Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
File:                     EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft (raw, json)
Hash identifier:          Pp6S+btyGSWlCDiWS025YnSeXxSwsWJvjMVAcO4NLSQ=
Subject key identifier:   FC:99:37:A2:04:5E:04:E9:5E:82:C5:0D:63:A5:43:92:F0:81:92:CC
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Certificate issuer:       /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial:       01A1076EFB524D5E14B82C7D9D18955C2AD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
Manifest number:          1A91
Signing time:             Sun 04 Oct 2026 15:01:15 +0000
Manifest this update:     Sun 04 Oct 2026 15:01:15 +0000
Manifest next update:     Mon 05 Oct 2026 15:01:15 +0000
Files and hashes:         1: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl (hash: 7pU1DlLSEj6U8rRefKXyBlZFOJI3wcqGM151gzj15D8=)
                          2: GTbeqkgrKUAhA5ZTICqv-Jsqhfk.asa (hash: tnWcWnPdzicoKznE3Lti2EkSumgbaD/+00aloHVu0q0=)
                          3: JzWGsDffl9qf2AiMf1YAzKEytoQ.roa (hash: 6DFZRSTQ0FFBQOu6f+OJdswaZAy8UME/OaSysUNj6dc=)
                          4: UR-yHiAzwfNk9fBD6LqvJqyO6VA.asa (hash: In6Ax28cSYKFdnV27GE6zaDVibD/bsCLqCfVuurELOI=)
                          5: WW2jLA5cdwrG7xUDwvvWb1u0Z_I.roa (hash: NQTSDeY1v8QUdlY/Nw06UqgN+UAxhAYxrfmI+hdgIDU=)
                          6: k3108kOK6CEDzpN3BxvwlXdvfnc.asa (hash: 1ILE6COCf0gUgcfdaifT0HWyDbr+q/8Jv2QHT8VhnMc=)
                          7: lN9Gc6nnY4wfJS-_nrlVa8nmRj4.asa (hash: fcvvISOsOt68aAXMoyb8wR0Eov34Nd6IrPJ+pTVeu6A=)
                          8: naYBcrufp-6L3JkDN-CeOQG1p1I.roa (hash: fPvBEEB4GWYhpwRMLZebL8dNCBfHcJIGVXJAvo/Y6LY=)
                          9: sZ98wzbaCbcgCl57ynzA9q3aONU.roa (hash: fn9gWlz+VvCaVIUVntul6QXxN7d9tjP7+yKVdYb3aLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:6e:fb:52:4d:5e:14:b8:2c:7d:9d:18:95:5c:2a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
        Validity
            Not Before: Oct  4 15:01:15 2026 GMT
            Not After : Oct  5 15:01:15 2026 GMT
        Subject: CN=fc9937a2045e04e95e82c50d63a54392f08192cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:01:d0:71:7e:15:1e:1b:bc:cb:89:7c:07:4b:
                    24:1c:53:06:86:66:5b:e8:c1:a2:51:9c:06:5a:67:
                    6b:70:26:e9:53:63:17:2f:d9:c6:d3:fd:0c:9e:d7:
                    32:83:ee:6a:7a:70:2d:83:15:15:fa:1c:b3:81:8c:
                    da:d0:b8:20:f8:5c:c2:96:28:55:0a:de:26:74:7e:
                    50:3a:d0:bc:a6:c3:a8:bb:d4:df:12:0a:e2:e9:8a:
                    05:c7:ab:bb:e8:88:ba:e5:3d:41:1e:a0:59:47:b8:
                    37:24:e8:48:5f:73:ab:59:73:fa:7d:0d:7d:f8:04:
                    81:60:65:87:d3:fe:8a:b3:c5:31:ec:6b:cb:b2:20:
                    1d:02:be:5c:d9:9b:0d:fb:1d:59:17:4c:f8:4f:11:
                    10:fe:5a:50:b2:20:0f:bd:46:9d:59:61:af:8d:de:
                    e7:bf:c2:e9:f0:36:df:c2:09:3e:d7:7f:73:b0:62:
                    7f:b4:19:51:07:a6:29:0a:78:41:9d:3e:ad:31:e9:
                    45:3b:79:6b:5e:8d:bc:9c:cb:48:b2:bb:d2:29:74:
                    ce:d4:d9:3c:db:b3:29:c1:af:d2:c6:d1:6c:c3:20:
                    6a:70:19:50:86:15:4e:16:67:eb:d8:32:b6:9d:b1:
                    6a:e6:ad:56:08:68:d8:d1:89:de:4f:70:63:93:50:
                    e1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:99:37:A2:04:5E:04:E9:5E:82:C5:0D:63:A5:43:92:F0:81:92:CC
            X509v3 Authority Key Identifier:
                keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:3e:e3:25:6f:41:87:a7:ac:8a:6e:13:58:e8:50:0c:fb:dd:
         c2:6f:6d:89:a3:0a:6e:fa:38:76:3c:7a:6b:a4:56:f2:fa:25:
         fc:fc:04:7c:de:1b:5c:57:4a:21:e7:e1:02:d0:a1:25:29:c7:
         e8:bf:47:0a:99:53:a1:c1:7e:59:79:81:6a:b8:a5:47:52:7b:
         02:19:53:05:e3:66:2b:b6:9f:d3:63:ba:9a:60:54:fc:5c:46:
         83:e5:07:6d:8f:f6:1b:49:5d:51:db:60:41:53:1a:79:d0:34:
         d4:f6:47:b6:c9:67:21:96:ea:45:39:5f:4d:98:e6:7c:7f:2a:
         c4:e6:2d:9c:a9:3e:9c:b7:15:36:7b:82:a3:0e:73:a0:ee:97:
         26:4b:46:56:86:a4:ad:18:8c:fc:5e:93:8f:d7:ae:d1:90:9b:
         28:ea:14:df:cb:4e:5c:65:5d:0d:e8:41:7c:fe:4e:8f:b1:fd:
         7c:8a:e1:e7:33:e7:86:8b:e3:bc:b9:7a:9c:c4:d6:84:ec:25:
         fd:ef:f7:e2:26:28:e4:38:b7:8a:25:27:bd:a3:28:60:02:ad:
         87:0c:4c:ee:39:ca:ab:de:ac:b8:88:be:a0:23:6e:95:dc:6a:
         96:2e:68:f0:cf:5d:bd:ec:94:c9:95:81:af:7d:85:ee:98:dc:
         2a:ea:5e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:41:55 2026 by rpki-client