Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
File:                     EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json)
Hash identifier:          1sWFQ2+HSc5F4n3oMswwmq7NFx9aGxa3U5asVPWyjQU=
Subject key identifier:   CC:85:8D:CE:B8:B7:00:3F:69:4A:4C:D9:77:AC:73:80:93:EB:71:83
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Certificate issuer:       /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial:       01A106268D97783CCD221A1C3E39F74F89E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
Manifest number:          1AC9
Signing time:             Sun 04 Oct 2026 09:02:32 +0000
Manifest this update:     Sun 04 Oct 2026 09:02:32 +0000
Manifest next update:     Mon 05 Oct 2026 09:02:32 +0000
Files and hashes:         1: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: XU7FpOBDv8+UKXGbkm5Oep03KC9+nxTwCdIWKggt0lM=)
                          2: oGSX6Be2A4gMsymfO3IeIELxVGc.roa (hash: 9nynO0eaDCEM38Kekr3tOs/yAPJlXITpxT9ftUpbs/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:26:8d:97:78:3c:cd:22:1a:1c:3e:39:f7:4f:89:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
        Validity
            Not Before: Oct  4 09:02:32 2026 GMT
            Not After : Oct  5 09:02:32 2026 GMT
        Subject: CN=cc858dceb8b7003f694a4cd977ac738093eb7183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:be:f2:3d:d3:09:4b:e0:82:8f:74:9f:53:15:
                    3e:cf:87:bd:d1:7e:eb:fa:6e:fc:db:28:ab:67:5c:
                    30:09:a5:91:57:31:e7:b2:79:cc:ba:e1:a5:be:c0:
                    63:3c:0a:63:93:2d:b4:2d:36:cf:bc:06:2c:d6:dd:
                    97:1c:98:5b:c6:96:75:e6:c0:50:d8:3e:87:72:12:
                    96:91:06:dd:cb:52:6e:51:56:72:79:0b:c8:80:65:
                    de:f5:d3:bd:ac:c7:d7:c1:97:a0:78:a0:01:8d:eb:
                    3a:0f:4f:ee:60:ee:e9:db:d9:e5:ee:e8:4d:61:0b:
                    a4:c0:cd:02:b3:d4:6c:48:b9:9c:6b:e6:97:80:09:
                    d0:4e:23:e7:e9:ac:c7:b4:0e:0f:fc:56:0d:8f:d9:
                    3f:7c:e0:66:9e:e0:01:f5:40:1c:e3:b5:ba:81:8b:
                    0f:58:01:b0:21:9b:6e:36:b8:22:26:b9:66:9b:f3:
                    48:db:f5:c2:22:76:07:cc:91:6a:6d:14:25:55:cb:
                    c2:14:c1:ad:30:c2:a3:70:bf:ce:f6:0c:38:0b:0b:
                    d3:f8:e8:03:c6:8d:4a:1d:14:b5:fa:ad:7a:4c:d5:
                    92:17:e7:eb:0b:56:6a:22:eb:ce:50:24:f0:25:72:
                    12:25:32:d1:6e:64:10:0b:56:36:24:e4:df:6f:f1:
                    35:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:85:8D:CE:B8:B7:00:3F:69:4A:4C:D9:77:AC:73:80:93:EB:71:83
            X509v3 Authority Key Identifier:
                keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:47:e9:cf:f2:7f:00:10:77:da:44:e9:a3:b8:75:87:cb:c0:
         9c:72:d9:27:00:a6:73:16:98:31:fb:47:91:25:30:48:26:cc:
         c8:1d:6b:35:28:c0:a0:91:b0:d8:3c:ab:f3:bc:8b:09:66:75:
         2d:d7:b0:12:2f:a0:43:d3:06:26:de:40:bf:51:10:29:4a:16:
         29:c1:b5:b0:70:d1:49:d2:b3:a4:6f:c1:fc:45:07:d7:94:fb:
         1a:83:ff:99:68:dd:23:a6:6a:20:6b:74:30:d6:a9:a2:cd:43:
         35:a5:cf:45:05:37:9e:c8:5e:b2:ca:00:58:db:42:8b:d9:6d:
         08:6f:7b:bd:16:64:30:a2:44:4f:ac:05:16:70:ba:2b:1b:13:
         fd:1e:45:a4:5a:d9:e3:a5:14:68:81:62:24:a6:40:9f:4d:4c:
         15:9c:56:a1:d6:c8:74:1e:5c:6a:57:c6:86:30:ee:c6:44:88:
         34:46:85:ed:48:4e:09:c5:93:47:c4:a1:f8:68:a7:1e:bf:0b:
         9e:00:7e:4e:85:7a:40:6e:8b:ce:8a:18:22:9f:c4:22:3f:b2:
         0d:59:b6:5f:5d:86:f6:3a:20:4d:8c:f6:f3:47:10:74:71:b0:
         82:38:82:b6:d4:ca:7e:d7:0d:87:d0:97:81:da:56:68:bd:f2:
         23:32:ee:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:21:45 2026 by rpki-client