Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
File:                     ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft (raw, json)
Hash identifier:          QO+OTuo7m20wXZzZ1kKWlb6Ewu4JtezhD3sI7Kpt1k8=
Subject key identifier:   83:85:FF:57:87:77:67:F9:C3:2D:C2:2B:36:A0:92:18:08:B1:03:38
Authority key identifier: 10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39
Certificate issuer:       /CN=10b43613535ffaa73d9acc503c71a28fa17b3839
Certificate serial:       01A102B6DD47347E793D32B7E64F221C7B4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
Manifest number:          1127
Signing time:             Sat 03 Oct 2026 17:01:40 +0000
Manifest this update:     Sat 03 Oct 2026 17:01:40 +0000
Manifest next update:     Sun 04 Oct 2026 17:01:40 +0000
Files and hashes:         1: ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl (hash: nEF6EBSJxEIiyW3/bu5NlFRuqrx0oqYon7ClqnZAYRI=)
                          2: bk3MpB9dFYsKx-vk9Fu2s4AOobg.roa (hash: VhKUc5HBMkEPpFpw6zVe4nOAoJ2kIgyeitJGidAI9eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 17:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:b6:dd:47:34:7e:79:3d:32:b7:e6:4f:22:1c:7b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b43613535ffaa73d9acc503c71a28fa17b3839
        Validity
            Not Before: Oct  3 17:01:40 2026 GMT
            Not After : Oct  4 17:01:40 2026 GMT
        Subject: CN=8385ff57877767f9c32dc22b36a0921808b10338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:87:dc:71:5b:f3:3b:ef:3e:fa:de:90:5c:c5:
                    4f:bc:ca:98:e1:32:06:62:a7:4a:ad:53:e0:63:da:
                    63:b9:cd:bf:c8:ac:1d:5b:dd:b4:91:b0:60:30:5c:
                    3d:45:7c:7f:ad:bf:68:02:5e:c8:f9:bc:6d:06:4b:
                    dd:50:d3:67:ce:9a:25:57:0b:bb:7a:be:9e:f0:ec:
                    b4:10:45:02:93:96:91:3c:41:8f:28:b2:f2:ab:d0:
                    83:f7:f4:87:43:8c:82:aa:2c:79:8d:06:17:0b:f7:
                    6e:5a:3b:73:da:46:5b:f5:fb:8f:a9:ed:91:cb:fa:
                    2e:b7:d4:f6:48:6c:dd:da:22:c4:bf:9b:97:16:dc:
                    9a:11:0e:85:02:e3:9c:31:b0:14:64:00:31:31:32:
                    cb:26:e1:e6:da:e5:61:c3:87:a2:78:76:c0:3e:39:
                    33:68:d5:b3:35:fe:e8:61:8b:a8:14:f8:d3:82:cc:
                    ef:fc:b9:c5:ef:fd:2b:ae:fa:29:a9:a4:56:fb:d7:
                    b6:47:4a:0a:00:b9:6f:39:58:5b:d3:2a:0a:70:5b:
                    40:36:c9:62:70:22:ed:9e:23:d4:dd:bd:c5:40:1c:
                    c1:20:49:31:66:0a:bc:4e:7e:3f:18:a2:0b:06:b3:
                    9e:46:23:10:da:04:5b:27:cb:a0:ae:09:9f:e1:95:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:85:FF:57:87:77:67:F9:C3:2D:C2:2B:36:A0:92:18:08:B1:03:38
            X509v3 Authority Key Identifier:
                keyid:10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:01:d3:93:b4:6c:a2:fe:d0:cc:c2:23:89:ae:71:d5:2f:cd:
         24:62:e5:58:ff:cf:33:71:2d:0e:5c:a0:66:ba:96:6e:db:ab:
         7c:96:32:98:a7:b4:9e:b5:f1:0d:bd:6c:bf:f9:f8:ba:b4:3a:
         f4:2c:6d:11:b2:9c:50:64:52:00:b3:7d:58:54:ba:96:7a:53:
         d5:f4:c2:ca:b2:d0:61:d4:af:97:11:16:17:f6:25:bb:fe:4c:
         3c:21:cc:69:5e:97:7e:56:48:5e:2d:c9:9f:f7:05:80:c1:71:
         07:7c:47:8c:a8:c9:5d:10:cd:bb:48:3f:83:c6:e2:b4:28:40:
         f1:51:22:f7:a4:4f:c3:e1:91:84:24:96:de:f6:d9:bd:fb:10:
         ac:e8:f1:15:55:59:4d:3b:e9:37:6d:9f:6f:c5:a8:e6:05:c4:
         79:84:a2:e2:9e:33:e2:e0:5d:da:f8:ca:e9:c9:27:ba:97:ae:
         78:82:c6:8e:85:59:11:b3:ff:1c:af:aa:78:ef:e8:d7:50:c2:
         db:2a:8f:85:e0:27:64:5b:40:3f:81:82:63:16:d8:f4:8d:3f:
         22:c1:20:c7:51:fd:2a:78:b4:dd:39:6c:71:76:f9:9f:f9:47:
         5c:63:bc:b8:bf:0f:90:cd:bd:eb:95:fc:3d:67:52:6c:8e:b9:
         44:0f:0e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:39:20 2026 by rpki-client