Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
File:                     ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json)
Hash identifier:          10YupHkMeq4h9HmTOojKUAU0cvpGLDuaPcsJrPNY5wY=
Subject key identifier:   43:70:52:82:AD:A8:6D:CF:E9:E6:DA:20:A3:4B:EF:FD:19:00:83:81
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Certificate issuer:       /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial:       01A0EA09AFA55F608EA5B1F038D1D2BE833E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
Manifest number:          05C0
Signing time:             Mon 28 Sep 2026 22:01:38 +0000
Manifest this update:     Mon 28 Sep 2026 22:01:38 +0000
Manifest next update:     Tue 29 Sep 2026 22:01:38 +0000
Files and hashes:         1: 2xwSBwS6RDNnNKRZKOi0MbfjwVc.roa (hash: RMcEguGLwOa0BQU2j27En5sOEwzBOElDccZLVB4NNcw=)
                          2: MRM-CoQOpNzOiMlv-SoepHZ_vkg.roa (hash: XmXaFQhLTQFHGNBv8hvjwKW9TmIBhDQDOsRTHRNNRp8=)
                          3: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: 0hHuihCsn/0kvMu8VCrZfjZwzOvjU1wt+D0t3Jgg2Wc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:09:af:a5:5f:60:8e:a5:b1:f0:38:d1:d2:be:83:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
        Validity
            Not Before: Sep 28 22:01:38 2026 GMT
            Not After : Sep 29 22:01:38 2026 GMT
        Subject: CN=43705282ada86dcfe9e6da20a34beffd19008381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e9:e3:43:05:75:eb:24:94:36:0a:3b:4f:94:
                    cb:e0:fc:29:65:f4:26:cc:af:ac:82:52:52:08:91:
                    35:20:f4:03:4b:c1:47:8c:1c:92:c9:ca:38:ae:a8:
                    52:bc:02:c3:62:b3:46:a1:d7:cd:4e:a2:1e:3a:f5:
                    e5:51:4b:98:18:91:3c:a1:e2:7e:8d:99:98:25:c5:
                    de:31:f5:0a:8f:1e:2c:f4:57:67:97:3d:ce:89:01:
                    bc:ab:d0:4b:8a:48:04:5c:91:2f:b6:e4:d3:2c:c4:
                    08:e1:0f:c0:ab:6b:14:d6:65:8c:94:c2:21:22:02:
                    3d:e7:6a:3d:c3:56:c4:87:73:1b:5d:fe:20:cd:80:
                    d2:6d:02:69:40:cf:3e:9a:26:d5:38:c2:07:d1:10:
                    7d:8b:68:4e:1c:84:4e:fb:0b:2a:97:92:eb:52:4f:
                    b2:af:21:91:19:9d:cb:a6:75:3c:f7:23:f5:9d:e2:
                    de:9c:71:a7:95:fb:63:fb:19:e4:02:ee:a7:9a:4a:
                    57:e7:3e:e3:1e:a3:a6:be:21:8f:e6:8e:22:22:51:
                    7f:ab:9f:26:0c:05:ec:7c:11:d4:a2:0f:2b:2a:af:
                    ce:e5:70:ff:3e:d1:ec:31:b8:5f:3a:ef:c1:a8:41:
                    ed:19:06:55:64:e3:8a:33:76:27:bf:d0:08:89:dc:
                    4f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:70:52:82:AD:A8:6D:CF:E9:E6:DA:20:A3:4B:EF:FD:19:00:83:81
            X509v3 Authority Key Identifier:
                keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:2e:51:dd:8a:ec:73:f9:68:1c:f9:c4:7b:44:5d:4f:51:93:
         18:1f:3f:e6:27:03:e3:6a:bf:75:7d:d2:6e:ea:64:d1:53:0b:
         47:7b:3d:fa:cb:5d:7d:e9:54:b6:04:d8:3e:4b:a1:9f:e6:83:
         ac:02:27:82:2c:6c:7e:2e:b5:47:d4:56:ae:aa:8c:5c:80:a7:
         fe:b5:48:de:97:72:f5:f1:e8:a9:89:cb:96:8b:65:d6:23:b8:
         6a:fa:25:2d:94:f0:0f:20:30:da:40:a8:af:05:a1:a8:94:8b:
         00:ab:ed:b6:2d:00:80:bd:2b:13:3b:5c:07:55:dd:7e:a6:a2:
         5a:f7:52:82:bc:9a:2c:61:82:e6:d4:29:20:e3:9b:ae:f1:64:
         41:30:b2:72:b1:b1:a2:f1:4e:96:2d:68:55:43:da:35:68:7d:
         76:7e:ea:d3:e3:75:45:f5:aa:0f:72:78:63:d2:65:21:28:c3:
         30:f9:15:b6:3d:0f:77:53:e6:78:66:e6:f4:d4:ce:b8:a6:10:
         71:53:26:40:ce:fb:04:44:9e:b1:53:2f:54:87:99:1f:fe:48:
         f0:71:71:ff:0e:7c:a6:1d:f2:a1:25:16:86:4a:e3:69:1a:ef:
         86:19:7c:da:bb:c5:54:0b:9a:c1:92:8e:13:07:15:85:20:c7:
         54:bd:a6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:44:10 2026 by rpki-client