Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.mft
File:                     e25aru9TlinMasqMmqETMUq4UUU.mft (raw, json)
Hash identifier:          Ltilf2BnKSLSuGQvvax4UR6IbG4//c7bOO8ffda8KSQ=
Subject key identifier:   E0:48:4C:FA:4A:58:AD:66:4C:EF:A9:FF:4D:09:A9:88:A4:30:71:5D
Authority key identifier: 7B:6E:5A:AE:EF:53:96:29:CC:6A:CA:8C:9A:A1:13:31:4A:B8:51:45
Certificate issuer:       /CN=7b6e5aaeef539629cc6aca8c9aa113314ab85145
Certificate serial:       01A13D81082EBA4728F9275FFA5A414773CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e25aru9TlinMasqMmqETMUq4UUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.mft
Manifest number:          023E
Signing time:             Thu 15 Oct 2026 03:00:28 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:28 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:28 +0000
Files and hashes:         1: Ctqo-QN4R4J69mFkUkFYKw3aJ6I.asa (hash: XL30CqXX7gC7D+oq8GfpSD/p2Bn5ULr+xMqb5kFi8/0=)
                          2: e25aru9TlinMasqMmqETMUq4UUU.crl (hash: X0NbGBpikIRQY8TGtDDhJh2tHe5H/PgwaXRK3AgCoy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e25aru9TlinMasqMmqETMUq4UUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:08:2e:ba:47:28:f9:27:5f:fa:5a:41:47:73:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b6e5aaeef539629cc6aca8c9aa113314ab85145
        Validity
            Not Before: Oct 15 03:00:28 2026 GMT
            Not After : Oct 16 03:00:28 2026 GMT
        Subject: CN=e0484cfa4a58ad664cefa9ff4d09a988a430715d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:81:f6:38:c0:e5:33:82:41:75:89:54:6f:cc:
                    46:e1:72:2b:3a:6a:b0:32:86:ba:e5:61:7d:c9:ed:
                    30:9e:35:b1:96:d2:6c:60:e9:30:f1:59:18:95:d6:
                    e8:84:0e:2f:93:9b:62:5d:1d:75:46:ad:83:bd:d5:
                    c7:bd:89:5a:47:67:d7:96:92:52:c7:f0:de:2e:43:
                    71:c9:e9:5f:37:20:3c:f7:67:0f:7c:c1:b4:07:a3:
                    9a:b7:28:c7:dc:72:3a:fa:ec:25:d5:f0:e1:3c:99:
                    27:a4:3f:12:37:2f:b2:bd:6b:e0:25:25:5f:da:17:
                    07:fe:fd:6a:6e:a4:db:ab:15:58:bc:14:c4:c3:4c:
                    66:9f:2a:54:04:90:7d:6e:c5:78:6c:a2:02:7c:07:
                    16:71:c8:50:03:fc:a5:fa:a1:45:26:72:8f:da:c7:
                    d6:27:32:36:f9:bd:05:3c:59:4d:4c:7c:ce:5a:45:
                    9d:de:77:69:3d:9b:39:f9:cf:98:c4:a8:36:b6:05:
                    05:80:41:81:04:30:ad:6a:0c:b0:a3:b5:11:fe:39:
                    5a:72:de:52:e9:46:5a:27:6a:66:4c:23:13:f7:88:
                    27:6f:11:03:6a:db:46:ce:15:1a:44:56:5f:08:84:
                    56:14:25:2b:73:f9:9a:29:14:a3:4c:47:7c:04:91:
                    dc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:48:4C:FA:4A:58:AD:66:4C:EF:A9:FF:4D:09:A9:88:A4:30:71:5D
            X509v3 Authority Key Identifier:
                keyid:7B:6E:5A:AE:EF:53:96:29:CC:6A:CA:8C:9A:A1:13:31:4A:B8:51:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e25aru9TlinMasqMmqETMUq4UUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/19ebc7-5782-4c63-8814-74061fd36dc9/1/e25aru9TlinMasqMmqETMUq4UUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ac:af:48:e0:7b:7e:2a:ab:d9:fe:aa:5d:b9:5e:2a:bb:08:
         50:97:63:d8:8b:63:b3:1c:08:69:b1:79:2b:81:c6:b4:41:22:
         30:b2:1e:0f:6b:b4:43:8e:7b:4d:ab:ee:54:28:fd:20:ee:54:
         e9:e7:59:3b:ab:f7:17:e9:30:e6:5e:6c:d2:63:a6:87:f0:75:
         01:cd:e6:39:e8:a1:74:a4:13:1c:05:90:1e:88:f2:90:fb:8c:
         37:ff:5f:15:67:50:69:78:e7:ab:97:ef:9d:55:5d:86:75:6a:
         dd:0d:e9:b6:cb:06:63:66:e9:3c:2b:b9:8f:fb:23:ef:ce:fa:
         3b:3d:d2:fc:03:53:3b:dc:94:06:b9:10:e7:a4:95:40:96:1d:
         c9:46:e7:63:56:be:1e:fd:e9:f6:ff:5b:85:5b:c7:71:d6:67:
         27:35:20:24:e8:9c:9b:9e:ca:9f:5e:8b:80:53:25:38:14:54:
         4d:ed:93:a9:a2:30:1d:9c:2f:20:20:58:6a:03:6f:79:ae:3b:
         25:e9:ef:de:74:0a:9c:0e:af:9d:4f:fa:b3:02:b6:f1:3a:4a:
         49:d3:33:94:7e:e3:d4:eb:77:2f:9d:7b:9b:b4:4d:eb:cb:5f:
         3f:83:fc:5f:75:80:97:3c:eb:ca:bf:71:6c:37:50:69:e6:9a:
         24:9a:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:15:36 2026 by rpki-client