Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
File:                     9efoeENmtHGmpODICA-PENrmalA.mft (raw, json)
Hash identifier:          NoSLMUbiAyV5Ni6LyUm5K6NIx1c4dRaxioLVVAys8Fk=
Subject key identifier:   7B:8D:83:BF:B2:98:73:A3:59:68:6A:15:29:CF:96:A8:BD:62:3D:B1
Authority key identifier: F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
Certificate issuer:       /CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Certificate serial:       01A0C10D0CC503C5933D0D8EE6ED160B5D84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
Manifest number:          1268
Signing time:             Sun 20 Sep 2026 23:00:52 +0000
Manifest this update:     Sun 20 Sep 2026 23:00:52 +0000
Manifest next update:     Mon 21 Sep 2026 23:00:52 +0000
Files and hashes:         1: 9efoeENmtHGmpODICA-PENrmalA.crl (hash: q3pSF4HfYZhICnTh09EeqkLPnxOZOH1pIrY1vx10pf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:0d:0c:c5:03:c5:93:3d:0d:8e:e6:ed:16:0b:5d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
        Validity
            Not Before: Sep 20 23:00:52 2026 GMT
            Not After : Sep 21 23:00:52 2026 GMT
        Subject: CN=7b8d83bfb29873a359686a1529cf96a8bd623db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:ed:1c:b4:c5:00:86:95:7d:dd:0d:19:ff:
                    b3:23:85:d6:d3:b2:67:2e:55:b5:3a:98:63:10:90:
                    93:2d:8c:fe:9e:0c:e9:82:79:e8:81:02:b0:f4:d1:
                    ac:63:09:37:bb:0b:da:46:c4:89:cc:9c:6e:41:db:
                    f3:b1:83:17:2c:ea:19:78:65:4d:f2:f0:5e:1b:b7:
                    21:dc:f8:5b:e2:97:67:14:f1:bc:63:b4:91:a0:28:
                    db:f6:18:b1:94:ac:0b:56:f8:56:3d:21:20:70:7d:
                    3d:93:71:02:70:3b:a2:e6:72:a5:56:dd:b2:84:c1:
                    70:19:20:86:77:3a:30:b9:24:63:ba:2f:d0:6c:d5:
                    13:0a:8f:bb:23:db:13:aa:76:c8:67:77:6d:7e:54:
                    84:48:ff:8e:27:ae:b6:b2:5e:aa:80:58:25:95:fa:
                    69:0b:b1:6c:c5:12:32:21:9a:b2:5f:bd:9c:99:30:
                    d5:58:b0:d6:4c:7f:b9:f3:63:3d:65:92:eb:94:9d:
                    1c:b1:38:9d:29:3d:aa:4f:14:40:78:51:a2:a1:47:
                    ce:b8:2b:64:0c:8d:ae:9b:1d:36:3e:d2:99:3a:c5:
                    d0:88:c7:11:d8:3a:91:df:b9:8e:63:c7:fb:8b:1f:
                    a8:06:28:58:6d:9e:a9:28:50:66:2a:a0:04:c4:f7:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8D:83:BF:B2:98:73:A3:59:68:6A:15:29:CF:96:A8:BD:62:3D:B1
            X509v3 Authority Key Identifier:
                keyid:F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b3:05:cf:c7:4b:b5:82:48:f6:c9:c6:5f:f0:c3:f1:7a:70:
         5a:75:b8:20:70:1b:16:9a:e4:19:98:4e:38:fe:29:18:2a:e4:
         5f:55:5e:ba:5f:36:4a:47:42:04:7f:16:42:51:08:f6:b2:9a:
         fd:18:ff:65:7f:bb:96:b4:2f:da:3b:46:99:dd:22:72:2f:a6:
         85:3d:be:68:6a:dc:cf:da:3b:cb:b0:64:a9:7f:c3:69:d8:6d:
         05:77:97:5c:0b:14:62:8f:aa:9d:91:7e:70:41:67:11:bf:99:
         02:59:b9:5a:da:83:04:e8:e7:e3:34:ba:e2:da:05:41:9b:83:
         9c:b9:2d:d5:1a:92:a6:48:37:f0:2e:bb:43:a2:ff:28:9b:4a:
         22:d2:4c:15:fa:e9:46:e9:f0:17:5f:67:25:3b:e4:ba:70:0f:
         0f:ab:6f:04:ee:d3:dd:b6:49:97:a9:87:91:33:78:2d:5d:7a:
         83:1f:10:5e:ae:42:45:e4:d4:3f:3e:5f:b7:51:59:7d:3c:46:
         52:56:f8:7b:d2:1e:15:be:7c:6b:4a:c4:1a:c5:48:9c:ce:75:
         9e:f0:af:c7:47:1b:cb:b7:e5:f9:bd:48:53:64:47:f2:49:fe:
         1a:37:42:38:57:b9:c4:14:47:e6:97:ea:3a:d5:bf:29:7e:1f:
         12:82:09:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----