Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/9e965a-f295-4ec0-a9d6-5e5abd0e2805/1/EQy2Xfv0pq3apMXgg5qJk6OQ2gs.mft
File:                     EQy2Xfv0pq3apMXgg5qJk6OQ2gs.mft (raw, json)
Hash identifier:          H7dtKgJPLg5xWTCMcBmQtyBHZuVtVoQ0lluNe0OfTqQ=
Subject key identifier:   BE:32:D1:0F:FC:6E:B1:EF:EA:34:66:7C:57:B8:57:35:74:27:4D:88
Authority key identifier: 11:0C:B6:5D:FB:F4:A6:AD:DA:A4:C5:E0:83:9A:89:93:A3:90:DA:0B
Certificate issuer:       /CN=110cb65dfbf4a6addaa4c5e0839a8993a390da0b
Certificate serial:       01A1261DD8363D9DA9ADBD5D6C233BDE17B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQy2Xfv0pq3apMXgg5qJk6OQ2gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/9e965a-f295-4ec0-a9d6-5e5abd0e2805/1/EQy2Xfv0pq3apMXgg5qJk6OQ2gs.mft
Manifest number:          45
Signing time:             Sat 10 Oct 2026 14:00:52 +0000
Manifest this update:     Sat 10 Oct 2026 14:00:52 +0000
Manifest next update:     Sun 11 Oct 2026 14:00:52 +0000
Files and hashes:         1: 0txqVoYoRq02yNIrhX49LTIof3M.asa (hash: Qphj0BiGCj2TI4zxKCc9q3mBKIrFTpgysYgc+lJX2bg=)
                          2: EQy2Xfv0pq3apMXgg5qJk6OQ2gs.crl (hash: tlPOSTF3xuH5w05OX4wn/QEtT1GzJt2vHjXEcumi/gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/9e965a-f295-4ec0-a9d6-5e5abd0e2805/1/EQy2Xfv0pq3apMXgg5qJk6OQ2gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/9e965a-f295-4ec0-a9d6-5e5abd0e2805/1/EQy2Xfv0pq3apMXgg5qJk6OQ2gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQy2Xfv0pq3apMXgg5qJk6OQ2gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:26:1d:d8:36:3d:9d:a9:ad:bd:5d:6c:23:3b:de:17:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110cb65dfbf4a6addaa4c5e0839a8993a390da0b
        Validity
            Not Before: Oct 10 14:00:52 2026 GMT
            Not After : Oct 11 14:00:52 2026 GMT
        Subject: CN=be32d10ffc6eb1efea34667c57b8573574274d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:ef:e9:fb:88:b9:4a:8e:29:f4:25:cf:9a:
                    ef:75:b6:2b:81:a8:70:51:d9:18:96:69:bd:1e:00:
                    bd:ba:47:b4:e0:53:f4:38:12:2e:46:63:f5:44:6c:
                    38:2c:b8:eb:a4:1f:97:58:43:53:c7:3e:4c:44:bf:
                    46:26:75:43:95:86:d8:f9:49:f8:dc:fa:42:6e:df:
                    83:d3:ab:8d:aa:b4:49:db:2f:82:5d:6c:d1:90:95:
                    10:f6:18:1f:62:ab:99:00:2f:2a:d1:f8:1d:22:2a:
                    6c:6e:07:8f:fd:b3:69:a9:16:c2:84:76:e8:1f:34:
                    1f:23:14:d7:da:10:99:a0:13:38:08:e9:29:1d:d6:
                    90:d7:79:53:29:7b:21:48:d7:53:12:1e:be:73:85:
                    b6:33:b8:13:60:8f:27:83:b7:96:7c:1b:8c:eb:81:
                    6f:0a:3f:80:08:ba:fe:34:4c:a4:ef:59:10:3f:43:
                    18:02:84:8e:4c:02:1e:ed:c6:df:37:89:10:7d:07:
                    17:c8:63:53:e8:cd:20:4f:73:4a:b9:b8:c3:78:a4:
                    ee:77:2f:22:6a:6b:76:3b:36:a8:2f:8e:d5:42:2a:
                    ff:ef:4d:d4:d6:50:6a:88:b1:b8:35:c2:55:f3:9f:
                    3a:7f:c0:3a:c1:47:38:98:b1:1b:7c:f6:63:77:93:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:32:D1:0F:FC:6E:B1:EF:EA:34:66:7C:57:B8:57:35:74:27:4D:88
            X509v3 Authority Key Identifier:
                keyid:11:0C:B6:5D:FB:F4:A6:AD:DA:A4:C5:E0:83:9A:89:93:A3:90:DA:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQy2Xfv0pq3apMXgg5qJk6OQ2gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9e965a-f295-4ec0-a9d6-5e5abd0e2805/1/EQy2Xfv0pq3apMXgg5qJk6OQ2gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9e965a-f295-4ec0-a9d6-5e5abd0e2805/1/EQy2Xfv0pq3apMXgg5qJk6OQ2gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0b:1b:4a:91:3d:62:3b:ef:0d:06:29:fe:23:c2:f1:32:5a:
         22:33:a8:01:33:b6:f0:7b:6e:13:d3:85:46:91:d0:26:e3:f1:
         0c:c5:d4:a7:b2:fa:d3:eb:80:3b:46:a9:fa:2d:58:ae:24:6f:
         33:e7:18:38:ae:9f:74:88:b1:bd:2d:1d:fd:19:db:2c:5e:6b:
         ff:97:3e:a6:de:91:a8:c3:5f:bb:87:f2:5c:d2:dc:6d:e5:c5:
         7c:0f:cb:ab:4c:47:43:b5:54:5a:76:ea:21:84:d1:8c:a6:19:
         ef:c8:9d:57:fe:ab:1a:f7:82:5f:3f:75:3c:9e:ef:07:66:91:
         32:ae:bf:3e:9d:43:a2:ab:d9:1f:62:39:2d:90:4c:cf:71:8d:
         fb:ec:e2:54:3f:3a:9f:0a:14:24:6a:42:f0:ab:a2:42:64:68:
         c0:e7:d8:dd:92:cd:be:dd:b5:fd:9a:40:23:8a:54:d9:fc:d9:
         72:08:65:51:9a:f8:ee:68:4d:cc:82:1f:82:c3:1d:26:c9:65:
         c0:cd:2b:7d:50:5b:f5:3b:09:91:b0:2e:c7:59:ba:81:67:87:
         2c:e5:e6:c1:cf:eb:0e:4e:20:8c:f4:55:f7:2d:ee:29:0f:af:
         8c:da:36:66:2b:88:ae:c1:be:2a:10:ee:51:97:1e:89:8e:28:
         a5:e3:b7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:41:04 2026 by rpki-client