Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
File:                     eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft (raw, json)
Hash identifier:          zEkWmlgL2GVbTcwnxY6wnzalLKoRG/cOqzsCbJ24ELs=
Subject key identifier:   9A:03:3D:32:69:3C:71:05:3F:E1:47:7D:4B:E5:B6:0C:02:CF:DC:56
Authority key identifier: 7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
Certificate issuer:       /CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Certificate serial:       01A1291F2ABC7399C8D803D1335EF4DC6C5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
Manifest number:          0390
Signing time:             Sun 11 Oct 2026 04:01:10 +0000
Manifest this update:     Sun 11 Oct 2026 04:01:10 +0000
Manifest next update:     Mon 12 Oct 2026 04:01:10 +0000
Files and hashes:         1: 3gMylm_7kdY05Np-Gs1Ujn2TpUw.roa (hash: W5KGrcdaIcr77/oIsEbLhshZMJrc2jrTw0N4xA3kS0o=)
                          2: SHM9R3kXlAO8-e-rYuN_jsGmG6M.roa (hash: X06rQu41FDn+MhiPC2VMwGHMTFpmXVd6mlDBUP0P6FE=)
                          3: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl (hash: Krnsa+QgB88DLzuyzLfap9nFncR5mAmk7CJjSvM7x4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:1f:2a:bc:73:99:c8:d8:03:d1:33:5e:f4:dc:6c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
        Validity
            Not Before: Oct 11 04:01:10 2026 GMT
            Not After : Oct 12 04:01:10 2026 GMT
        Subject: CN=9a033d32693c71053fe1477d4be5b60c02cfdc56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:da:8c:63:87:15:a1:04:84:f2:0c:6a:c7:87:
                    3a:e2:ae:af:da:14:4c:1b:a0:3e:08:10:d1:a8:01:
                    15:49:17:71:e6:ec:06:3c:cb:b3:a0:67:dc:27:a7:
                    9f:65:ac:9c:3a:ee:12:96:a5:77:09:6e:1a:6b:59:
                    d2:66:5a:0e:91:3d:75:a5:7a:f2:2a:46:f2:fa:05:
                    6a:04:25:af:30:c8:26:7b:c8:ef:96:d3:fa:5d:28:
                    64:d6:90:56:dc:de:dc:35:cf:67:65:00:c2:a4:b5:
                    39:e3:b1:be:d6:e2:8b:de:e3:3d:ef:ff:41:28:2e:
                    c8:d3:e6:c1:f6:47:91:8f:5c:7f:e8:db:65:c3:49:
                    a8:c9:22:82:07:78:90:78:74:f0:26:23:23:94:a6:
                    0f:e7:f0:f3:81:ed:b3:4c:97:3e:16:be:59:87:87:
                    a9:63:63:f8:bb:86:ad:c5:04:ff:d6:eb:04:df:72:
                    58:ea:25:3e:15:e6:33:8b:6a:67:6b:35:35:90:ce:
                    d8:83:a3:2b:51:96:e0:b9:9d:3f:61:9e:1f:23:87:
                    cd:70:8f:fa:5e:be:17:fa:71:5f:51:a2:ac:d2:ba:
                    9e:6d:65:0b:98:92:af:0b:19:49:e6:96:5d:55:ae:
                    3e:d0:f1:0c:a2:a3:88:be:f3:3a:ea:f3:22:e4:11:
                    35:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:03:3D:32:69:3C:71:05:3F:E1:47:7D:4B:E5:B6:0C:02:CF:DC:56
            X509v3 Authority Key Identifier:
                keyid:7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:87:1c:a8:ad:0a:d2:c0:c5:53:d8:a1:85:5c:64:a7:08:cc:
         4c:1e:53:fb:0e:4c:33:35:42:9a:d9:7e:4c:4d:68:c3:e2:8a:
         20:3a:78:4d:15:43:35:d1:da:fa:e7:6f:a7:7a:76:1f:fd:58:
         5b:38:ad:25:d4:0c:12:0a:c7:ab:2d:9b:ba:6d:9f:65:77:98:
         75:21:60:50:1a:65:04:51:84:2d:3b:0c:c2:b0:6c:62:f5:ac:
         c7:5b:69:c1:23:e0:de:33:83:b0:94:b2:9f:79:c0:6c:61:6a:
         2c:fd:c2:bf:e0:10:17:49:65:3a:81:d3:9e:97:18:4b:42:4a:
         fc:5a:c9:c4:d7:1a:f1:0c:4e:79:1c:3b:ce:c3:e1:0b:75:cd:
         a7:ae:63:cc:38:cb:4f:67:2a:5f:74:50:e9:af:60:28:7b:9b:
         ef:54:2f:cb:1d:f4:05:15:89:54:0a:96:c9:7c:0f:d7:a0:4a:
         f0:9b:5a:e2:bd:2d:fc:30:b8:9b:d2:c1:6d:3f:06:4a:c8:2b:
         84:02:e6:cd:fa:49:19:2f:96:45:25:60:68:4c:b4:d2:f8:00:
         a8:c5:83:f1:c2:bb:d7:b5:98:0a:6f:fc:e9:1d:2f:9d:2e:d9:
         da:a9:d4:18:3b:ff:8a:9a:bc:42:2b:c6:9b:ed:35:77:bf:2c:
         ee:fd:bb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:26:41 2026 by rpki-client