Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
File:                     sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft (raw, json)
Hash identifier:          oKuymt2uzRQ6lH+Cd1G6ugGs5kLxi82eFoaooxX2DaQ=
Subject key identifier:   80:BF:30:59:B2:27:CB:0B:34:0E:93:20:BA:31:A9:0D:F8:E8:E9:F9
Authority key identifier: B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44
Certificate issuer:       /CN=b043e621fe1009701f6366843c0abc41e180c144
Certificate serial:       01A111BC95055C783E7F5528075D2B328875
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
Manifest number:          1175
Signing time:             Tue 06 Oct 2026 15:02:13 +0000
Manifest this update:     Tue 06 Oct 2026 15:02:13 +0000
Manifest next update:     Wed 07 Oct 2026 15:02:13 +0000
Files and hashes:         1: OgmO1-eTgD9dDZrWj316OjI4JBA.roa (hash: 2J65qaET21q0mAcovvv6olsnYJM+JIut2vJCZjhvWr4=)
                          2: sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl (hash: B4stDkm5473Z3xlm7qXvwTmszMhFaM3d1RN1I74s+QY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:bc:95:05:5c:78:3e:7f:55:28:07:5d:2b:32:88:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b043e621fe1009701f6366843c0abc41e180c144
        Validity
            Not Before: Oct  6 15:02:13 2026 GMT
            Not After : Oct  7 15:02:13 2026 GMT
        Subject: CN=80bf3059b227cb0b340e9320ba31a90df8e8e9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:07:cc:06:f0:7b:fe:d0:50:7c:ec:88:4b:
                    bb:81:05:a6:03:0b:0d:af:f8:81:3d:f9:34:55:44:
                    e1:31:6a:3e:28:c9:ae:50:43:41:b0:f8:0f:9a:c7:
                    31:5e:ff:36:0a:35:64:f1:f4:78:36:3c:19:bc:7d:
                    fe:8b:fa:5f:db:d4:7a:9a:c8:46:36:e2:8e:65:d7:
                    cc:c5:c8:bb:fa:f4:7a:db:fd:d7:94:ed:27:10:ff:
                    4f:95:7b:52:a8:b0:92:49:80:7e:d4:b4:ee:4d:cd:
                    4b:39:7b:19:4b:d9:d3:91:9a:58:46:56:fc:25:80:
                    07:f1:eb:5a:9b:fa:79:6e:fb:78:68:f1:68:20:3c:
                    1c:ff:4e:7e:7a:7c:75:e5:76:f9:98:82:8f:3a:08:
                    aa:07:3e:2b:14:73:a6:b0:1f:2d:b2:a2:f3:e7:9c:
                    7f:18:5b:04:e0:80:b2:24:ab:59:57:b3:fc:9b:00:
                    c8:55:6e:fd:41:f6:31:76:0e:2c:24:e9:cd:ec:cd:
                    77:17:e3:d7:b2:cb:ba:97:b8:6f:1e:34:c6:c6:31:
                    18:af:28:1d:80:ce:86:46:b1:d3:92:a7:77:c9:ab:
                    f7:6a:d2:c0:91:32:d4:c0:dc:b3:91:17:b1:7e:a0:
                    a8:64:48:fd:88:a8:38:2f:09:27:4b:fa:dc:cb:89:
                    e5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BF:30:59:B2:27:CB:0B:34:0E:93:20:BA:31:A9:0D:F8:E8:E9:F9
            X509v3 Authority Key Identifier:
                keyid:B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:08:46:e8:4b:8c:fb:2a:2c:50:90:45:53:01:da:81:4c:7f:
         62:51:7a:53:5e:ec:1c:c2:2a:34:5a:38:af:71:18:7c:df:e1:
         72:0c:19:16:59:5d:33:b2:8d:7f:5c:6b:a2:61:d8:c6:b8:a4:
         0f:b5:5a:75:de:4e:f0:1f:5f:5d:ed:fe:62:b3:ed:14:3d:49:
         c3:9b:dd:62:16:32:95:69:85:8b:4e:d2:1a:80:32:d8:87:11:
         48:6c:e5:35:e1:d9:87:9d:30:0d:a7:53:ec:3c:bb:a9:e6:64:
         41:2c:9b:7c:67:d1:72:82:93:e3:e2:f4:32:75:1f:50:a3:08:
         c5:2c:fd:d7:c7:3b:9c:87:51:55:1c:c1:90:50:66:25:97:65:
         6c:01:c6:e6:68:b5:37:43:8c:21:67:85:8c:de:e2:12:da:30:
         aa:71:30:03:74:2e:fa:32:7e:c0:0b:b5:81:a2:1c:ca:75:da:
         6a:61:c4:c8:f2:6b:ee:2a:7c:94:c2:e7:4a:de:a3:23:ca:b4:
         08:aa:f8:a5:bd:84:b4:fc:13:dd:02:9e:5b:de:f0:45:a0:51:
         2f:7d:6b:d4:48:c1:14:f4:a7:c1:1b:fc:a1:46:aa:4a:18:0e:
         39:3e:ed:28:60:b1:c4:10:0b:87:2d:ad:e1:13:47:99:d5:82:
         7c:4f:7c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:12:04 2026 by rpki-client