Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
File:                     ESe41aUEAgm4mTvyAxeJw7K6t8c.mft (raw, json)
Hash identifier:          P0OqTGGlkR57heyMvWN2AJMr5EbYTYHQui4FZWk6ggA=
Subject key identifier:   CC:50:20:E3:79:FC:1A:7D:E5:59:2E:12:A3:CB:12:77:97:95:BE:6E
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Certificate issuer:       /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial:       01A0E098E8702867554E11DFECC7EE57FCD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
Manifest number:          1A74
Signing time:             Sun 27 Sep 2026 02:01:52 +0000
Manifest this update:     Sun 27 Sep 2026 02:01:52 +0000
Manifest next update:     Mon 28 Sep 2026 02:01:52 +0000
Files and hashes:         1: ESe41aUEAgm4mTvyAxeJw7K6t8c.crl (hash: WbXVLFca/9SSV/q5Uz1/h3Bf1ZvI3Q+KRK4pL6e7zwg=)
                          2: Vj-jl645n2kvkyifqeqjUT8mbTk.roa (hash: sy/gtDfl2XECiDgxiAjMKqlkJRB/dQlkZ9hhKjq79wQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:98:e8:70:28:67:55:4e:11:df:ec:c7:ee:57:fc:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
        Validity
            Not Before: Sep 27 02:01:52 2026 GMT
            Not After : Sep 28 02:01:52 2026 GMT
        Subject: CN=cc5020e379fc1a7de5592e12a3cb12779795be6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:f6:67:eb:1e:98:f7:8a:66:73:56:ee:e7:
                    59:de:7d:4d:ee:3f:a2:6a:8d:f0:60:37:c9:95:a4:
                    18:46:99:12:8b:40:4b:16:06:78:2e:23:cd:a2:3f:
                    69:f9:85:b1:9c:52:c6:ce:24:39:6d:5f:88:6c:13:
                    41:d9:ec:11:ea:4a:c1:a1:42:f9:33:65:bf:c8:98:
                    8e:d4:80:a6:b3:26:7b:f8:62:e6:d8:dc:b7:74:e3:
                    10:b3:fc:2c:aa:9b:99:b3:35:f4:93:c0:0b:ae:5f:
                    89:e9:8b:19:54:b6:88:9b:9e:3c:2e:63:dd:e7:7b:
                    2a:79:f6:76:85:da:76:32:ed:8c:e7:8d:26:85:57:
                    49:5e:31:a8:c4:b8:56:ee:79:3c:fa:37:c3:84:46:
                    4e:32:a6:db:1c:8c:10:fa:f2:24:e3:4f:91:cb:89:
                    03:e0:7e:8c:d8:0f:68:56:71:b5:2a:c7:6c:4a:a6:
                    6d:a4:5b:9c:b7:7d:77:34:2c:0b:10:ea:28:f7:bc:
                    f6:75:be:9a:55:bf:10:04:59:a6:bd:e6:d0:40:ec:
                    14:2d:8f:ac:42:b0:45:65:e4:d8:07:78:0c:d4:7b:
                    7d:9b:cf:db:19:a5:f7:17:87:05:7b:1f:b9:ca:4d:
                    dd:61:30:af:1a:ec:97:94:37:74:14:03:0d:a3:43:
                    dd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:50:20:E3:79:FC:1A:7D:E5:59:2E:12:A3:CB:12:77:97:95:BE:6E
            X509v3 Authority Key Identifier:
                keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:1e:d8:61:c8:02:cc:bf:73:85:72:97:2e:77:3a:4c:2c:be:
         86:f3:58:17:15:49:55:3d:57:aa:3e:08:50:97:9e:00:2a:c5:
         c7:1b:07:15:d2:68:33:37:de:29:de:fc:12:06:fa:d6:ae:fd:
         0a:a3:ec:e2:81:1a:48:00:fa:ec:42:d9:14:19:94:e6:c4:38:
         ae:a3:5c:99:20:df:4e:b1:6a:97:84:ed:30:97:3b:a2:a1:2b:
         51:17:a7:be:b4:70:5d:a7:e5:70:0b:92:4c:29:bc:14:0b:d3:
         10:e4:19:75:e1:c9:84:18:d8:e1:af:56:0e:36:ab:40:81:f9:
         0d:ae:43:a8:d6:2b:da:06:62:0d:b0:76:2d:2a:27:25:ad:a8:
         f8:ee:8d:8c:72:f0:fe:ab:5b:fb:0e:b6:16:9c:e5:fc:70:c5:
         83:1c:ca:9a:f9:96:a7:90:5e:f7:c7:73:b8:1e:c0:3c:23:d6:
         99:83:b2:b2:fc:45:c4:d9:c2:a6:dc:ca:0f:d3:1a:f4:7f:45:
         45:f8:8e:9d:da:a7:50:c5:aa:96:a0:fe:20:b3:0d:93:74:d0:
         fb:d3:cd:97:95:d4:cd:2d:fa:86:37:7c:6a:2a:22:95:18:8c:
         63:88:8f:ab:98:64:d0:6b:50:77:15:ad:12:63:d8:f5:91:22:
         1b:88:6d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:30:32 2026 by rpki-client