Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File:                     EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier:          g8KCW59qIYM7sLTTUEag3Djy9i1NttElKtvQRKMmdB8=
Subject key identifier:   B8:41:A4:D5:6B:58:61:1E:FB:8D:76:27:4C:8D:8A:63:C8:1C:A1:A5
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer:       /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial:       01A13CA54B70952EDBFEA3AAB21B509E10F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number:          160A
Signing time:             Wed 14 Oct 2026 23:00:27 +0000
Manifest this update:     Wed 14 Oct 2026 23:00:27 +0000
Manifest next update:     Thu 15 Oct 2026 23:00:27 +0000
Files and hashes:         1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: DUpvFZ5jZ+IBECUopiI4DEvYDJAADjxDYKyZJwWWfQU=)
                          2: _1gDjO3zyeb5ku_j0UHNCnoUFl4.roa (hash: rM83OC0RM5ILeCqPDY5cHlMlGdSPagD0ddTyBgkH61k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:a5:4b:70:95:2e:db:fe:a3:aa:b2:1b:50:9e:10:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
        Validity
            Not Before: Oct 14 23:00:27 2026 GMT
            Not After : Oct 15 23:00:27 2026 GMT
        Subject: CN=b841a4d56b58611efb8d76274c8d8a63c81ca1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9f:8e:94:1d:be:fa:74:44:54:56:b3:d6:cb:
                    05:7e:19:3a:aa:a0:fa:9a:81:b8:5a:68:95:61:b9:
                    90:a7:a4:33:e2:9e:3e:9b:3d:34:93:c6:7e:01:36:
                    2c:86:f7:a3:51:37:e8:1e:75:95:7a:fa:e6:81:a4:
                    f9:56:5a:ab:e6:a0:77:ed:35:68:73:eb:19:38:6f:
                    ac:da:c7:b7:d2:95:0b:b2:d0:74:90:b4:70:a1:d3:
                    04:f4:67:cb:a9:7a:8c:44:54:cb:5f:40:f2:c8:9f:
                    b7:01:e9:0e:17:de:83:8e:c6:14:ac:65:5c:cd:e4:
                    0b:21:7f:f5:88:b4:b9:00:31:40:2b:45:de:6c:a2:
                    bd:ef:61:e7:8d:b2:73:8a:50:48:d3:0c:e4:2a:9a:
                    a2:40:f6:14:02:8b:77:e7:97:c1:49:fa:08:2b:fc:
                    d6:76:82:f8:f0:b3:9f:0e:35:40:25:87:88:70:1a:
                    e4:c9:09:1d:c6:e1:1b:77:34:90:ff:33:fd:0e:38:
                    7a:84:d7:99:e6:06:47:dc:cc:c2:ca:27:b3:ce:90:
                    54:6e:78:5c:e4:c6:f0:23:6e:49:93:27:66:a6:88:
                    c4:6d:55:54:ad:31:a8:74:5f:40:ac:9d:04:6f:07:
                    f9:2a:a7:40:b7:7f:ea:73:d3:5e:d4:ff:b7:e1:4c:
                    df:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:41:A4:D5:6B:58:61:1E:FB:8D:76:27:4C:8D:8A:63:C8:1C:A1:A5
            X509v3 Authority Key Identifier:
                keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b5:fd:d6:f2:e3:d2:c9:8c:8a:c8:43:ce:1d:e1:b5:c7:c8:
         5a:07:a1:7f:9c:6e:31:f4:28:e9:86:6b:1b:2b:2a:61:80:ca:
         0f:4b:7b:14:10:5d:1e:41:b6:f9:ad:31:97:d8:ec:e9:7b:64:
         18:35:f4:9b:40:bd:a7:3b:01:68:a7:2c:98:43:4f:b6:c8:39:
         75:8f:b4:c5:63:43:cb:be:a0:6e:15:d3:bb:84:d9:c7:5c:fe:
         20:f1:24:61:a0:63:d8:44:a7:3d:79:ee:3d:8a:81:fb:b2:0d:
         a6:1b:1d:c4:7f:4d:c0:52:71:62:94:93:4b:ef:1b:e7:bc:46:
         75:d0:53:21:65:ca:5f:db:07:ca:7f:bb:bd:7a:37:5f:28:52:
         23:4b:6d:ab:05:44:94:7c:17:71:13:53:30:e2:c0:2d:4a:4d:
         e1:c4:4f:fd:cf:4d:8f:d1:4b:54:90:42:9f:d4:f3:99:bc:3d:
         04:22:99:4f:ff:79:83:51:1a:bf:81:ec:81:53:79:75:3b:0b:
         e7:4c:08:bb:0c:e5:a6:7d:d8:b9:c2:38:4a:d0:2b:80:96:db:
         f2:c4:bf:47:ea:9d:56:04:55:4d:66:40:81:76:04:4c:51:87:
         1a:d8:64:6b:4f:b5:30:32:30:ad:96:df:e8:e9:99:7d:5e:cb:
         02:e9:de:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:29:21 2026 by rpki-client