Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
File:                     EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json)
Hash identifier:          EF6ibB+wcXQRwvAA6fh4w19yMhA9iY1hcmuuF4vyVok=
Subject key identifier:   BE:ED:A6:75:99:59:3B:72:B3:6D:D8:64:B8:85:12:7F:08:86:9A:6A
Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
Certificate issuer:       /CN=10a5985cba32a877d3215bbc228cb07d0400917b
Certificate serial:       019CAA587B744F5E771950D3AA7A36A12E18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
Manifest number:          1345
Signing time:             Sun 01 Mar 2026 17:00:51 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:51 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:51 +0000
Files and hashes:         1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: OduRznhDkGWTJTD6ADSAwupBWMPybGVs0/gB6CzLj/o=)
                          2: m-bkRVX187dEm5VhlRV9oFQafr4.roa (hash: Ume0d4Lf2OgydCDBWe/3ep3v3knwVOmKBIUnuc3Xd9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:7b:74:4f:5e:77:19:50:d3:aa:7a:36:a1:2e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b
        Validity
            Not Before: Mar  1 17:00:51 2026 GMT
            Not After : Mar  2 17:00:51 2026 GMT
        Subject: CN=beeda67599593b72b36dd864b885127f08869a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:8c:33:94:e9:78:c9:19:1e:36:f2:db:a3:
                    cd:bb:6d:88:ec:69:6e:c4:9b:9f:52:71:96:a0:05:
                    52:db:de:25:f2:27:18:64:9a:56:ab:fd:10:1a:bd:
                    ad:8b:af:a1:ca:54:8d:6b:32:22:e2:8a:48:fd:e3:
                    58:d2:15:6d:3a:4b:39:49:25:fd:b7:6e:1b:72:df:
                    fc:a0:02:38:bb:d4:cb:53:4d:5b:d6:90:bc:e5:2d:
                    ec:2e:05:34:9a:ad:b9:2d:75:be:9f:f9:d6:a5:cb:
                    af:f9:94:fc:95:1e:74:c6:7e:c3:c9:7f:3d:8e:61:
                    66:e9:4c:3a:e2:1d:69:7f:81:ca:56:b0:6c:c7:1e:
                    81:48:2d:27:df:f7:7f:04:2f:b3:ad:a4:f7:51:09:
                    a8:0d:ab:8c:b7:be:dd:ce:ad:cb:29:4f:a6:91:a4:
                    4f:21:72:1d:58:8d:01:ca:2a:7e:50:5e:7f:8c:d4:
                    bc:d8:15:36:58:6f:02:5b:e0:96:11:ab:bb:b4:05:
                    42:c0:34:ca:a9:91:b8:3d:8a:19:78:ff:ad:77:9a:
                    1f:39:77:59:84:35:f8:7b:58:3b:bc:27:1b:48:4c:
                    2d:65:8e:1b:61:e7:7e:73:8d:9c:a7:a8:81:44:c1:
                    4a:17:9e:f7:b0:2c:c7:e8:99:50:c8:2a:f5:71:b5:
                    5e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:ED:A6:75:99:59:3B:72:B3:6D:D8:64:B8:85:12:7F:08:86:9A:6A
            X509v3 Authority Key Identifier:
                keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f0:5b:4a:04:d2:07:eb:9a:99:91:ea:f5:3a:29:43:ed:e8:
         70:ef:2c:2f:f5:73:ec:21:32:80:0c:a6:55:88:e6:3b:75:77:
         49:d5:94:12:0f:42:51:6c:f6:fc:94:58:6c:f1:58:54:d5:63:
         be:5f:17:4d:38:14:7d:a8:91:e4:d1:b2:96:35:73:ac:32:7a:
         ac:78:a5:11:9a:50:dc:d7:30:62:af:68:2c:81:00:77:bc:83:
         41:bd:8f:d6:47:c1:b1:b5:8a:33:d5:74:9a:cd:b0:76:ea:91:
         25:22:14:91:48:d9:36:55:4b:4d:89:9b:e0:e0:a1:62:33:be:
         77:45:f0:69:68:78:90:e0:67:4e:f0:7e:93:b7:e5:53:08:59:
         14:ab:e0:18:01:7c:60:2f:ec:f3:5d:a3:92:72:47:26:5c:1d:
         0e:84:94:13:c3:38:91:a9:51:75:ca:a2:58:72:2c:a8:a3:aa:
         40:d1:9e:f4:5e:94:54:38:a2:4c:cb:9a:89:f7:53:0e:04:78:
         40:9c:4f:af:43:e1:10:87:92:0d:7a:64:e0:b9:31:a9:06:11:
         32:4f:62:f2:6c:db:f2:4a:68:ed:cf:63:de:4b:fb:6a:18:88:
         f1:e9:09:1e:b4:f3:4e:fd:54:ce:2c:f3:68:6f:30:f7:4d:83:
         f2:72:2d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:10 2026 by rpki-client