Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
File:                     E0QDZgB-tW8Q6fmelSBNMwUIubA.mft (raw, json)
Hash identifier:          OKmaUbFLnmlMSP8SPzpv0JAt1QgjK4csFVNmO5CG4FU=
Subject key identifier:   3A:60:A5:E6:77:DC:33:F6:B3:12:2D:5B:E6:62:61:02:3C:F3:FE:57
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Certificate issuer:       /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial:       01A0EBF9EBE2F5494E4C7D17CCDD2812DF68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
Manifest number:          1210
Signing time:             Tue 29 Sep 2026 07:03:39 +0000
Manifest this update:     Tue 29 Sep 2026 07:03:39 +0000
Manifest next update:     Wed 30 Sep 2026 07:03:39 +0000
Files and hashes:         1: E0QDZgB-tW8Q6fmelSBNMwUIubA.crl (hash: QCwOstzojvv4ZdEwopfuxRlT5nGAD/O4wKg1L73V7WA=)
                          2: LCOG7rRmZF-WFd19tuqfjxjQ9fg.roa (hash: cNq6diUEXkiKDTfphkgeeXm5+IhK4woGyGck3EspxMc=)
                          3: QDhw1KkZDodWyomQctcobtYcy9A.roa (hash: p/g8pPVwtED0FI0sAd8n1CJll9/ftPYUFtCBHNsi29c=)
                          4: mmeMEwkbU97JoYdWkkEcuBsE0s0.roa (hash: QGztUtfOwtQPZG5NEH8v2QsY0hatN3B+6IgUMqc+ERI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 07:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:f9:eb:e2:f5:49:4e:4c:7d:17:cc:dd:28:12:df:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
        Validity
            Not Before: Sep 29 07:03:39 2026 GMT
            Not After : Sep 30 07:03:39 2026 GMT
        Subject: CN=3a60a5e677dc33f6b3122d5be66261023cf3fe57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:90:c9:5f:93:ad:aa:03:d3:c8:ba:c0:b6:
                    1c:8f:d0:83:b3:c0:05:7d:e3:af:8f:f7:f6:00:cd:
                    4d:ab:ce:ce:05:c4:f8:76:7f:8f:84:4b:3a:74:37:
                    41:9e:a5:78:5d:b8:f8:5c:bc:44:44:01:ec:1b:4c:
                    98:1f:50:50:24:31:de:0e:17:82:d7:0a:37:63:90:
                    83:ba:47:22:55:91:ab:0e:ca:7b:97:69:eb:54:99:
                    d8:4f:37:3e:6c:fd:7d:94:2d:61:5e:b7:17:c1:66:
                    a9:bb:57:ba:42:85:40:7c:c1:fa:e7:d9:4a:ab:79:
                    42:01:e9:e5:bb:07:06:8a:ab:8c:95:5c:88:d8:82:
                    2f:cb:d3:92:93:56:c2:cc:2b:8d:88:4f:8e:e7:a5:
                    f0:76:6a:d1:ac:b4:af:07:ae:67:05:29:82:91:8e:
                    5c:95:39:7a:a2:06:97:cc:9a:93:d6:8c:4a:89:fb:
                    26:a5:08:00:9e:cd:20:aa:1a:84:6b:dc:ba:c3:4d:
                    f0:2f:b9:ce:21:3c:c0:75:00:4f:aa:bd:6f:8b:b2:
                    ae:18:43:75:dd:9c:a0:cb:54:d1:fb:a6:8c:44:1b:
                    5c:44:a3:88:9e:5b:0b:72:5c:78:65:3d:1e:4a:b2:
                    d6:45:e5:0c:5d:d4:b1:38:f8:1c:e1:a4:94:93:df:
                    82:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:60:A5:E6:77:DC:33:F6:B3:12:2D:5B:E6:62:61:02:3C:F3:FE:57
            X509v3 Authority Key Identifier:
                keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:6f:72:8c:fe:3a:10:e0:a9:2f:d4:5d:2f:18:bb:55:2f:21:
         c5:f8:12:1c:c2:76:07:cd:9d:ac:93:fe:da:c0:50:29:89:71:
         c4:f6:8b:e8:e8:f7:37:33:0f:ba:a4:2d:1a:c7:30:6a:a9:4a:
         65:85:1e:34:21:78:c8:6a:2f:76:94:08:63:1b:64:f7:67:c9:
         e0:e3:b2:fa:ad:f4:b8:7f:93:85:88:b8:52:1e:6f:53:5a:1e:
         f4:6b:c4:63:41:3d:28:c9:3a:eb:40:ba:c7:99:79:f2:03:8a:
         2a:6c:dc:5f:b1:8c:9e:19:e1:e6:0d:29:ff:2e:f5:b1:ce:1d:
         b7:50:12:c0:4d:c3:89:e4:e0:0f:d8:6e:ea:7d:1b:9c:b9:95:
         91:8e:83:02:73:9d:25:ac:9e:4a:8e:59:ef:c3:c6:44:b6:75:
         8b:0c:6b:cb:04:91:d6:a6:f1:6f:14:d7:87:04:08:2e:d8:6b:
         36:9f:15:6f:90:43:e1:04:cc:50:d1:3c:8d:64:9d:03:27:8e:
         4b:7e:04:e7:80:9a:06:1a:3b:c4:e2:60:d9:e1:39:30:44:02:
         ad:ed:39:6c:5d:10:16:28:0e:b0:c0:54:0d:b3:27:b0:59:2b:
         18:ca:5c:3d:e6:e3:0f:8a:6a:f1:3c:fa:d1:d1:e7:49:91:a5:
         a7:fe:0e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:19:07 2026 by rpki-client