Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
File:                     EPt5C_XsxPQgY7C5YKmU95kClQs.mft (raw, json)
Hash identifier:          LshpvLYsNYyk+8hiw8Er79q/W7Y632+Cnt72DLixu7Y=
Subject key identifier:   82:E0:92:AC:8A:B4:5D:5F:44:95:7F:27:13:93:56:74:3A:86:CF:CF
Authority key identifier: 10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B
Certificate issuer:       /CN=10fb790bf5ecc4f42063b0b960a994f79902950b
Certificate serial:       01A12BE99DC1D15A1E5000E9703705A7336A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
Manifest number:          0338
Signing time:             Sun 11 Oct 2026 17:01:32 +0000
Manifest this update:     Sun 11 Oct 2026 17:01:32 +0000
Manifest next update:     Mon 12 Oct 2026 17:01:32 +0000
Files and hashes:         1: EPt5C_XsxPQgY7C5YKmU95kClQs.crl (hash: qFhSJ4ReGCiTImE+vDoOgVEqH63TZRUdYJVHXm8YrhA=)
                          2: QlWvHkFefgt8b65GtnQ9BWdmuEA.asa (hash: 742qjyA1AawGih0s10BDQYzxDeEAV9mVKYVyfwrup1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:e9:9d:c1:d1:5a:1e:50:00:e9:70:37:05:a7:33:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fb790bf5ecc4f42063b0b960a994f79902950b
        Validity
            Not Before: Oct 11 17:01:32 2026 GMT
            Not After : Oct 12 17:01:32 2026 GMT
        Subject: CN=82e092ac8ab45d5f44957f27139356743a86cfcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:6a:2f:85:12:8a:55:42:5e:79:6c:e9:16:
                    65:62:70:57:0f:b6:8e:76:99:aa:fd:27:2d:b1:fe:
                    4a:cd:d7:30:ae:01:13:b5:33:a4:c3:2e:7c:2e:6e:
                    d4:ef:c5:38:e3:0a:97:9f:b7:3a:67:69:a4:60:b6:
                    73:99:5d:d3:8c:e4:cd:3a:77:e0:62:27:a8:f3:9d:
                    83:7d:41:83:74:9c:82:db:f0:97:00:ac:f7:38:c2:
                    36:4e:65:79:cc:8a:fc:6a:8e:17:05:c1:86:b0:c4:
                    58:07:f3:a7:72:b6:7e:55:ab:0d:72:07:96:0b:4e:
                    87:b7:24:c6:e9:b9:53:ea:78:79:7a:b6:dc:ed:05:
                    88:da:01:43:89:f1:03:74:c6:72:69:67:ce:9a:7f:
                    7e:41:5e:e2:49:68:4d:6d:5e:2c:19:4f:e3:07:09:
                    a2:67:97:ef:bd:fc:8f:7b:62:42:fa:4e:9f:4d:3d:
                    24:41:ab:13:88:fe:ff:78:c3:03:88:1f:e1:98:68:
                    a1:90:48:3f:2b:22:24:e4:05:aa:15:8b:5f:21:f0:
                    cc:4b:77:df:2b:3e:7f:93:71:6e:d3:6b:f2:a6:2a:
                    a4:4d:da:19:b3:88:48:f5:af:97:58:ac:12:87:bb:
                    33:b7:a1:e1:f5:34:4a:1a:f2:c5:ad:81:01:a2:08:
                    f4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E0:92:AC:8A:B4:5D:5F:44:95:7F:27:13:93:56:74:3A:86:CF:CF
            X509v3 Authority Key Identifier:
                keyid:10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0a:b6:ee:82:ce:cb:28:36:61:d8:23:1d:65:82:b5:1f:44:
         b4:7c:7f:8e:34:b2:ac:e2:d6:c5:3b:c4:43:23:9c:0a:d6:e6:
         a3:e8:da:4e:42:64:83:6c:a3:b7:78:03:d2:56:84:e9:05:99:
         2d:89:c2:05:cd:36:0e:6a:33:cc:54:c5:9c:dc:40:42:fe:d7:
         e5:0c:8c:49:39:2f:9e:b9:90:24:08:a5:92:fc:b3:c4:47:55:
         08:38:d2:30:0b:e9:43:ca:45:a7:04:0f:a4:da:2e:79:25:97:
         e4:fd:48:40:bb:51:f9:ce:76:01:4f:0d:af:79:88:23:17:e3:
         73:d3:c0:0d:3e:96:66:ae:33:eb:9a:f7:75:9b:c6:36:09:b4:
         80:01:39:3f:d0:c3:69:b0:cd:a2:d8:c0:3b:d8:fd:ea:77:7c:
         1b:43:f0:7e:c0:15:89:ae:2e:cd:89:da:66:2b:31:f9:09:06:
         7a:c5:41:61:0a:51:20:56:76:05:c8:38:a0:60:72:50:23:4a:
         a7:0f:8e:d2:6c:76:96:36:f1:f2:87:c1:a7:2b:63:64:ea:02:
         ed:05:36:f0:82:c5:be:31:60:15:2e:54:3d:eb:99:92:22:35:
         21:33:c6:54:ef:78:bf:f0:71:98:5a:ce:a7:c4:65:8e:41:b9:
         18:00:d0:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEr6Z3B0VoeUADpcDcFpzNqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZmI3OTBiZjVlY2M0ZjQyMDYzYjBiOTYwYTk5NGY3OTkw
Mjk1MGIwHhcNMjYxMDExMTcwMTMyWhcNMjYxMDEyMTcwMTMyWjAzMTEwLwYDVQQD
Eyg4MmUwOTJhYzhhYjQ1ZDVmNDQ5NTdmMjcxMzkzNTY3NDNhODZjZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzNqL4USilVCXnls6RZlYnBXD7aO
dpmq/Sctsf5KzdcwrgETtTOkwy58Lm7U78U44wqXn7c6Z2mkYLZzmV3TjOTNOnfg
Yieo852DfUGDdJyC2/CXAKz3OMI2TmV5zIr8ao4XBcGGsMRYB/OncrZ+VasNcgeW
C06HtyTG6blT6nh5erbc7QWI2gFDifEDdMZyaWfOmn9+QV7iSWhNbV4sGU/jBwmi
Z5fvvfyPe2JC+k6fTT0kQasTiP7/eMMDiB/hmGihkEg/KyIk5AWqFYtfIfDMS3ff
Kz5/k3Fu02vypiqkTdoZs4hI9a+XWKwSh7szt6Hh9TRKGvLFrYEBogj0xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILgkqyKtF1fRJV/JxOTVnQ6hs/PMB8GA1UdIwQY
MBaAFBD7eQv17MT0IGOwuWCplPeZApULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xMjcyNDAtN2ZhNC00ZDhhLWI4YTgt
MjI4OTRkZTE0Y2JiLzEvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8xMjcyNDAtN2ZhNC00ZDhhLWI4YTgtMjI4OTRkZTE0Y2Ji
LzEvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQq27oLO
yyg2YdgjHWWCtR9EtHx/jjSyrOLWxTvEQyOcCtbmo+jaTkJkg2yjt3gD0laE6QWZ
LYnCBc02DmozzFTFnNxAQv7X5QyMSTkvnrmQJAilkvyzxEdVCDjSMAvpQ8pFpwQP
pNoueSWX5P1IQLtR+c52AU8Nr3mIIxfjc9PADT6WZq4z65r3dZvGNgm0gAE5P9DD
abDNotjAO9j96nd8G0PwfsAVia4uzYnaZisx+QkGesVBYQpRIFZ2Bcg4oGByUCNK
pw+O0mx2ljbx8ofBpytjZOoC7QU28ILFvjFgFS5UPeuZkiI1ITPGVO94v/BxmFrO
p8RljkG5GADQ/Q==
-----END CERTIFICATE-----
Generated at Sun Oct 11 21:52:41 2026 by rpki-client