Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
File:                     EXdPipmODyrxj3UnnjJlSBNpRIg.mft (raw, json)
Hash identifier:          hJajmhFFFH1Lx9K61rCuzjUbVyH9OKZgRWVYMFicMNY=
Subject key identifier:   E6:1F:F4:B9:9A:B6:34:6D:E5:F9:7A:27:C4:53:C2:D3:1A:C6:D4:ED
Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
Certificate issuer:       /CN=11774f8a998e0f2af18f75279e32654813694488
Certificate serial:       01A0CC35CF3B5B9D571A0B4A187507373507
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
Manifest number:          08AE
Signing time:             Wed 23 Sep 2026 03:01:13 +0000
Manifest this update:     Wed 23 Sep 2026 03:01:13 +0000
Manifest next update:     Thu 24 Sep 2026 03:01:13 +0000
Files and hashes:         1: EXdPipmODyrxj3UnnjJlSBNpRIg.crl (hash: tSJYwp4NAq6QnquCFKfcKuzT6lrLM/z3FSR2BlV5Ddg=)
                          2: Of6AglNJHlgcluYUlIjfioWiCKI.roa (hash: sDgKEq0ut0vUDDCpX/3A3ZadxIlIok7qphOucEB2uLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:cf:3b:5b:9d:57:1a:0b:4a:18:75:07:37:35:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11774f8a998e0f2af18f75279e32654813694488
        Validity
            Not Before: Sep 23 03:01:13 2026 GMT
            Not After : Sep 24 03:01:13 2026 GMT
        Subject: CN=e61ff4b99ab6346de5f97a27c453c2d31ac6d4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2d:bf:fd:15:af:6e:1b:bd:0b:c4:c3:09:e1:
                    5f:b1:e1:5c:0c:bb:a1:05:d9:3c:7b:4a:45:1a:42:
                    5b:0a:84:e7:ca:a5:ae:ec:b9:1b:38:ed:4a:d9:ac:
                    cf:f5:2f:18:18:1e:d4:97:8b:57:cc:0d:93:18:6e:
                    1b:b5:96:37:be:ef:89:43:7a:89:d6:f7:4f:4a:b7:
                    1b:e1:e4:90:84:e2:db:13:43:98:f9:5f:9d:43:a0:
                    d1:26:0b:71:72:46:18:a6:22:0a:df:e7:e6:a7:5a:
                    dd:d8:37:a5:4d:2b:8b:3f:f1:bf:63:71:0a:f1:8b:
                    d9:27:6c:e7:7c:fb:87:47:c8:11:43:a6:92:47:7c:
                    db:6e:62:7c:16:a1:4a:85:7e:2c:f7:b1:8c:14:00:
                    c5:1a:5b:84:e2:aa:e5:b4:b7:2d:2c:51:b1:9e:9e:
                    e3:d8:c6:69:f4:22:16:e5:4c:00:fb:27:da:fe:b8:
                    2c:14:c2:c0:1b:1f:9e:d8:40:22:ef:96:59:47:70:
                    be:28:60:1c:2b:13:12:3c:e9:5d:62:d2:48:70:6e:
                    ba:92:ef:93:dd:48:81:fa:6f:ca:0c:0d:88:43:18:
                    bd:25:f8:19:fe:6f:f9:96:59:36:55:6a:72:58:a5:
                    fa:b6:70:c9:1c:da:9e:7e:a3:c1:66:5e:e6:47:89:
                    1f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1F:F4:B9:9A:B6:34:6D:E5:F9:7A:27:C4:53:C2:D3:1A:C6:D4:ED
            X509v3 Authority Key Identifier:
                keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0f:ff:00:a0:96:0e:d4:0f:2f:bb:5f:a3:f5:01:c9:52:49:
         aa:e1:f7:75:06:85:16:30:25:8b:32:de:00:b2:fc:58:73:70:
         91:11:a5:d7:65:46:da:fe:d9:46:a5:bb:26:8c:82:7b:91:8a:
         4e:09:4a:d1:f3:b9:6c:6c:75:35:04:53:2d:ad:45:e7:c8:82:
         ea:43:e8:6c:56:ab:3b:db:8a:d1:ff:90:a6:6e:58:65:3c:38:
         8c:ef:26:bd:1b:14:81:01:0a:d3:75:04:4a:ec:d8:9b:6f:d3:
         4f:8b:43:74:36:c1:ad:2c:eb:3d:35:d0:c4:2d:14:f8:fc:4e:
         b6:7f:1c:37:43:6e:7c:c1:32:34:90:63:6f:fd:b1:47:73:9f:
         0f:5f:b8:b1:de:84:85:36:fe:52:8d:95:78:9a:06:39:75:30:
         eb:73:d2:db:f5:79:1a:69:20:d9:fd:e8:40:aa:22:17:32:47:
         62:f0:9b:93:6e:40:e2:7a:b8:7a:5b:8c:f9:92:a1:76:4b:a9:
         55:43:4d:f3:b1:0c:df:bd:27:c4:68:ca:98:2e:49:a0:7e:8a:
         a1:b8:53:e5:1e:aa:44:4e:38:91:22:e0:c8:f3:83:f2:ac:6e:
         de:5e:71:35:6d:fb:93:32:83:b5:7d:1e:50:60:0d:29:77:59:
         6c:75:ce:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:46:18 2026 by rpki-client