Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
File:                     lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft (raw, json)
Hash identifier:          o1FOAk51R5zVFSm0pAWEqakQBCR3eIhc9XOXaW9kWA0=
Subject key identifier:   86:22:5A:6E:92:26:C2:0D:C1:87:A2:18:25:3F:50:04:29:A4:B8:0B
Authority key identifier: 94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4
Certificate issuer:       /CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
Certificate serial:       01A0DA5F8E7DFA3029FE519519AF03906090
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
Manifest number:          EB
Signing time:             Fri 25 Sep 2026 21:01:30 +0000
Manifest this update:     Fri 25 Sep 2026 21:01:30 +0000
Manifest next update:     Sat 26 Sep 2026 21:01:30 +0000
Files and hashes:         1: 8EFr4zmSfzqdm57D9xgzSL6HFtU.roa (hash: E2H7x7svspORsUyoZUb5Yy6dDt0MFzs6hrI962lU9pw=)
                          2: A20plLgDSbDYPkKsac_6bRMiLUY.roa (hash: z0V9AzxoQIFUzBV8fjyUMEhfk1VmSeC6U5leZPnjdgw=)
                          3: B99tftJ3bxlYsGehiZLdzdd8F0o.roa (hash: kpFT/C5y7FkGP0QbpdYmpJalSgylcnakuAFL8w1Cuvo=)
                          4: gR2LIMs8WBieOmDX2G87FSy4ukA.roa (hash: VVK3o6W1lujFw4qXvOpOtwOe6Lz78s4pIxVQ3DpiyXU=)
                          5: lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl (hash: j8Hg1MbMgUb1crI+6FtWSyD8l42KDttE138evuWy3go=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 21:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:5f:8e:7d:fa:30:29:fe:51:95:19:af:03:90:60:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9440d48cb82eaccf198ee272ef4fa60e497545f4
        Validity
            Not Before: Sep 25 21:01:30 2026 GMT
            Not After : Sep 26 21:01:30 2026 GMT
        Subject: CN=86225a6e9226c20dc187a218253f500429a4b80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:ac:4a:31:79:09:0d:79:b8:e5:91:05:1f:
                    a7:a6:f5:89:8a:bc:b4:2d:a3:49:3d:58:2f:eb:10:
                    cd:50:c7:21:4a:77:49:8f:83:38:fc:68:69:56:2d:
                    5c:d2:37:74:6a:67:3a:d7:de:ef:b5:76:cc:3f:9f:
                    68:93:2f:08:a1:2a:23:6a:3d:8c:4f:48:70:96:07:
                    35:49:be:34:d1:d2:c3:b8:26:b4:29:73:6f:db:ed:
                    56:42:71:e8:5e:da:d6:08:b1:39:0f:23:4b:16:92:
                    71:a9:a6:09:af:9b:dc:b0:21:09:96:0c:7f:4a:2c:
                    73:d7:91:e9:0c:5f:49:77:e0:54:2d:c5:97:ea:2e:
                    da:ea:7b:d2:6f:0f:7e:c6:87:a7:87:56:0f:66:bb:
                    dd:f7:5d:f3:c8:3c:7d:c4:0e:5e:ed:a9:93:9e:16:
                    a6:0c:db:c2:54:6b:7e:26:7f:ff:72:01:66:f7:fd:
                    4b:56:11:e2:1d:f8:4c:19:90:08:c4:43:34:62:4e:
                    59:77:52:de:ac:c2:83:33:e5:a3:aa:c0:e8:55:9b:
                    9d:38:f4:07:02:86:5a:eb:44:f0:6d:81:0d:55:00:
                    4b:62:59:ef:a1:96:21:6b:a6:f3:68:f1:71:fd:a8:
                    e8:c2:a4:a7:ca:ca:5f:9f:d0:3a:bc:5f:67:4e:25:
                    17:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:22:5A:6E:92:26:C2:0D:C1:87:A2:18:25:3F:50:04:29:A4:B8:0B
            X509v3 Authority Key Identifier:
                keyid:94:40:D4:8C:B8:2E:AC:CF:19:8E:E2:72:EF:4F:A6:0E:49:75:45:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEDUjLgurM8ZjuJy70-mDkl1RfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/lEDUjLgurM8ZjuJy70-mDkl1RfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:bf:fc:00:1a:83:66:30:96:05:3b:88:d8:57:41:c0:fb:d7:
         c7:57:1e:bb:2c:18:d9:20:5b:e3:0f:31:5f:cc:ff:4b:ae:5b:
         ed:f4:1d:13:eb:46:05:9a:5b:fd:9b:05:7e:75:c6:4a:be:e0:
         11:cc:c2:4e:7f:f9:fc:d6:26:45:1e:c8:f9:42:1a:98:ef:c1:
         c3:be:81:f4:22:c1:f6:30:ae:47:6e:d3:f1:2b:42:c2:43:f9:
         0c:d5:87:31:fd:54:b8:d2:be:03:93:cf:aa:38:64:b4:0a:d5:
         4c:91:0d:29:c9:be:21:80:33:d6:e2:04:c0:cb:b0:15:96:a6:
         42:aa:5f:ad:31:06:cc:0e:f0:cb:59:19:53:53:d2:8c:61:e9:
         83:05:0e:0a:e8:b8:30:4b:11:93:33:9f:ee:c9:44:01:7e:88:
         4a:79:1b:be:b5:b5:6b:ad:37:d2:ef:a3:8c:bc:4a:08:72:d6:
         14:4d:fd:63:b2:e0:7e:3a:0d:b3:0a:86:b7:2f:49:ad:79:5c:
         1a:64:af:55:94:3c:c4:76:a7:94:e5:70:2c:bb:23:bd:3f:be:
         c8:80:ba:86:99:95:4e:17:f2:61:2e:76:2e:bf:65:87:af:1c:
         51:2d:81:c7:97:a8:1c:48:b8:a3:2e:80:1a:c0:a8:2a:01:84:
         84:84:55:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:31:51 2026 by rpki-client