Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
File:                     EVVnl9qc5x7sKV81sAhZuQzoxfA.mft (raw, json)
Hash identifier:          5S4LDP5RD5MG3/zM3N39uePyysvhsFJNyzPW91bEKv0=
Subject key identifier:   DD:4F:26:53:C8:CF:76:C9:C1:9B:EF:8E:2B:9B:DF:D7:A2:FB:F5:65
Authority key identifier: 11:55:67:97:DA:9C:E7:1E:EC:29:5F:35:B0:08:59:B9:0C:E8:C5:F0
Certificate issuer:       /CN=11556797da9ce71eec295f35b00859b90ce8c5f0
Certificate serial:       01A128B1665A83B5AD92E757AF1A86FC6D48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
Manifest number:          02B1
Signing time:             Sun 11 Oct 2026 02:01:16 +0000
Manifest this update:     Sun 11 Oct 2026 02:01:16 +0000
Manifest next update:     Mon 12 Oct 2026 02:01:16 +0000
Files and hashes:         1: EVVnl9qc5x7sKV81sAhZuQzoxfA.crl (hash: UqkDNfwd2QShCQrnBad9eEnuXEYOjvfQOvMawWxutPA=)
                          2: tUtGKToVFVEdLnvzwP_qbyoWrD4.roa (hash: oDawWr/gCtZY5IlLhtFkFwJPnj3rhzKF04OEEY7CZlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 02:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:b1:66:5a:83:b5:ad:92:e7:57:af:1a:86:fc:6d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11556797da9ce71eec295f35b00859b90ce8c5f0
        Validity
            Not Before: Oct 11 02:01:16 2026 GMT
            Not After : Oct 12 02:01:16 2026 GMT
        Subject: CN=dd4f2653c8cf76c9c19bef8e2b9bdfd7a2fbf565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b7:0c:c6:29:c7:b7:86:da:67:78:ec:62:e1:
                    36:6d:d1:07:c9:e1:52:36:81:13:aa:22:81:66:cb:
                    b2:86:fe:40:86:9b:47:d6:af:ea:fa:a3:4e:52:f2:
                    0c:72:4f:ed:82:3b:2c:19:32:9c:a3:14:fe:73:7d:
                    d7:b1:47:67:25:cd:77:de:09:ec:a7:96:7f:09:fe:
                    e3:4b:80:e4:d6:50:85:56:c0:ca:83:91:ff:98:d1:
                    31:9c:8f:6f:1d:43:32:5c:bc:88:84:2f:a6:f9:d6:
                    7d:7c:89:6a:5e:50:00:12:36:bf:59:6b:68:8c:b2:
                    35:45:25:a8:be:5a:fb:e3:6f:15:f1:3c:af:0a:91:
                    da:90:34:42:2d:97:9d:16:36:fd:c3:4e:7d:cf:a2:
                    e9:43:73:55:05:c6:8d:64:9a:d4:0d:3b:36:dc:21:
                    55:af:ab:1e:45:6f:c0:3d:bb:e3:23:6a:63:43:d3:
                    3d:0b:77:93:78:40:33:f9:55:2c:29:bf:22:b1:a3:
                    6b:51:62:d6:ca:e3:b3:b9:9d:7e:e7:66:19:4a:47:
                    1f:ee:df:09:eb:0f:2e:b5:1f:5b:f9:09:d7:80:4c:
                    76:2d:c5:8a:a4:53:ed:97:76:26:6d:15:19:a4:e3:
                    7e:1a:92:a4:04:d7:23:0a:22:77:0e:a5:59:67:b4:
                    03:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4F:26:53:C8:CF:76:C9:C1:9B:EF:8E:2B:9B:DF:D7:A2:FB:F5:65
            X509v3 Authority Key Identifier:
                keyid:11:55:67:97:DA:9C:E7:1E:EC:29:5F:35:B0:08:59:B9:0C:E8:C5:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:14:54:77:85:5d:be:64:7a:0e:56:d6:79:f9:04:42:62:d8:
         c6:5a:33:0e:ed:f0:7c:b8:44:a1:dd:d4:58:95:cd:fb:8b:cc:
         f4:49:64:bb:8a:1f:e9:80:f3:00:ea:3b:63:58:9e:38:01:d2:
         4c:8b:fc:01:10:08:30:aa:74:55:39:43:19:82:54:38:e7:45:
         01:4c:41:c0:96:ee:05:8f:0b:72:2e:9e:22:26:41:e1:18:9a:
         6d:48:6e:0d:54:72:fe:2d:d1:e1:2e:06:77:9d:42:1b:5e:84:
         30:ee:00:1e:a8:ad:5f:77:21:b8:75:84:07:60:f0:69:77:a0:
         3e:97:a6:d7:5f:3e:06:a8:4b:9b:77:f1:b8:e2:ad:fd:9c:ae:
         85:0e:00:34:1a:15:25:ae:0b:8c:49:e6:7d:e1:81:91:de:06:
         80:38:a5:4e:b7:e2:bf:0f:2b:f6:d9:b8:74:3d:b7:14:c7:dc:
         cf:12:f2:c6:b1:63:ab:5e:80:73:e3:af:2a:ea:7a:fa:6d:76:
         2c:c6:f0:37:9c:4a:a7:95:22:68:d9:35:f0:3a:51:88:b0:51:
         a1:b3:23:1f:e0:4a:48:3d:a9:40:df:af:ff:c6:ed:a8:dd:91:
         ed:e4:0d:a9:8a:d4:76:3d:e7:30:3c:aa:c6:45:77:75:ae:51:
         87:36:5c:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEosWZag7WtkudXrxqG/G1IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNTU2Nzk3ZGE5Y2U3MWVlYzI5NWYzNWIwMDg1OWI5MGNl
OGM1ZjAwHhcNMjYxMDExMDIwMTE2WhcNMjYxMDEyMDIwMTE2WjAzMTEwLwYDVQQD
EyhkZDRmMjY1M2M4Y2Y3NmM5YzE5YmVmOGUyYjliZGZkN2EyZmJmNTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bcMxinHt4baZ3jsYuE2bdEHyeFS
NoETqiKBZsuyhv5AhptH1q/q+qNOUvIMck/tgjssGTKcoxT+c33XsUdnJc133gns
p5Z/Cf7jS4Dk1lCFVsDKg5H/mNExnI9vHUMyXLyIhC+m+dZ9fIlqXlAAEja/WWto
jLI1RSWovlr7428V8TyvCpHakDRCLZedFjb9w059z6LpQ3NVBcaNZJrUDTs23CFV
r6seRW/APbvjI2pjQ9M9C3eTeEAz+VUsKb8isaNrUWLWyuOzuZ1+52YZSkcf7t8J
6w8utR9b+QnXgEx2LcWKpFPtl3YmbRUZpON+GpKkBNcjCiJ3DqVZZ7QDwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1PJlPIz3bJwZvvjiub39ei+/VlMB8GA1UdIwQY
MBaAFBFVZ5fanOce7ClfNbAIWbkM6MXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVZWbmw5cWM1eDdzS1Y4MXNBaFp1UXpveGZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80Njk2ZTUtZmNlYy00NGEwLThmMDMt
MWVlZGE5YTlmZjhmLzEvRVZWbmw5cWM1eDdzS1Y4MXNBaFp1UXpveGZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80Njk2ZTUtZmNlYy00NGEwLThmMDMtMWVlZGE5YTlmZjhm
LzEvRVZWbmw5cWM1eDdzS1Y4MXNBaFp1UXpveGZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwRRUd4Vd
vmR6DlbWefkEQmLYxlozDu3wfLhEod3UWJXN+4vM9Elku4of6YDzAOo7Y1ieOAHS
TIv8ARAIMKp0VTlDGYJUOOdFAUxBwJbuBY8Lci6eIiZB4RiabUhuDVRy/i3R4S4G
d51CG16EMO4AHqitX3chuHWEB2DwaXegPpem118+BqhLm3fxuOKt/ZyuhQ4ANBoV
Ja4LjEnmfeGBkd4GgDilTrfivw8r9tm4dD23FMfczxLyxrFjq16Ac+OvKup6+m12
LMbwN5xKp5UiaNk18DpRiLBRobMjH+BKSD2pQN+v/8btqN2R7eQNqYrUdj3nMDyq
xkV3da5RhzZcWg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:45:12 2026 by rpki-client