Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/24a689-595c-498b-a774-1333d9313201/1/sEGLTKBrJ88hRqnV34ozWsJv66Y.mft
File:                     sEGLTKBrJ88hRqnV34ozWsJv66Y.mft (raw, json)
Hash identifier:          xbA835H9/fkYnvG6JiyN1cUgeRJ6JTDVhHcmrFtcb7E=
Subject key identifier:   34:DA:6B:67:58:EA:68:5B:41:31:D9:38:62:03:AF:AE:F9:57:1C:63
Authority key identifier: B0:41:8B:4C:A0:6B:27:CF:21:46:A9:D5:DF:8A:33:5A:C2:6F:EB:A6
Certificate issuer:       /CN=b0418b4ca06b27cf2146a9d5df8a335ac26feba6
Certificate serial:       01A105EE3839ED08D39844E2C8A551F033DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sEGLTKBrJ88hRqnV34ozWsJv66Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/24a689-595c-498b-a774-1333d9313201/1/sEGLTKBrJ88hRqnV34ozWsJv66Y.mft
Manifest number:          029F
Signing time:             Sun 04 Oct 2026 08:01:00 +0000
Manifest this update:     Sun 04 Oct 2026 08:01:00 +0000
Manifest next update:     Mon 05 Oct 2026 08:01:00 +0000
Files and hashes:         1: 0piZVg6nYn1zr1D9tSdhmaFoiB0.roa (hash: 4/Aijc3U66ItVo2bUJk6n9moOAc6MXnBaHbZAgIrcwM=)
                          2: sEGLTKBrJ88hRqnV34ozWsJv66Y.crl (hash: tOUEbl4CpsrHjsLhEuwBuaGqsT9k1rZZJR4PMsgfG6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/24a689-595c-498b-a774-1333d9313201/1/sEGLTKBrJ88hRqnV34ozWsJv66Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/24a689-595c-498b-a774-1333d9313201/1/sEGLTKBrJ88hRqnV34ozWsJv66Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sEGLTKBrJ88hRqnV34ozWsJv66Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:ee:38:39:ed:08:d3:98:44:e2:c8:a5:51:f0:33:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0418b4ca06b27cf2146a9d5df8a335ac26feba6
        Validity
            Not Before: Oct  4 08:01:00 2026 GMT
            Not After : Oct  5 08:01:00 2026 GMT
        Subject: CN=34da6b6758ea685b4131d9386203afaef9571c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:33:b3:bf:3d:de:b3:7c:d2:8f:5f:c3:cd:
                    2a:68:79:78:1c:92:e4:99:cb:47:33:8e:37:79:fc:
                    f6:e2:26:57:ee:63:2f:cf:c4:49:91:87:0a:23:62:
                    e8:32:15:4f:9e:32:6d:05:46:b2:13:b6:da:fb:d1:
                    01:00:e8:64:a4:cd:4c:ab:4d:0e:10:60:ca:d2:a3:
                    2a:66:c7:81:91:52:85:22:d7:a9:e0:c7:8d:4e:7d:
                    54:8e:75:c0:08:c5:2f:2e:bc:e1:27:e7:86:a6:ec:
                    b6:79:51:80:41:e7:89:1d:11:d5:44:62:3e:ff:87:
                    aa:2d:c8:b9:b5:ee:c3:8a:97:dc:4b:30:70:9e:8c:
                    43:ff:24:1d:70:4d:a7:75:3a:ba:86:0b:9a:8c:3b:
                    26:0b:2f:b4:41:37:53:58:ba:82:cb:fc:c0:a1:5b:
                    63:0e:e3:55:5d:fa:54:1c:af:a7:5c:fa:a4:2a:42:
                    93:fc:19:69:f8:de:a6:77:f8:db:cc:19:2b:24:90:
                    13:38:90:b8:e8:d8:0d:70:b4:52:c7:86:21:eb:d9:
                    05:60:83:89:af:85:62:d8:9f:81:90:38:f9:d2:35:
                    54:5f:06:f4:ed:b7:2b:8c:e1:24:84:0b:c3:32:2b:
                    4a:5c:29:c4:d0:1f:0e:07:ca:b1:63:62:a3:ac:d1:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DA:6B:67:58:EA:68:5B:41:31:D9:38:62:03:AF:AE:F9:57:1C:63
            X509v3 Authority Key Identifier:
                keyid:B0:41:8B:4C:A0:6B:27:CF:21:46:A9:D5:DF:8A:33:5A:C2:6F:EB:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEGLTKBrJ88hRqnV34ozWsJv66Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/24a689-595c-498b-a774-1333d9313201/1/sEGLTKBrJ88hRqnV34ozWsJv66Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/24a689-595c-498b-a774-1333d9313201/1/sEGLTKBrJ88hRqnV34ozWsJv66Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:72:c5:03:66:32:fc:e5:f4:2d:b9:a9:74:e3:fc:bc:de:f4:
         8f:8b:fc:a3:3c:09:2f:58:b7:6e:40:33:9a:f8:80:6f:07:34:
         66:44:eb:e5:7b:ea:0b:0b:6a:31:bc:5d:f7:07:07:3c:73:62:
         d1:58:2a:60:1e:7f:c2:bc:3c:16:40:ba:c7:85:ba:59:25:ba:
         5f:38:0b:fd:bc:e9:3f:26:fd:da:19:a0:38:04:d6:58:be:47:
         7c:06:ea:35:c8:33:2d:4f:cd:2b:ef:00:9f:75:62:83:4c:82:
         02:f5:23:d3:c7:f9:7b:c6:6b:4a:8e:75:dc:09:35:0c:21:0d:
         8b:23:3d:35:dd:6f:f5:9b:2b:97:97:4f:2c:2e:02:e3:08:63:
         96:17:73:dc:ed:4c:0f:61:0a:96:1a:08:fe:8f:72:c2:7f:3d:
         4c:29:98:47:5b:07:0f:3e:77:86:dc:38:a1:4a:ed:43:48:6a:
         89:d4:62:4e:21:51:c7:5e:f9:a0:44:d5:63:a7:5d:b1:cf:16:
         d2:cc:34:45:f2:46:64:01:e3:93:f6:a1:81:d4:63:df:b4:d9:
         b1:d0:30:35:b9:d6:40:24:56:59:e6:19:99:2a:e2:2b:c6:87:
         38:9f:16:49:16:26:01:b2:b9:44:d1:14:4e:11:0b:9a:84:fc:
         70:3d:f3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:37:53 2026 by rpki-client