Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
File:                     EPt5C_XsxPQgY7C5YKmU95kClQs.mft (raw, json)
Hash identifier:          HpjH4XzOYm4+c5KFZUVZqK6zlnel0Hw4Ii/5BrLG5/4=
Subject key identifier:   30:46:3D:89:0B:99:9B:DC:77:23:53:48:4A:95:E6:78:E8:75:AF:F9
Authority key identifier: 10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B
Certificate issuer:       /CN=10fb790bf5ecc4f42063b0b960a994f79902950b
Certificate serial:       01A13590AAE9F118A07A4DA4823428B5F9C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
Manifest number:          033D
Signing time:             Tue 13 Oct 2026 14:00:35 +0000
Manifest this update:     Tue 13 Oct 2026 14:00:35 +0000
Manifest next update:     Wed 14 Oct 2026 14:00:35 +0000
Files and hashes:         1: EPt5C_XsxPQgY7C5YKmU95kClQs.crl (hash: mFuInpvTICqNGGxJgSuAOrTIFirUwVrUN9sAkC6foOs=)
                          2: QlWvHkFefgt8b65GtnQ9BWdmuEA.asa (hash: 742qjyA1AawGih0s10BDQYzxDeEAV9mVKYVyfwrup1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:47:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:90:aa:e9:f1:18:a0:7a:4d:a4:82:34:28:b5:f9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fb790bf5ecc4f42063b0b960a994f79902950b
        Validity
            Not Before: Oct 13 14:00:35 2026 GMT
            Not After : Oct 14 14:00:35 2026 GMT
        Subject: CN=30463d890b999bdc772353484a95e678e875aff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c3:34:2c:a3:48:52:0d:7a:11:b3:22:37:0c:
                    b6:1d:5c:09:cf:f0:e6:0d:32:fa:97:f3:11:0e:3a:
                    7d:e8:52:77:0a:94:82:73:df:73:90:2f:e4:5a:fb:
                    ff:35:1a:8d:02:f4:2a:a8:e6:e8:2d:94:04:d4:6d:
                    14:e4:b9:fc:8d:48:be:28:7b:1e:1c:43:a8:01:ba:
                    da:b3:74:7f:91:81:60:25:77:77:45:69:fd:f4:81:
                    52:e6:ab:dc:81:64:d8:57:1d:06:07:e2:03:f5:9d:
                    b3:e0:8a:36:b1:40:91:6c:73:bf:c5:ef:2c:2b:0b:
                    33:05:82:14:a2:77:56:bf:f9:54:4b:8e:38:89:24:
                    77:44:be:42:6f:89:e4:7e:b9:1a:64:eb:21:34:88:
                    cd:5c:02:88:86:83:0e:4d:61:8f:5b:5c:74:a3:af:
                    88:8d:78:99:f3:20:f3:d8:21:8e:f9:25:9d:2a:c6:
                    be:3a:e3:7e:82:fd:55:c1:70:e0:11:be:d1:b0:3f:
                    f7:81:12:29:cb:6b:7a:8a:e5:e1:5b:da:2b:fc:07:
                    79:00:3c:79:14:a8:9c:b3:ec:06:54:82:f0:2a:f3:
                    bc:a2:f4:a2:18:dc:f3:71:cc:cf:7d:17:61:2d:42:
                    ed:31:08:81:9e:e5:bb:d7:f6:3a:ad:ad:6e:4a:3a:
                    db:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:46:3D:89:0B:99:9B:DC:77:23:53:48:4A:95:E6:78:E8:75:AF:F9
            X509v3 Authority Key Identifier:
                keyid:10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a0:75:ff:24:18:67:b5:3d:57:ea:62:85:3b:a5:2e:c6:a8:
         ba:ec:a0:23:89:9e:ae:42:82:bf:8b:0d:e9:07:39:b5:a1:33:
         5f:c7:28:f8:2d:26:c0:1c:95:23:0c:92:e1:62:2f:d5:4d:95:
         09:e9:a9:b0:0a:3c:3e:8c:1b:58:9e:89:fb:12:07:2a:7b:c3:
         6f:01:66:5f:61:3b:8b:fa:84:aa:77:4e:17:d3:32:e1:0c:5f:
         d6:13:9e:81:bf:a1:3c:69:63:d1:d2:33:6e:a0:b7:ff:99:17:
         b5:9d:9e:c3:2a:30:7f:4d:9a:26:28:bf:15:dc:c7:b3:33:e4:
         20:25:92:ab:22:27:c6:25:d7:ad:b8:2d:e8:e2:d9:80:fa:a2:
         9d:d3:d6:87:c9:90:e5:43:09:cd:e0:4e:47:95:64:a4:4c:87:
         87:bd:5e:0b:c0:2f:69:ae:d4:e8:86:5e:d8:f0:ce:e1:9b:6e:
         23:90:bc:04:a5:76:53:ef:dc:0b:26:9b:bb:0d:c6:50:d7:9a:
         8e:95:45:c9:e5:70:0b:f9:02:d5:dd:3e:b7:1c:70:2b:c2:57:
         64:c7:ed:57:75:01:84:3c:3a:87:08:81:d8:0c:1a:95:f4:66:
         a1:c6:3e:8c:39:7a:c1:1b:08:0b:98:6e:c5:97:15:1b:cd:3f:
         7f:97:55:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:04:32 2026 by rpki-client