Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft
File:                     EzSVRauL_SZSc-jUhDuYvwtBSPI.mft (raw, json)
Hash identifier:          vEQFpyS2W6tu/TbYNVeOTwhcI9lALBbSVdBRB283bQk=
Subject key identifier:   AC:48:30:B0:EE:AC:6E:15:86:11:35:87:FC:E6:07:10:D6:F5:04:7C
Authority key identifier: 13:34:95:45:AB:8B:FD:26:52:73:E8:D4:84:3B:98:BF:0B:41:48:F2
Certificate issuer:       /CN=13349545ab8bfd265273e8d4843b98bf0b4148f2
Certificate serial:       01A0E9D273A0FE74919D23B0D55A82129A50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft
Manifest number:          1A7A
Signing time:             Mon 28 Sep 2026 21:01:18 +0000
Manifest this update:     Mon 28 Sep 2026 21:01:18 +0000
Manifest next update:     Tue 29 Sep 2026 21:01:18 +0000
Files and hashes:         1: EzSVRauL_SZSc-jUhDuYvwtBSPI.crl (hash: Y8Z3Z4oJvOW/r4SVxCPLivnzUZLO449KQeRUlaomgbg=)
                          2: uynZ3jgCdHPAcePQynfxjEPAeXY.roa (hash: rhvew1e/Vbfk2rGbsdSlPPP6ecsRbphOEm/BmlJmkO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:d2:73:a0:fe:74:91:9d:23:b0:d5:5a:82:12:9a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13349545ab8bfd265273e8d4843b98bf0b4148f2
        Validity
            Not Before: Sep 28 21:01:18 2026 GMT
            Not After : Sep 29 21:01:18 2026 GMT
        Subject: CN=ac4830b0eeac6e1586113587fce60710d6f5047c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:4c:cd:e7:00:3a:71:12:e7:af:de:d3:03:
                    7b:7a:92:6e:34:50:3f:68:08:37:1c:90:3e:52:17:
                    21:44:d2:3b:d4:6e:24:2c:54:cd:d4:76:53:f8:a7:
                    84:cf:57:15:7f:c3:e1:1b:91:f2:fe:d4:fe:31:10:
                    e8:24:b3:fe:2b:3c:9f:95:c1:22:0a:17:59:32:52:
                    59:1f:7b:10:14:4d:48:c7:5f:78:bc:7a:b2:ca:e3:
                    82:a2:55:7c:97:e4:da:1d:cf:f1:3a:24:44:a1:b7:
                    b6:c3:47:45:7d:bf:3c:5b:ad:3b:3e:81:b2:02:f5:
                    cb:fb:27:bb:1f:53:be:2e:b2:96:6b:56:11:6d:76:
                    2d:01:73:3d:6c:64:3d:52:7b:3f:cc:a7:fd:12:fe:
                    a9:1a:3c:97:16:0b:c6:0d:c9:a1:4b:77:2c:66:7a:
                    88:71:f4:d7:a6:02:71:74:66:24:60:75:d9:b3:00:
                    a6:02:be:3c:a4:9b:67:3e:2b:11:34:b6:45:db:b8:
                    39:37:dd:e7:8c:7a:6e:d4:fa:be:39:ac:70:83:02:
                    1f:01:2e:a4:08:c1:36:e8:24:f9:fc:67:be:28:77:
                    db:32:d0:9b:22:c1:f6:f5:3d:d7:e1:a0:c9:a9:c7:
                    cd:1a:4d:ce:23:66:bf:0d:f1:84:0e:8d:d6:8a:21:
                    8b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:48:30:B0:EE:AC:6E:15:86:11:35:87:FC:E6:07:10:D6:F5:04:7C
            X509v3 Authority Key Identifier:
                keyid:13:34:95:45:AB:8B:FD:26:52:73:E8:D4:84:3B:98:BF:0B:41:48:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:de:5a:81:25:3c:82:3e:6d:61:00:21:63:5f:d4:3b:e7:8a:
         6d:0a:61:45:47:80:90:a0:14:5d:da:a4:35:8f:3d:e2:81:b9:
         5d:90:98:b3:bf:25:ec:d0:cd:ec:2f:8f:d7:4d:a6:ed:8e:fd:
         7b:7d:4a:b2:a0:a7:94:08:32:ae:3e:f7:8e:7c:2a:fc:a6:0c:
         1f:46:e5:dc:27:80:8c:79:51:d8:1f:80:90:6e:e5:89:a3:94:
         48:b3:e7:c5:13:93:73:3d:fe:67:b2:41:b8:e7:dc:dd:69:6a:
         6b:8a:4f:f0:cc:d2:b8:e8:a7:32:33:a8:06:77:da:6f:00:56:
         52:7f:02:9d:56:17:af:9b:08:8f:7f:56:ff:f4:2b:7f:55:30:
         37:55:eb:f7:d6:bb:63:f1:f1:e0:ae:ef:50:ee:ac:40:e0:50:
         9c:d1:27:d5:13:7e:93:65:0e:53:7b:8b:b9:2b:f6:bf:47:30:
         4e:1b:20:ef:59:5d:18:aa:4c:62:23:18:02:1f:8d:ac:0b:38:
         cf:da:24:69:f0:00:0b:e3:18:3e:ad:3e:fb:db:c5:26:7e:2b:
         5e:9f:92:17:cf:9e:56:2f:aa:3f:35:a3:3b:b5:42:26:60:f2:
         99:ea:85:17:40:2b:58:50:35:e2:fe:6b:8c:4a:92:97:a5:3b:
         8c:b4:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:45:46 2026 by rpki-client