Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
File:                     1EeBPOUqgj6h78mg9JM8XTNT7is.mft (raw, json)
Hash identifier:          32zDvXGlLEtFWQlJREl5+qvt47T5F9uLGoWxHalMaBE=
Subject key identifier:   52:7E:67:77:BB:35:88:5D:4D:3C:15:98:84:AF:FC:E9:50:41:EB:34
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Certificate issuer:       /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial:       01A0C3D73604628776AF60A68AA555C02F57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
Manifest number:          11C5
Signing time:             Mon 21 Sep 2026 12:00:56 +0000
Manifest this update:     Mon 21 Sep 2026 12:00:56 +0000
Manifest next update:     Tue 22 Sep 2026 12:00:56 +0000
Files and hashes:         1: 1EeBPOUqgj6h78mg9JM8XTNT7is.crl (hash: EK8g80DqxJy4cRTGtaMxSS2lF4Wo4AFRDB2d/UHnHbo=)
                          2: 3erXQOAGECj5Y6vmnhGhIcd5-n0.roa (hash: 2WH+ODOD46XHxqKVl9QqMpQ4varGLr3ciy4ehJamGPA=)
                          3: MPu6fCIQbDestuwTup6NlHm47os.roa (hash: /jMdojA5j2YqODXH/EpQYe19xNhK2fsG++ttAxdcuPc=)
                          4: zj1m99tPwrcxyT6BDJGJ3CugkIQ.roa (hash: twU1/m+1xw/8GtDgcT70cwUdWMg3Z1khilZnPoO3Wpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:d7:36:04:62:87:76:af:60:a6:8a:a5:55:c0:2f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
        Validity
            Not Before: Sep 21 12:00:56 2026 GMT
            Not After : Sep 22 12:00:56 2026 GMT
        Subject: CN=527e6777bb35885d4d3c159884affce95041eb34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b4:47:3a:c3:21:ec:1e:18:40:71:61:f3:8a:
                    b6:ee:be:f2:4d:15:10:d4:7f:a2:7b:e4:dd:be:cf:
                    12:94:7b:53:f0:45:2a:d4:b2:8f:c2:2e:3b:95:82:
                    31:6c:cb:87:53:2c:90:b7:9c:c6:64:8a:1b:f1:86:
                    eb:54:7f:4f:55:4c:09:6a:8e:69:d9:6f:40:32:9b:
                    de:65:cf:85:08:ee:4d:a1:ff:2e:56:6b:27:4b:19:
                    bd:e1:18:05:5e:6f:64:df:ba:cf:f0:0b:e4:8b:8d:
                    20:3c:41:0d:bd:2d:18:bd:a2:00:f5:81:87:ba:5c:
                    21:e3:e2:a3:17:75:70:d4:6b:ed:2e:5f:fa:94:3c:
                    5b:2a:bb:3a:5e:60:05:f8:21:8d:17:a7:ce:cf:75:
                    03:46:f6:57:8a:8b:b7:bd:fa:9e:ef:c1:d0:e9:e7:
                    9c:19:f4:09:ed:c9:be:53:0c:83:02:0b:7c:7f:7e:
                    62:76:a3:ca:1a:7f:0c:6a:bb:1a:07:6c:93:0c:4c:
                    2f:3b:f7:77:fa:74:78:b4:00:aa:33:eb:12:12:0c:
                    58:1e:78:e5:98:7c:7f:c7:eb:66:5e:2f:0c:54:bb:
                    f2:ef:8f:98:e2:0c:01:3b:61:ea:c7:68:61:5c:7c:
                    04:54:5e:0e:01:37:e7:fe:31:ed:f8:4d:e8:f9:ec:
                    9b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7E:67:77:BB:35:88:5D:4D:3C:15:98:84:AF:FC:E9:50:41:EB:34
            X509v3 Authority Key Identifier:
                keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:32:1d:88:20:d3:34:83:90:74:c6:92:8a:ed:56:15:04:10:
         ad:93:f9:fd:a9:17:2e:66:c9:e5:f2:44:12:57:0a:73:56:9a:
         f3:90:38:08:0f:30:57:53:46:8f:d4:bb:a0:37:05:5f:53:4c:
         0a:c8:b2:84:6c:91:92:9a:7b:f5:8a:80:a3:e0:e8:90:3b:83:
         71:37:90:3b:7d:58:60:7e:68:e3:90:b5:50:21:c9:37:ab:c7:
         55:64:2d:5c:9b:7d:21:2f:4b:93:5d:23:4b:15:45:73:c5:f7:
         24:f0:7c:66:c7:b8:8c:c2:64:2a:4a:86:cf:58:33:43:05:1a:
         66:42:a3:69:d7:b5:86:fa:54:bd:70:d9:aa:c5:74:2b:44:e9:
         4d:8b:43:b3:ec:40:9a:5c:39:aa:29:03:97:79:e1:e3:5c:c4:
         4b:89:0e:3a:cc:0d:9b:b1:be:39:c8:21:dc:d4:00:29:e4:f1:
         0a:cc:87:d3:ce:ad:ad:7f:0a:77:dd:8c:d6:e5:de:1f:da:11:
         1d:53:ae:c4:03:32:38:41:84:a0:26:33:11:49:2c:dc:98:59:
         e1:95:6f:c4:ae:bf:0b:65:bb:bc:30:51:e5:ff:c8:bc:ec:f0:
         db:05:63:a2:3c:71:7c:be:cb:e8:f7:dc:b6:b4:9c:73:51:4e:
         9e:ee:7c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:13:28 2026 by rpki-client