV9BR9L9DU.crl (hash: HytkKBEGxKhFoaBBs6xWnKmDEmNw8yXJG+kWhv3+xkA=)
                          2: zPL9SpEzbgv5hV90JadQIHwlZEo.roa (hash: oUod7lCzpgjd0dTnd1D/3YCd+gyJLYZuycYofSWlLPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7b:70:53:f3:c9:34:93:91:28:d8:01:c6:97:b0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103aa909e8db00f8377a450dbca57d051f4bf435
        Validity
            Not Before: Sep 21 15:00:18 2026 GMT
            Not After : Sep 22 15:00:18 2026 GMT
        Subject: CN=200fe56749a6cc4f52990329a73e12b23d28eb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c1:73:a0:e9:66:ca:37:1f:4b:1d:04:31:84:
                    63:f9:6d:ca:c1:08:4c:af:3a:af:18:35:36:9d:b2:
                    ae:38:4d:c1:a2:f2:88:23:f2:32:47:bc:a3:60:f8:
                    eb:1b:78:d6:81:3e:cc:d4:88:ac:91:a1:83:54:38:
                    28:61:1e:bc:7f:d9:70:c3:a8:e0:68:1a:48:fe:ea:
                    6c:3c:3e:11:4c:c1:84:1b:40:64:38:ed:d9:0a:10:
                    a0:36:d8:6b:ac:54:d7:13:22:0e:ae:3b:16:77:0a:
                    3b:34:91:64:6e:dc:b9:5f:15:1f:f7:a5:6e:16:c9:
                    0f:40:6a:42:6a:5e:86:a0:f3:fd:1e:58:0f:86:96:
                    01:f3:b4:43:ea:0a:e4:ee:88:f1:84:78:d4:45:61:
                    f6:47:50:55:cf:fe:90:e6:56:ff:81:6b:05:1b:9f:
                    51:4c:68:4b:16:59:a1:15:95:d8:fa:9b:c6:af:26:
                    45:06:a2:87:ce:59:aa:fd:21:76:ec:7c:d9:8e:64:
                    9c:f8:da:60:92:c6:92:af:0f:bb:3e:33:75:7e:21:
                    73:9a:d7:d0:e3:d6:8d:39:fa:31:8d:98:08:5b:e7:
                    60:93:99:f6:95:42:ff:af:25:c2:8b:e2:a9:ea:af:
                    2b:41:0c:1e:f6:fb:b7:63:c9:9a:fd:3d:49:6d:42:
                    70:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0F:E5:67:49:A6:CC:4F:52:99:03:29:A7:3E:12:B2:3D:28:EB:71
            X509v3 Authority Key Identifier:
                keyid:10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:45:5f:35:82:5a:67:b6:9f:da:6f:3a:73:52:a8:be:53:c3:
         cb:d7:ef:12:80:ca:c3:9a:00:7f:3f:a0:a1:84:07:e9:38:12:
         3f:7b:38:22:6e:cc:fa:e0:7f:83:b0:f5:45:da:74:b9:e3:1d:
         3a:ed:70:5e:d3:7a:96:45:65:27:1d:c9:17:fc:ee:48:ea:50:
         bf:75:03:df:20:35:56:8c:be:77:e3:d4:6e:ad:5c:99:42:32:
         0c:06:f3:97:21:36:ec:e9:4c:97:e2:64:91:1a:4c:80:19:83:
         b7:f7:9d:f6:0c:d0:e0:90:de:92:99:50:13:7e:16:26:e8:21:
         28:c4:ba:73:8c:2f:49:3f:e7:5d:51:fe:97:46:22:16:2d:6b:
         54:99:98:47:7b:95:3c:e9:99:aa:5a:b2:e4:83:dc:92:39:e2:
         82:45:61:f9:a2:24:b3:66:92:1a:ce:e2:4c:b3:f2:f4:28:27:
         85:70:08:5d:fa:41:0a:1c:0a:dc:be:bd:d9:f1:f0:42:c8:cc:
         f8:1a:14:5c:1e:d1:d8:f2:6e:9d:4a:df:c5:ba:ff:8f:4d:b8:
         fc:0a:9c:a5:b4:ec:95:3f:af:80:33:69:e6:9e:6a:05:36:1a:
         11:a1:e0:fc:09:9e:4e:75:64:68:03:88:aa:18:bc:ca:99:f9:
         52:d2:38:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEe3BT88k0k5Eo2AHGl7DWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwM2FhOTA5ZThkYjAwZjgzNzdhNDUwZGJjYTU3ZDA1MWY0
YmY0MzUwHhcNMjYwOTIxMTUwMDE4WhcNMjYwOTIyMTUwMDE4WjAzMTEwLwYDVQQD
EygyMDBmZTU2NzQ5YTZjYzRmNTI5OTAzMjlhNzNlMTJiMjNkMjhlYjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9cFzoOlmyjcfSx0EMYRj+W3KwQhM
rzqvGDU2nbKuOE3BovKII/IyR7yjYPjrG3jWgT7M1IiskaGDVDgoYR68f9lww6jg
aBpI/upsPD4RTMGEG0BkOO3ZChCgNthrrFTXEyIOrjsWdwo7NJFkbty5XxUf96Vu
FskPQGpCal6GoPP9HlgPhpYB87RD6grk7ojxhHjURWH2R1BVz/6Q5lb/gWsFG59R
TGhLFlmhFZXY+pvGryZFBqKHzlmq/SF27HzZjmSc+NpgksaSrw+7PjN1fiFzmtfQ
49aNOfoxjZgIW+dgk5n2lUL/ryXCi+Kp6q8rQQwe9vu3Y8ma/T1JbUJwZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAP5WdJpsxPUpkDKac+ErI9KOtxMB8GA1UdIwQY
MBaAFBA6qQno2wD4N3pFDbylfQUfS/Q1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRURxcENlamJBUGczZWtVTnZLVjlCUjlMOURVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yZjdjNzktM2Y2Yi00NDRhLThlYzUt
N2JkY2E3NTE2ZTc1LzEvRURxcENlamJBUGczZWtVTnZLVjlCUjlMOURVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yZjdjNzktM2Y2Yi00NDRhLThlYzUtN2JkY2E3NTE2ZTc1
LzEvRURxcENlamJBUGczZWtVTnZLVjlCUjlMOURVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUVfNYJa
Z7af2m86c1KovlPDy9fvEoDKw5oAfz+goYQH6TgSP3s4Im7M+uB/g7D1Rdp0ueMd
Ou1wXtN6lkVlJx3JF/zuSOpQv3UD3yA1Voy+d+PUbq1cmUIyDAbzlyE27OlMl+Jk
kRpMgBmDt/ed9gzQ4JDekplQE34WJughKMS6c4wvST/nXVH+l0YiFi1rVJmYR3uV
POmZqlqy5IPckjnigkVh+aIks2aSGs7iTLPy9CgnhXAIXfpBChwK3L692fHwQsjM
+BoUXB7R2PJunUrfxbr/j024/AqcpbTslT+vgDNp5p5qBTYaEaHg/AmeTnVkaAOI
qhi8ypn5UtI4dA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:54:24 2026 by rpki-client