Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
File:                     EsEUQhohU4u2vwJkmH56REyA6j4.mft (raw, json)
Hash identifier:          aTU1LtKWnpFR7WdAxSp1lEWk+u+DhPmxcoYTXqpcom0=
Subject key identifier:   03:5E:3F:66:CF:72:10:C2:60:B8:4F:18:AE:D2:61:15:4E:D9:74:FF
Authority key identifier: 12:C1:14:42:1A:21:53:8B:B6:BF:02:64:98:7E:7A:44:4C:80:EA:3E
Certificate issuer:       /CN=12c114421a21538bb6bf0264987e7a444c80ea3e
Certificate serial:       01A0DF86A72A4C8D72727ABCF52CF6F7705D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
Manifest number:          0143
Signing time:             Sat 26 Sep 2026 21:02:18 +0000
Manifest this update:     Sat 26 Sep 2026 21:02:18 +0000
Manifest next update:     Sun 27 Sep 2026 21:02:18 +0000
Files and hashes:         1: EsEUQhohU4u2vwJkmH56REyA6j4.crl (hash: uwN5zVFg6Q7xwietg4BwCwaNfrc14AfwTyeItgDrJiA=)
                          2: OR-UUzM73lSUM_hbKHEM8OHJZXo.roa (hash: kUN7qIoBO4FukILSXeAZWF7RJ65CvgOOJNH7ORJAX/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:86:a7:2a:4c:8d:72:72:7a:bc:f5:2c:f6:f7:70:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c114421a21538bb6bf0264987e7a444c80ea3e
        Validity
            Not Before: Sep 26 21:02:18 2026 GMT
            Not After : Sep 27 21:02:18 2026 GMT
        Subject: CN=035e3f66cf7210c260b84f18aed261154ed974ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:77:51:8f:13:2c:a7:da:3e:47:60:ef:db:7d:
                    d6:85:83:75:9a:ec:fd:fc:eb:c8:c9:f7:06:d8:c8:
                    d1:4a:ce:1f:f2:4c:45:1a:f8:44:44:46:4e:c2:e4:
                    a3:86:a3:f4:a1:1c:c4:a5:ba:6c:05:d5:e7:33:20:
                    06:6f:64:e7:65:55:70:b2:e2:8a:97:9e:36:a7:2d:
                    c2:de:00:21:d5:f6:a5:1c:63:c7:ae:35:09:22:68:
                    25:8c:7a:96:4b:93:22:91:af:96:d3:0b:52:0a:42:
                    7f:70:93:23:f5:9c:a7:cc:b5:0c:db:6f:df:84:2b:
                    1b:1f:89:82:bb:75:f5:ec:be:0e:74:0d:b9:08:31:
                    48:37:bd:7d:c0:bf:ce:af:6a:92:91:cb:40:60:d5:
                    98:3f:e7:b5:eb:c2:46:9f:6b:a7:c6:cd:5e:1d:d3:
                    be:4d:d8:b9:b7:c0:6c:cb:75:07:c6:15:a3:98:e5:
                    68:4c:d1:95:c5:24:ac:ba:bf:37:a5:4a:ca:07:d3:
                    c0:ee:7d:6f:36:c0:3c:36:f4:3c:57:8b:b0:27:31:
                    e0:7a:51:8a:3b:6f:54:d9:f2:93:a9:18:35:17:7e:
                    b6:41:da:95:23:71:33:ac:17:ac:8a:b4:8f:7d:4a:
                    e6:b2:ce:b4:19:7c:75:6f:92:5e:d9:36:a8:c3:8d:
                    49:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5E:3F:66:CF:72:10:C2:60:B8:4F:18:AE:D2:61:15:4E:D9:74:FF
            X509v3 Authority Key Identifier:
                keyid:12:C1:14:42:1A:21:53:8B:B6:BF:02:64:98:7E:7A:44:4C:80:EA:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:90:79:dc:0a:b6:85:d3:f2:b4:b9:69:ac:06:3d:65:a2:95:
         5f:be:01:5b:7e:64:2b:6c:8c:ca:3c:2b:9a:3b:83:63:13:63:
         7e:c8:8a:bc:d8:33:34:c1:83:cd:54:35:d7:51:bb:8c:1f:13:
         6e:83:c3:94:2b:af:95:b3:09:f4:41:db:b0:92:ba:e8:ca:d9:
         d9:46:e2:42:15:7a:84:d0:67:b2:5c:29:29:c1:57:9a:40:fb:
         21:2f:8c:29:01:86:99:84:7f:18:c6:eb:1d:8d:bf:a7:0b:9e:
         22:da:94:44:1a:43:9f:06:5d:05:27:2a:60:c7:cc:4a:ad:a3:
         3e:bd:52:bd:ce:97:39:7d:5d:7f:b8:1d:7b:a2:51:8d:d2:2a:
         f8:a2:ee:8e:82:ce:51:f7:24:28:60:18:5e:68:f2:5f:43:93:
         98:3d:57:17:78:60:b4:22:6c:05:86:0c:c4:25:c4:a6:fc:5e:
         29:4f:fd:40:c8:6e:83:62:63:e1:98:5a:0e:51:42:aa:86:96:
         24:71:df:b7:d8:a8:db:c0:e8:78:4d:ef:04:96:d7:2e:d9:5c:
         6f:6b:80:7f:6f:a4:b2:50:fc:17:ed:3d:47:e8:e5:25:d8:8c:
         bc:7f:62:6f:a4:1f:93:ed:38:5d:ab:ce:95:7d:1f:af:29:72:
         db:5b:4e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:34:31 2026 by rpki-client