Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
File:                     E3AevgZ5neCWmJkgUVDlMt7_57U.mft (raw, json)
Hash identifier:          ffuWRPmJbV3+1kyfKrO1kmFzKDZdhOElol/t/qroUuc=
Subject key identifier:   D7:57:7F:8E:B7:47:D1:3D:7C:2C:66:3A:F8:36:D9:B7:98:47:D9:AE
Authority key identifier: 13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5
Certificate issuer:       /CN=13701ebe06799de0969899205150e532deffe7b5
Certificate serial:       01A0F7569BC6BE54522CAE8B353089028AD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
Manifest number:          06A9
Signing time:             Thu 01 Oct 2026 12:00:43 +0000
Manifest this update:     Thu 01 Oct 2026 12:00:43 +0000
Manifest next update:     Fri 02 Oct 2026 12:00:43 +0000
Files and hashes:         1: E3AevgZ5neCWmJkgUVDlMt7_57U.crl (hash: UJZzNYKX5pjgZ5vOnrB2zUDhHzbhhyriEENt9pHO8ls=)
                          2: TVdDTIsyLlfmbrYuR9urFia7Kl4.roa (hash: 4Fv8uKqQZhEYXbziIHF6wwJA7WCIhujnQrmtz+ccn6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f7:56:9b:c6:be:54:52:2c:ae:8b:35:30:89:02:8a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13701ebe06799de0969899205150e532deffe7b5
        Validity
            Not Before: Oct  1 12:00:43 2026 GMT
            Not After : Oct  2 12:00:43 2026 GMT
        Subject: CN=d7577f8eb747d13d7c2c663af836d9b79847d9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:de:a0:7e:9b:bb:8e:6a:52:66:e2:dc:2e:ef:
                    ce:07:5e:e1:26:d0:51:37:f1:36:29:7c:5f:0e:19:
                    9d:1e:7a:72:a8:fc:e9:7d:3d:8e:70:8e:3d:10:33:
                    62:e8:d0:18:6a:5a:ad:e6:b8:70:c4:e6:dd:d3:95:
                    20:d6:b6:c6:22:8e:17:fa:f8:aa:a0:d5:e1:e9:71:
                    33:79:43:96:5e:57:84:b6:0b:25:3c:ad:f3:0e:fe:
                    bc:2d:97:59:a3:1a:6a:9a:ca:45:2b:87:19:b4:e2:
                    0c:f9:57:48:96:18:d9:0d:11:30:d8:1d:05:5a:99:
                    90:21:a7:8b:5c:44:09:95:b8:6d:bd:c4:da:3f:f8:
                    b0:71:d6:d6:80:c0:0c:e0:39:18:b4:3d:6b:21:9a:
                    4c:9f:15:e5:ed:22:69:98:16:d4:d1:58:f4:84:cd:
                    fe:2e:2d:aa:e8:17:91:f2:5a:12:17:4f:8e:c9:78:
                    32:58:ae:8c:c1:c3:0b:42:f2:61:c2:0a:4d:5b:95:
                    87:5d:79:b4:78:da:eb:66:9a:65:44:cd:de:a3:81:
                    a2:95:07:cb:83:be:6e:8d:d5:59:b4:17:07:de:5c:
                    31:aa:2c:c0:85:75:78:91:a3:e5:5a:67:cd:bb:a2:
                    76:03:3a:d0:f3:ff:cf:a9:0d:86:07:4e:90:77:0a:
                    6e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:57:7F:8E:B7:47:D1:3D:7C:2C:66:3A:F8:36:D9:B7:98:47:D9:AE
            X509v3 Authority Key Identifier:
                keyid:13:70:1E:BE:06:79:9D:E0:96:98:99:20:51:50:E5:32:DE:FF:E7:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3AevgZ5neCWmJkgUVDlMt7_57U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8f44c6-7791-4054-a5e5-1ef76442f49a/1/E3AevgZ5neCWmJkgUVDlMt7_57U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e7:f7:ad:47:cf:f5:07:82:45:23:24:5f:ff:f4:38:18:20:
         12:dd:51:96:bd:dd:b7:07:93:ab:cd:7e:5f:8c:cc:b4:d9:6c:
         38:28:b0:df:be:b4:1d:0a:04:da:ed:9b:71:2b:46:ea:bd:96:
         59:74:d2:01:7e:6d:31:9f:35:ce:83:ab:ed:12:ec:8c:40:a2:
         9f:00:63:25:c0:01:d8:99:45:c9:74:61:e7:56:36:eb:c4:b4:
         21:2c:90:bc:d9:90:47:41:2e:c1:3e:9e:28:0e:a8:a6:b4:2b:
         2d:06:47:cc:0a:f5:c2:c8:08:89:45:55:40:1d:c6:5f:fe:cf:
         5c:ff:60:1f:78:ba:f5:d5:09:4f:fc:fe:d3:31:fb:1d:21:1c:
         27:75:d5:bd:f5:f1:46:43:2b:22:08:17:1d:55:f7:63:02:45:
         8e:8a:6e:27:61:4a:76:25:58:67:09:0f:e0:70:9c:1c:c0:b6:
         de:e0:ce:41:57:32:af:4c:94:2a:4d:49:23:be:65:3e:c0:9b:
         9c:35:f8:fa:60:fa:35:f6:64:c0:9b:68:3c:ff:f9:01:c2:05:
         56:3c:4c:56:d7:4d:09:a9:f6:f0:ae:99:e9:53:56:70:d9:b7:
         75:a6:75:47:7c:af:d7:40:c0:a5:77:13:ea:d4:ae:c5:4b:99:
         03:d8:8c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 23:33:06 2026 by rpki-client