Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
File:                     1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json)
Hash identifier:          9lQRIyxkd8nZAXswgpDxW2tUoHetmk9St9IsGO/wEZ8=
Subject key identifier:   24:7E:75:D9:6D:B6:29:6B:6B:49:BB:16:F6:07:32:41:4B:BC:B5:7B
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Certificate issuer:       /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial:       01A102B634B1CAADD72DC8B757EAA9873B43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
Manifest number:          1025
Signing time:             Sat 03 Oct 2026 17:00:57 +0000
Manifest this update:     Sat 03 Oct 2026 17:00:57 +0000
Manifest next update:     Sun 04 Oct 2026 17:00:57 +0000
Files and hashes:         1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: YH9HGSMyHpjFATOCtJ9gBnpYpPWxIE47NWmmJ/vuxBI=)
                          2: PYSOuEJKXfFv96PrgahNaZWMo90.roa (hash: 1YHoKoxpfqieDN1YXiLCsR8fSH3v1YL6XK2N4m5fa+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:b6:34:b1:ca:ad:d7:2d:c8:b7:57:ea:a9:87:3b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
        Validity
            Not Before: Oct  3 17:00:57 2026 GMT
            Not After : Oct  4 17:00:57 2026 GMT
        Subject: CN=247e75d96db6296b6b49bb16f60732414bbcb57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:eb:5d:08:17:c4:90:f3:7a:0d:5f:6e:31:
                    bf:73:ff:7c:44:ea:ac:6d:7d:70:6b:82:49:ae:82:
                    e4:03:0f:b8:32:3c:01:7c:d1:2a:43:2b:d5:55:0e:
                    b7:05:d3:55:5f:8d:19:ac:4f:b5:bd:c8:0b:44:85:
                    ad:91:8b:ea:7b:2e:d5:18:8a:90:19:df:c9:39:3c:
                    16:03:54:8d:dc:9a:d1:9d:da:63:a3:c6:d1:d8:2c:
                    7a:69:4c:77:e7:17:c8:e8:c5:0a:18:56:9f:a0:9c:
                    da:d1:de:fa:a1:52:73:4a:00:49:b9:19:c6:0b:ae:
                    51:1a:fa:10:25:52:43:83:b5:21:87:21:10:06:db:
                    23:dc:dc:b1:88:9b:93:e0:50:05:a1:c7:b1:90:77:
                    a0:ee:bb:48:3c:69:b5:03:e2:93:70:da:0f:01:54:
                    24:06:55:44:68:d1:09:30:46:a6:35:24:40:70:7e:
                    ab:9f:e7:aa:d1:6d:a3:64:f9:91:4b:84:77:f2:cc:
                    70:7d:19:e4:eb:37:e4:44:d1:2f:db:84:3a:f5:d5:
                    d7:c5:99:20:cc:4c:64:1d:d9:97:74:af:c4:43:c9:
                    97:4f:0d:60:f3:8d:2c:62:32:a3:03:a9:c2:fd:8e:
                    14:de:69:c1:6e:05:89:f3:52:ba:b4:28:f5:8a:02:
                    c2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7E:75:D9:6D:B6:29:6B:6B:49:BB:16:F6:07:32:41:4B:BC:B5:7B
            X509v3 Authority Key Identifier:
                keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:4d:0d:38:7d:02:e9:0e:cf:8e:6a:70:58:5d:40:f6:96:f6:
         aa:ad:16:7b:a1:66:9d:5f:98:6e:e6:fe:6d:39:59:cc:07:50:
         dd:5f:d8:cc:01:e3:0b:f9:8f:a6:bf:bd:f8:cf:13:b7:1e:55:
         10:47:e8:24:be:cd:04:b1:e0:e0:22:fe:4b:db:df:2a:a3:fa:
         da:0f:51:bc:71:d7:33:94:0f:59:a4:9f:30:d4:6e:4c:fe:ff:
         2e:fe:42:fd:da:c0:fa:4b:0e:d7:b5:f4:08:c9:53:53:8f:ca:
         ac:f8:a1:61:e3:79:35:45:c9:5c:6b:ec:87:da:4d:a6:14:1d:
         b9:40:7a:a6:43:a7:6e:8a:5d:27:cf:1f:4e:74:cf:8f:3c:64:
         03:33:3f:ed:90:ed:dd:bb:2f:29:f1:51:f7:ce:bd:3c:2e:b6:
         4f:fe:9b:f1:4f:d9:74:95:50:2c:fa:c7:2e:3f:a0:7f:5b:1e:
         19:ac:77:4f:73:10:8b:5b:24:61:f6:c5:4d:0e:56:7f:7d:7f:
         4b:bf:bb:ca:2e:d3:43:c1:63:fc:c0:3c:2f:f3:d5:4c:4c:94:
         7b:cb:7f:be:97:a1:f3:06:08:b3:31:d7:2a:cb:46:54:fa:01:
         20:12:4f:db:3d:ec:91:04:68:b0:53:f2:17:15:52:1a:0c:a8:
         6f:ae:dc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:49:36 2026 by rpki-client