Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
File:                     EEXazIN3mMPmzzH00nlGozsN5mE.mft (raw, json)
Hash identifier:          h7bIz7oUpsEyRKW/XYusjTRgzTKG8JtdiSWstKBynSU=
Subject key identifier:   D9:92:43:16:4A:B3:A7:90:AF:CA:87:83:80:F0:9E:FC:C1:75:1E:4D
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Certificate issuer:       /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial:       01A0C933E7F6EA1149C337F7D7E8949CBD0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
Manifest number:          1A85
Signing time:             Tue 22 Sep 2026 13:00:16 +0000
Manifest this update:     Tue 22 Sep 2026 13:00:16 +0000
Manifest next update:     Wed 23 Sep 2026 13:00:16 +0000
Files and hashes:         1: 005Bqn6EcQE2kRRYutDaRw8mbu4.roa (hash: Ya4LLXNAwjE1h+4Ix0wQYttNBpWpSYxEcBwtehuCJrU=)
                          2: Bsg46Hh18W2wtrBYU_MmVQa11_M.roa (hash: Wi9xpJM6gyN312GNJefY/RNhxBIItO+fm/kcAGluLLQ=)
                          3: EEXazIN3mMPmzzH00nlGozsN5mE.crl (hash: M1DHPhUxlQIMA4ugr71u5KWm2sPUN0A6Y3vY8vKEWAY=)
                          4: pnsSYMuSCnD02i5X7aNjfb6KV2Y.roa (hash: gAxKlvosqMdTFPRmtfb6Fr6F4VKWhUBjaqqguPZxYyQ=)
                          5: zVElElmNHqfMWbO7Mv_RAuDBQI8.roa (hash: fH2ooaFDH4XMWbMf68BiYaDtG2yS/k654MGObWqqQkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:33:e7:f6:ea:11:49:c3:37:f7:d7:e8:94:9c:bd:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
        Validity
            Not Before: Sep 22 13:00:16 2026 GMT
            Not After : Sep 23 13:00:16 2026 GMT
        Subject: CN=d99243164ab3a790afca878380f09efcc1751e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:fa:e7:8b:86:e7:f9:d1:69:e3:79:88:21:
                    13:b9:df:83:16:d3:4c:fc:0f:d3:3f:71:2e:89:92:
                    ec:1f:ff:46:25:66:d8:fd:85:19:9d:d6:ee:ec:eb:
                    bc:85:a0:f3:e8:51:14:51:de:96:0d:bc:96:03:45:
                    4b:2c:ea:54:17:aa:08:57:e0:0d:20:a5:33:0f:d8:
                    c2:e4:02:11:56:16:85:97:31:a9:8b:49:94:29:e9:
                    06:4e:28:8e:fc:76:cc:bd:ae:6b:7d:96:70:31:2b:
                    33:91:09:e8:23:1e:69:e0:f1:24:45:b1:c7:75:eb:
                    c7:df:75:38:7d:90:89:76:5c:d1:d8:96:3c:05:f5:
                    2a:c3:b5:17:45:e3:e0:15:7e:74:62:fa:6e:10:3e:
                    08:7d:85:29:02:93:a4:34:34:8f:23:7f:9c:82:32:
                    98:75:2d:bb:de:ba:a8:64:f0:5d:dc:70:04:cd:9c:
                    15:db:45:56:a1:3f:88:3f:65:b9:4c:b4:0c:6c:8f:
                    f3:00:45:31:09:04:60:d3:72:17:cf:e2:85:1e:0f:
                    22:ab:df:50:f8:66:e1:7c:58:78:36:8d:c4:9d:1a:
                    84:54:9b:24:d5:65:66:02:2c:ed:00:34:ec:78:4c:
                    b3:fc:4a:ae:1e:23:13:ab:d9:37:37:7a:fb:2f:6f:
                    52:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:92:43:16:4A:B3:A7:90:AF:CA:87:83:80:F0:9E:FC:C1:75:1E:4D
            X509v3 Authority Key Identifier:
                keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a8:12:41:84:f5:27:02:ab:33:18:2d:4c:cb:84:37:73:d5:
         0e:e5:bd:5e:73:b4:6d:79:d2:7f:df:65:54:59:32:c5:7a:b7:
         9f:3d:ec:58:1f:25:4b:a1:b8:2b:68:e5:a2:56:9c:f6:8d:49:
         bd:f9:51:e1:e4:7e:a3:38:e0:5d:13:e4:69:9a:64:e8:f9:fc:
         47:42:b4:85:44:da:d3:45:21:48:80:a8:bf:22:f1:d5:2d:ad:
         cf:67:a6:77:77:b4:d0:a2:86:45:0c:27:67:3a:e2:92:1e:83:
         e6:79:2f:bb:8b:b6:0e:c7:63:fa:70:e5:06:a9:1d:37:32:84:
         dd:6d:bc:62:e7:24:d2:fe:57:b8:4b:ed:66:39:75:a0:1c:4d:
         4e:3c:d2:6c:5f:8d:68:09:bd:27:5f:7d:30:05:b9:eb:95:ab:
         56:42:b9:f0:60:d6:9a:98:f2:6c:30:90:27:cd:e6:15:25:1f:
         db:9a:1f:c3:34:8a:7e:1c:17:67:9f:36:3b:52:a0:85:56:92:
         16:48:59:5c:0a:a8:f0:36:c9:ed:31:41:f6:28:5c:c1:d5:f9:
         eb:ab:49:ed:d9:76:6a:0a:e2:e5:32:a6:69:b6:bf:2b:2c:56:
         9d:19:4c:69:7f:1f:f4:38:6e:63:2f:7d:6b:e4:38:d2:d8:a0:
         eb:50:0f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:20:27 2026 by rpki-client