Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft
File:                     E02_TBOroXoEwLLyRbb1iQyAUWM.mft (raw, json)
Hash identifier:          YO04RSrttsFda53L1kni1jFnbGdPtS9Ppfc1cHPFR54=
Subject key identifier:   8A:96:64:DC:18:EE:F5:39:6C:55:65:1E:B6:E2:A5:DF:6E:13:53:BB
Authority key identifier: 13:4D:BF:4C:13:AB:A1:7A:04:C0:B2:F2:45:B6:F5:89:0C:80:51:63
Certificate issuer:       /CN=134dbf4c13aba17a04c0b2f245b6f5890c805163
Certificate serial:       01A0D07F80BE592AFFF6D48B57546306189F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft
Manifest number:          09ED
Signing time:             Wed 23 Sep 2026 23:00:11 +0000
Manifest this update:     Wed 23 Sep 2026 23:00:11 +0000
Manifest next update:     Thu 24 Sep 2026 23:00:11 +0000
Files and hashes:         1: E02_TBOroXoEwLLyRbb1iQyAUWM.crl (hash: bc5DNaMcLpVTvYMMln36ztTlSydFGSS1mNaQJRnC3n0=)
                          2: NnKs8Yb8P3AYym3D6rU-l-mCsgw.roa (hash: CaO/qZrRLoULZQwtinK2Fm2iopecGkEHAdsrfA5k0X4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:7f:80:be:59:2a:ff:f6:d4:8b:57:54:63:06:18:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134dbf4c13aba17a04c0b2f245b6f5890c805163
        Validity
            Not Before: Sep 23 23:00:11 2026 GMT
            Not After : Sep 24 23:00:11 2026 GMT
        Subject: CN=8a9664dc18eef5396c55651eb6e2a5df6e1353bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c0:3f:61:c9:ba:ad:08:80:2e:0c:23:8a:dc:
                    19:12:cd:fa:7a:ca:23:e9:0a:71:ac:93:cb:d2:bd:
                    39:4f:16:15:c0:9d:11:7a:10:13:d7:c3:49:99:74:
                    08:cd:a9:0f:a0:fe:23:29:6d:e8:71:6a:84:8a:b4:
                    fb:30:7b:67:7c:ba:e3:69:aa:b5:dd:0c:27:0a:8f:
                    c9:81:6d:9b:4e:12:24:7a:7e:b9:1a:a2:fa:8e:aa:
                    8f:b5:eb:8f:c4:40:ac:49:7c:23:a9:70:65:78:48:
                    48:82:e3:7c:38:93:a8:92:36:c5:6f:aa:73:c2:9e:
                    15:94:e0:90:bb:56:91:74:41:ef:c5:ae:51:e6:a6:
                    5e:b0:14:6c:2b:22:ad:d1:27:d7:18:2a:d4:ed:58:
                    14:53:2b:66:39:a0:45:2b:d1:ae:54:0e:57:08:4f:
                    2a:8c:15:23:e3:46:7a:b8:20:55:f6:71:cc:02:2e:
                    5a:9a:ae:fc:45:41:89:96:b0:cc:0e:bc:39:6c:2f:
                    4f:3a:c8:6d:ba:99:1e:72:80:85:48:86:6f:d1:28:
                    03:30:a9:23:81:cd:6d:38:de:b1:48:13:4b:81:61:
                    68:79:54:2b:c9:ab:b6:45:cb:44:b5:71:99:2d:4d:
                    ec:0e:9c:0f:ee:2c:45:02:6e:1f:1f:ca:69:fc:58:
                    15:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:96:64:DC:18:EE:F5:39:6C:55:65:1E:B6:E2:A5:DF:6E:13:53:BB
            X509v3 Authority Key Identifier:
                keyid:13:4D:BF:4C:13:AB:A1:7A:04:C0:B2:F2:45:B6:F5:89:0C:80:51:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E02_TBOroXoEwLLyRbb1iQyAUWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a23f5-7d84-44ab-8f33-583a60820e8c/1/E02_TBOroXoEwLLyRbb1iQyAUWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:52:da:9f:24:ed:a6:fa:5f:61:f7:f9:c2:01:70:79:b8:79:
         60:1d:38:6a:d6:b5:30:68:44:f1:3d:34:07:71:e5:74:38:98:
         0c:8f:7d:94:ee:f1:65:2c:c4:64:3e:0c:4f:7b:ea:68:9e:2c:
         e0:72:41:04:ac:35:ba:e0:13:7f:72:2e:5d:73:29:bf:38:15:
         0e:08:60:8d:2e:7b:29:e1:48:2c:53:8a:0f:17:7b:f7:52:79:
         b1:06:91:4f:d1:97:01:3b:0f:45:08:6f:90:2d:e3:5b:de:36:
         fa:02:b4:1b:21:5b:6e:96:21:e0:cc:c4:3a:ea:7d:59:48:17:
         05:47:96:ef:21:1c:40:c1:3b:c9:16:96:b2:6b:82:32:a9:c2:
         88:a1:fa:06:a7:24:4f:57:2e:3d:f9:04:2c:a4:6b:6c:c9:f3:
         7f:5c:b7:3a:0d:85:57:c0:58:63:4b:34:99:23:b2:29:83:0e:
         37:31:4c:67:3f:8a:c8:c6:81:13:69:d2:03:d7:47:82:5b:b1:
         c4:64:ed:54:d4:56:3d:07:8a:4d:31:9a:46:7f:6e:9d:8a:7d:
         8d:60:58:3c:5f:8f:cb:2d:c8:10:de:2a:28:b9:ae:63:69:ae:
         e3:b4:9e:af:49:4c:f4:d4:3e:f9:d9:f6:0b:e9:fe:a9:a0:4d:
         cf:6d:5e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:22:07 2026 by rpki-client