Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
File:                     EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json)
Hash identifier:          yfo0qtzpKcrOfzI4wrwWYuEM8fbpneyJNk2ToW18okY=
Subject key identifier:   C9:C0:C1:48:6E:97:8E:16:F7:A1:D6:D9:45:7F:BF:F5:7F:0B:27:9E
Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86
Certificate issuer:       /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
Certificate serial:       01A0D3B8FB3190D54F49540A013DAFF1B647
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
Manifest number:          1A6B
Signing time:             Thu 24 Sep 2026 14:01:50 +0000
Manifest this update:     Thu 24 Sep 2026 14:01:50 +0000
Manifest next update:     Fri 25 Sep 2026 14:01:50 +0000
Files and hashes:         1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: 8uB0Ihp7vPTAgmNBVpmLjLJjcq2e4wq9gjKCaF/jvNk=)
                          2: TehJaUKE7-UYVJg4qzcGnHF4gEE.roa (hash: g9yiDNMzuqT4Xury4y9vb4TVbFovThME/EkaBOlvwI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:b8:fb:31:90:d5:4f:49:54:0a:01:3d:af:f1:b6:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086
        Validity
            Not Before: Sep 24 14:01:50 2026 GMT
            Not After : Sep 25 14:01:50 2026 GMT
        Subject: CN=c9c0c1486e978e16f7a1d6d9457fbff57f0b279e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b5:0b:85:4b:fe:bd:0b:7b:95:32:d9:6b:39:
                    99:cf:36:6f:ca:23:95:37:39:5d:6d:e4:56:ed:09:
                    76:af:64:2e:3d:44:9a:e7:e5:48:b9:cd:c0:b8:37:
                    e4:5f:1c:a0:bf:56:40:d8:b2:7d:51:b7:d7:f8:4b:
                    a4:f3:0d:e9:8c:14:19:60:5e:d7:01:fb:b1:fb:7f:
                    8c:e0:61:67:72:4a:a2:8d:54:0f:44:04:df:56:85:
                    ab:e7:d5:e7:6f:84:a6:c6:cb:0d:9f:f6:e5:13:b0:
                    cf:ff:ce:32:32:55:32:81:51:90:5f:df:ef:c0:89:
                    6e:95:f9:fa:c7:5b:4a:d9:af:74:d8:62:92:14:18:
                    13:28:03:4f:54:a6:4f:70:f4:a2:2a:77:b7:5c:83:
                    a6:f2:27:10:f7:6b:82:51:80:a0:7a:1a:c3:8e:40:
                    82:08:70:15:e8:6b:f3:20:5c:4c:86:4c:4b:21:cd:
                    6d:bf:0b:31:35:7e:65:fc:a0:2b:3e:a8:88:22:bc:
                    e4:6c:63:d9:07:53:1b:4d:11:72:88:17:8f:63:84:
                    48:28:21:b8:5d:19:d6:44:16:56:82:29:95:39:36:
                    28:2e:0f:f5:68:00:fb:f4:6d:4a:e2:f2:c8:49:d7:
                    cd:93:61:46:c2:9a:b8:6e:30:73:c0:35:73:28:21:
                    26:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C0:C1:48:6E:97:8E:16:F7:A1:D6:D9:45:7F:BF:F5:7F:0B:27:9E
            X509v3 Authority Key Identifier:
                keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:a0:ac:df:a4:5b:c2:c7:46:7a:fb:16:93:14:73:b3:99:0e:
         4b:cc:69:2f:72:83:8a:e1:ac:89:32:45:15:7b:23:b2:e6:97:
         9a:3e:b2:7a:88:09:31:be:b5:e0:42:ad:88:47:46:c4:52:c9:
         42:a4:4b:ef:b2:35:6c:b6:70:c8:2a:57:0e:e6:eb:24:3a:3a:
         09:18:41:dd:0b:d2:85:03:00:99:5c:ae:82:75:03:ef:9f:50:
         30:68:a2:7c:0c:28:de:23:c8:b6:da:b8:f0:60:c6:68:09:8f:
         4c:28:3c:63:f2:cb:03:c4:e0:29:47:8c:0a:fb:8a:f0:a6:09:
         e9:ff:fe:9d:9c:4a:b7:c6:ed:14:ff:c8:1d:1d:83:d6:b1:9b:
         41:31:94:ac:dc:42:5e:a4:29:7a:1e:4b:4d:ef:44:ae:80:07:
         2b:d1:e1:a6:85:b1:b6:a8:be:12:da:97:9c:ff:65:61:b5:f0:
         62:71:a8:bd:b8:b2:68:92:85:25:40:95:f0:75:b2:54:c8:93:
         3d:54:28:79:2f:34:0e:43:a0:3b:54:83:7c:00:7d:2b:1f:5a:
         c0:b4:e1:7b:f4:11:ae:66:c2:30:da:d2:82:6f:45:2a:ce:78:
         9c:9e:28:ed:62:7a:61:23:63:61:9d:e3:12:7a:98:05:0b:7a:
         e9:b6:1c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:55:34 2026 by rpki-client