Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.mft
File:                     e2JYjviU8V-132v-4paOMiKQUAk.mft (raw, json)
Hash identifier:          zVlnLM0BweHw2O091+EPkma3EMWu+E7AsSYh3lULNMA=
Subject key identifier:   8C:E0:5F:18:A9:F6:AA:7D:ED:D1:D7:2B:5E:01:2B:02:60:A8:C8:29
Authority key identifier: 7B:62:58:8E:F8:94:F1:5F:B5:DF:6B:FE:E2:96:8E:32:22:90:50:09
Certificate issuer:       /CN=7b62588ef894f15fb5df6bfee2968e3222905009
Certificate serial:       01A1005ACC6671AD43FD63C778D15B2B1745
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e2JYjviU8V-132v-4paOMiKQUAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.mft
Manifest number:          FE
Signing time:             Sat 03 Oct 2026 06:01:52 +0000
Manifest this update:     Sat 03 Oct 2026 06:01:52 +0000
Manifest next update:     Sun 04 Oct 2026 06:01:52 +0000
Files and hashes:         1: e2JYjviU8V-132v-4paOMiKQUAk.crl (hash: p5aR5QyRhJgYBUT0YASkIFmLEnG6HMhIhiBe7nkjczo=)
                          2: n4PZqEq4ej9Dd5bdBkRp3aOYqNE.roa (hash: 1E/T9nLd+QL/eysx3WY4PkqyPLvT4d8WYewTXo8g6eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e2JYjviU8V-132v-4paOMiKQUAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:5a:cc:66:71:ad:43:fd:63:c7:78:d1:5b:2b:17:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b62588ef894f15fb5df6bfee2968e3222905009
        Validity
            Not Before: Oct  3 06:01:52 2026 GMT
            Not After : Oct  4 06:01:52 2026 GMT
        Subject: CN=8ce05f18a9f6aa7dedd1d72b5e012b0260a8c829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fd:67:09:da:8f:0a:0f:b4:c6:1d:7f:19:1f:
                    60:a4:59:ae:c5:89:54:cb:c0:d5:50:1d:a1:ea:be:
                    8f:f8:5f:9c:6f:c8:4c:91:76:01:00:b4:93:8a:67:
                    80:34:c1:00:e0:14:a3:1a:f5:13:09:27:4c:a0:65:
                    d8:df:d6:03:84:31:eb:68:72:17:06:54:12:c3:ad:
                    ec:a0:9e:f4:39:5b:71:ad:ba:05:b1:24:71:05:4a:
                    f2:a5:5e:53:7c:15:3f:0c:08:94:7e:20:b0:ef:5e:
                    e8:cf:41:06:71:27:1b:3b:b5:8f:c4:87:9d:dc:40:
                    27:2a:d7:81:5e:9e:1d:c1:37:52:ce:64:e5:b4:b4:
                    e5:58:2f:50:71:69:4c:37:fc:75:f5:34:2a:73:7d:
                    98:16:d9:11:67:92:e4:f2:cb:29:6a:4a:d9:e5:0c:
                    5e:cf:94:04:5f:13:6e:e0:c5:b9:d5:ef:fa:56:52:
                    d0:b6:b4:cc:f7:4c:fc:11:f5:48:ea:b3:81:34:c3:
                    41:cf:d6:57:23:6f:ed:8b:02:33:08:a2:05:f0:f4:
                    c7:fd:d8:9f:49:11:15:ba:c5:09:70:ae:bb:8a:e1:
                    f2:0d:a4:2f:ea:cf:61:28:8e:e7:be:99:ee:97:1b:
                    ba:cb:8b:8f:5d:9b:3a:d3:54:7d:71:26:5e:af:1a:
                    23:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E0:5F:18:A9:F6:AA:7D:ED:D1:D7:2B:5E:01:2B:02:60:A8:C8:29
            X509v3 Authority Key Identifier:
                keyid:7B:62:58:8E:F8:94:F1:5F:B5:DF:6B:FE:E2:96:8E:32:22:90:50:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2JYjviU8V-132v-4paOMiKQUAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/e2JYjviU8V-132v-4paOMiKQUAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b5:b4:e9:3a:16:e9:9b:51:b3:29:fc:98:23:9e:91:0c:e5:
         88:e5:8c:50:20:07:50:f7:2f:47:0d:c3:bd:d0:96:6a:d6:6c:
         b3:b4:f3:84:30:19:b8:68:8c:e0:f9:ab:4d:ba:06:54:e7:ee:
         17:68:61:99:01:38:d6:f2:8c:10:14:d3:23:43:6a:43:cd:15:
         61:63:68:09:e9:d5:1d:b3:88:2c:9e:14:62:e3:2e:21:8a:2c:
         a6:35:3f:b0:d7:48:9e:60:a5:68:9b:d2:ca:97:a3:ad:21:55:
         b7:7a:18:aa:f6:2c:1f:bd:19:be:e0:94:f5:4f:ad:bd:7a:cd:
         41:44:2f:6c:2e:5e:de:94:76:7a:de:76:3f:0f:e2:7b:8b:e3:
         b3:e0:4e:e8:35:15:4b:b4:05:09:19:c2:5d:9f:76:68:4f:a3:
         bc:91:d1:18:66:d2:4c:29:2f:ae:13:9e:53:18:ac:17:dd:32:
         16:4a:e3:a2:ea:db:a4:98:0d:93:83:0f:5d:c5:88:b7:ca:f7:
         85:13:33:cb:9c:91:22:2a:37:b2:90:8e:e7:ce:6e:b5:b3:5e:
         7b:23:e5:81:7d:2a:ef:5a:f5:ff:bf:8c:8c:c9:b3:88:f0:86:
         ec:31:3c:60:94:a9:52:5a:93:61:ea:cc:96:2b:85:20:61:f7:
         ac:5f:a2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:33:56 2026 by rpki-client