Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
File:                     EzzXwanHnILu5chqQjwXwdY8NBM.mft (raw, json)
Hash identifier:          1SlRK/Pa9YggEMcR+AquNWFl0y3S06imna7GQdAeyQk=
Subject key identifier:   6F:4C:E8:7B:D8:33:8E:F9:A3:E3:E4:96:A2:4D:73:19:6B:4A:A2:35
Authority key identifier: 13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
Certificate issuer:       /CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Certificate serial:       01A1287AA88D285208BEEA2A3D530BAAE6DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
Manifest number:          1A9C
Signing time:             Sun 11 Oct 2026 01:01:29 +0000
Manifest this update:     Sun 11 Oct 2026 01:01:29 +0000
Manifest next update:     Mon 12 Oct 2026 01:01:29 +0000
Files and hashes:         1: EzzXwanHnILu5chqQjwXwdY8NBM.crl (hash: FxX5H9wU/rOnp/NfVyE66SeK+Wj/66jQRikZiZWG4xA=)
                          2: WTbEe94waQcAOWSmsq1gJHbzJ-w.roa (hash: RQ0yquPveMna0uUrZmIBE6jJFIWp6HG8s98uBt2ysIQ=)
                          3: XGCNBsd4u6QOk9r0MzhRQOuN9ZU.roa (hash: FSmwQ5r6NLBZECcz2CKbhB2EYhBz90265wYtBC2pd4E=)
                          4: j72ehUcYFQsY8mwd247RHKpGmrA.roa (hash: R5PTXqk1HdBWYa8WeY/H3/r2BVqX4E5o1X6EGl909q8=)
                          5: rCCPh-mLpc7daTsM4LgnGKTzoNk.roa (hash: qm0Mei8UOmaXqagO6MtJ9K4mF8ePw84zkbqc33Xhnhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:7a:a8:8d:28:52:08:be:ea:2a:3d:53:0b:aa:e6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
        Validity
            Not Before: Oct 11 01:01:29 2026 GMT
            Not After : Oct 12 01:01:29 2026 GMT
        Subject: CN=6f4ce87bd8338ef9a3e3e496a24d73196b4aa235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:33:e4:1c:16:6d:9e:1b:25:57:b9:12:e7:38:
                    e8:92:69:22:d4:01:86:84:18:26:a6:43:cd:98:68:
                    24:1e:3a:4e:fe:ea:ca:f6:52:32:2b:66:a7:48:a8:
                    4e:19:c8:35:dc:42:52:03:14:89:13:8f:14:3e:22:
                    56:db:cf:81:37:31:6d:b5:ab:91:9d:46:4d:72:89:
                    6d:5c:d7:91:b2:f2:1b:48:47:b2:f6:39:18:67:dc:
                    36:d4:85:46:28:9b:db:6f:81:c8:6d:0b:aa:d9:51:
                    f5:01:d1:97:f1:a8:c8:02:66:18:6c:cf:95:eb:3a:
                    8d:39:9a:e3:ec:ea:a6:68:16:53:fa:3f:07:d4:9b:
                    8e:63:38:0c:52:c4:6d:87:47:34:d7:10:70:04:51:
                    63:08:88:dc:b9:84:ee:bb:68:8f:64:db:31:b6:f0:
                    86:a6:88:0c:e6:9e:3a:30:96:6f:6b:75:ac:57:bf:
                    d5:74:d7:98:1b:cc:97:43:45:35:bb:d6:56:e2:0a:
                    cd:e0:ad:cf:28:01:86:6f:b1:32:ae:bf:a1:56:88:
                    34:d0:7c:a9:e7:9a:43:dd:79:15:f2:97:87:54:9b:
                    c2:30:76:23:b1:3c:98:a7:f3:36:bb:d0:5d:c0:bf:
                    53:e4:cd:5e:61:e7:de:9d:2d:ad:22:a6:10:60:37:
                    ff:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4C:E8:7B:D8:33:8E:F9:A3:E3:E4:96:A2:4D:73:19:6B:4A:A2:35
            X509v3 Authority Key Identifier:
                keyid:13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:79:7b:51:66:38:97:2b:53:b9:3b:66:2f:08:77:dc:e4:64:
         5c:31:a6:fe:8a:45:64:9b:69:b6:b0:94:29:08:2a:88:35:0d:
         f5:f6:96:ea:27:95:00:90:ca:22:17:f9:e8:0d:b3:03:77:f0:
         84:63:6e:a2:f6:2e:59:9c:ce:a9:6c:a4:7f:5a:71:bc:1c:a7:
         d9:4a:54:b3:93:89:a0:37:8f:79:ee:e3:1e:53:ae:fd:c8:5b:
         77:91:d1:d1:eb:ef:24:69:23:fd:49:67:84:0e:8a:20:19:e2:
         d5:c7:1c:cc:0b:1c:7f:b8:8b:a1:58:79:c4:f0:10:33:da:9a:
         ce:2b:cf:9a:27:a8:32:d8:8c:c9:c2:c4:32:23:c3:ee:43:41:
         65:55:85:ee:50:b9:79:64:86:42:38:44:0f:27:cf:3b:28:88:
         23:45:e8:6b:43:db:75:5f:30:9d:be:94:ec:cb:0a:19:c3:e3:
         66:d8:9e:2b:be:df:61:20:0c:a4:63:fb:44:7c:cb:3d:d7:f5:
         c5:b8:4c:53:21:06:bd:3e:e8:b3:25:ff:9a:c9:37:dc:32:76:
         b5:9f:b7:f9:f0:2e:50:ca:4b:f9:3a:41:1b:e4:f8:a9:33:67:
         f7:63:e2:00:66:89:bc:2c:6a:99:d2:4a:00:08:79:b6:9d:45:
         2e:e7:32:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:28:28 2026 by rpki-client