Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
File:                     EH6W-USd78RwvMWpH5IXxigawbI.mft (raw, json)
Hash identifier:          pTEruYPfQGdR8XuFeqytg3CfDhzj2XDVHcsKt0SZb+k=
Subject key identifier:   AE:E9:D1:7C:0A:18:A3:57:28:EA:F8:87:3A:35:34:29:EB:2A:D3:22
Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
Certificate issuer:       /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Certificate serial:       01A0E5F58B7E9DE6BAF0B89E1EF240F01931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
Manifest number:          1A77
Signing time:             Mon 28 Sep 2026 03:01:09 +0000
Manifest this update:     Mon 28 Sep 2026 03:01:09 +0000
Manifest next update:     Tue 29 Sep 2026 03:01:09 +0000
Files and hashes:         1: EH6W-USd78RwvMWpH5IXxigawbI.crl (hash: XIFhrgoRiA8x5jo42oAYIyso1i4d16BgzU/egR9Dg9s=)
                          2: gv1GGCci0GYDu_oCzbbduhxzrWw.roa (hash: YOl1u3KuTTS65SS09VBRfvkXVdLfXku57oCCyc5onLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 03:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:f5:8b:7e:9d:e6:ba:f0:b8:9e:1e:f2:40:f0:19:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
        Validity
            Not Before: Sep 28 03:01:09 2026 GMT
            Not After : Sep 29 03:01:09 2026 GMT
        Subject: CN=aee9d17c0a18a35728eaf8873a353429eb2ad322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:21:c4:ef:b1:42:1f:61:4b:ba:c1:cd:74:ed:
                    ab:85:4e:1a:91:b8:b9:11:2b:12:42:6c:0a:3a:e7:
                    77:eb:fd:47:00:35:00:74:eb:2d:1b:0f:98:04:ae:
                    a8:33:e3:e7:8f:24:c5:50:25:13:93:a8:8c:7e:0b:
                    f7:d5:53:e2:4e:ca:c4:75:4c:bb:97:88:d0:90:2e:
                    37:e1:93:e9:50:e3:5f:ef:0e:ce:08:44:6f:89:9d:
                    a7:b7:65:41:28:98:c5:a3:38:a5:25:d2:e0:72:83:
                    29:45:90:c8:be:6a:78:15:30:d2:d2:7a:5e:b0:92:
                    6e:19:a2:6b:05:5d:15:85:c0:86:fe:6c:67:c9:99:
                    c8:ea:af:e8:4c:60:52:e1:fb:ca:bf:d5:f2:26:b4:
                    8e:6a:1f:8c:ca:83:33:ed:c6:7b:6b:27:91:5d:f3:
                    e5:12:b6:5f:76:a1:d0:d4:2f:94:fc:45:2c:76:a6:
                    8a:8f:45:81:fc:2b:6f:f8:9a:fa:d5:82:e3:e1:ef:
                    72:85:0e:63:eb:10:60:09:f9:88:af:2a:c6:4c:94:
                    eb:d2:ab:0a:5f:81:7d:df:7a:fc:4f:03:d4:e2:e7:
                    1d:e7:33:1e:f7:65:7f:0b:36:f6:08:15:6e:e5:62:
                    e3:6c:4c:24:d3:3b:07:a5:d2:aa:fd:1e:3b:62:62:
                    4d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E9:D1:7C:0A:18:A3:57:28:EA:F8:87:3A:35:34:29:EB:2A:D3:22
            X509v3 Authority Key Identifier:
                keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ed:a6:7a:96:84:2e:d2:ab:92:b7:27:91:4d:9c:db:e6:10:
         73:56:38:d3:d3:e0:db:b6:97:57:17:89:81:47:dd:e7:64:86:
         4f:0a:12:e3:50:3a:ab:12:b3:57:71:1e:85:38:71:a4:59:9b:
         46:dd:99:e5:8e:dd:f6:c7:d8:4b:83:54:73:e9:d6:d3:ec:7f:
         69:59:0b:c5:e2:0d:ee:46:02:c5:41:00:27:a2:57:c8:e0:80:
         10:29:9e:7b:e1:f6:7b:9a:e8:59:80:fd:c9:32:58:3a:52:34:
         a8:5b:38:e5:37:e5:54:ac:cf:af:e7:96:e3:b0:b4:d9:50:42:
         a3:39:53:93:09:d6:9e:e4:af:77:e5:40:f4:b7:5d:0c:27:21:
         db:fd:91:1d:e0:70:56:ef:45:33:74:76:6a:13:c5:70:c1:e3:
         c5:18:05:01:b1:95:ee:7b:69:1e:66:df:03:7d:e3:2b:c7:73:
         8c:78:0e:50:9b:90:87:03:3f:6b:ae:9e:9e:69:02:1a:c7:59:
         9f:cd:9b:51:02:40:16:81:da:08:66:92:65:f8:47:02:a5:e0:
         9a:ed:a6:b6:6b:ee:d5:99:f2:73:59:bc:88:15:39:e5:62:d6:
         f2:6b:38:5b:eb:f7:be:3b:14:e2:cc:08:bd:4b:9e:15:da:1e:
         1d:91:52:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 13:16:52 2026 by rpki-client