Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft
File:                     EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft (raw, json)
Hash identifier:          kuBl3Fj5JMMxZ4jpCy7yQ+C5JUWE5+b2he3LCtQ9Teg=
Subject key identifier:   E2:42:A4:CD:57:DA:33:3C:FB:F7:7A:B3:66:5F:6B:F3:C3:47:3E:49
Authority key identifier: 11:02:74:B4:5D:8F:ED:46:3E:D1:E7:66:ED:71:77:0F:FD:89:91:86
Certificate issuer:       /CN=110274b45d8fed463ed1e766ed71770ffd899186
Certificate serial:       01A112295740B6D9CF04DB91B33E0EFD3797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft
Manifest number:          03E0
Signing time:             Tue 06 Oct 2026 17:01:01 +0000
Manifest this update:     Tue 06 Oct 2026 17:01:01 +0000
Manifest next update:     Wed 07 Oct 2026 17:01:01 +0000
Files and hashes:         1: EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl (hash: MQzJf+RIk9Vi2PyfBGpBLDbBwjJiNuqV1ByzZxK5tnI=)
                          2: LWh1HaeL5ortaVH3kik7DExqh78.roa (hash: qIpCeksyx0E8+hCHbqahdqByF+0cRttYVhOA2hnKbtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 17:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:12:29:57:40:b6:d9:cf:04:db:91:b3:3e:0e:fd:37:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110274b45d8fed463ed1e766ed71770ffd899186
        Validity
            Not Before: Oct  6 17:01:01 2026 GMT
            Not After : Oct  7 17:01:01 2026 GMT
        Subject: CN=e242a4cd57da333cfbf77ab3665f6bf3c3473e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:e1:e1:8f:a4:e9:3e:c9:dc:75:6c:3b:3c:
                    0a:53:06:44:aa:02:c7:03:da:8c:d0:27:ec:bd:c3:
                    38:03:4e:d5:cb:6e:08:3c:22:dc:06:ec:84:a9:f4:
                    2d:ff:36:53:64:14:e6:df:57:0b:af:8d:24:78:65:
                    d5:74:e3:f6:26:02:07:66:2a:c9:75:0b:20:fa:78:
                    86:df:c6:a1:ab:97:93:05:26:8e:04:13:a3:cd:ae:
                    f9:80:9f:eb:a3:52:53:bc:16:58:37:fe:34:50:15:
                    ac:ef:29:a6:54:7d:2f:fe:4f:38:e2:81:df:e4:f5:
                    41:12:6d:79:63:7a:5f:d3:b7:87:ec:4b:b7:d4:8c:
                    16:77:b1:47:35:f8:ab:cc:4c:44:1e:ce:b8:53:9e:
                    8f:a0:b5:a8:77:9a:b7:ea:20:67:2f:4b:fe:f4:d9:
                    d9:85:8b:ba:a6:26:76:b8:ea:01:f3:6c:a0:fd:c1:
                    ed:d8:e1:20:97:02:14:dd:8b:e0:bd:8f:e2:e9:68:
                    8f:df:0f:c8:37:a7:58:4c:3b:ec:5b:d2:ec:ed:15:
                    11:96:c8:1b:6a:c1:8f:13:49:67:ab:45:2d:95:a1:
                    e5:a1:0b:f0:8e:36:d5:a1:e3:58:b3:03:cf:ee:53:
                    1d:ed:8a:9d:39:43:9b:e7:87:b0:2f:cf:08:ec:fe:
                    69:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:42:A4:CD:57:DA:33:3C:FB:F7:7A:B3:66:5F:6B:F3:C3:47:3E:49
            X509v3 Authority Key Identifier:
                keyid:11:02:74:B4:5D:8F:ED:46:3E:D1:E7:66:ED:71:77:0F:FD:89:91:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:8b:43:0a:81:27:9f:95:6c:55:7c:33:1f:67:c9:bd:fe:17:
         af:53:8f:52:7d:cc:5d:b2:33:59:78:21:d3:5b:f9:11:dc:d9:
         14:00:c2:87:d1:d3:9c:35:6a:5c:85:dd:bc:e8:c0:0e:d9:60:
         81:56:60:8f:86:66:41:0b:5d:c8:37:8e:69:53:a3:30:ec:35:
         c2:b2:31:9e:73:a3:1d:d2:d8:ad:14:72:65:6f:06:06:43:99:
         a4:f1:0d:8b:18:58:72:d2:37:03:60:ca:a9:d8:18:04:ba:ed:
         fe:ce:3b:28:2b:54:fa:14:d5:a3:e6:bd:59:8b:0d:f7:d4:00:
         f3:a2:a8:5b:d6:0c:6d:28:b9:ee:48:35:e6:bc:47:67:14:1d:
         4d:c1:88:60:b6:e1:ab:6c:41:60:c9:9d:5f:5a:dc:af:8f:00:
         a8:2c:ca:a4:23:57:2a:51:b0:d4:f7:9d:79:80:be:7f:70:09:
         23:1c:ea:8d:26:ea:25:74:57:51:bc:4f:44:cb:47:38:82:51:
         7b:d1:9c:62:8b:c6:dc:09:5a:9a:60:5b:11:7a:01:17:4a:09:
         56:a4:ab:2e:74:8d:e4:65:e9:d3:d2:73:17:4c:5d:bc:12:a6:
         a6:63:7c:81:a2:e4:66:74:72:a4:71:36:3e:1e:2a:de:22:5a:
         0e:5f:3e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 01:14:06 2026 by rpki-client