Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.mft
File:                     E2bDmPAyEL8XEDc39JCxuXDtQko.mft (raw, json)
Hash identifier:          i33kMKVn9vh9deOYItqEy27um5OK5GR2rVf0hd3rdP8=
Subject key identifier:   06:3C:F3:D6:F8:1E:41:40:AC:08:FE:ED:B5:9B:80:67:5B:BA:1E:93
Authority key identifier: 13:66:C3:98:F0:32:10:BF:17:10:37:37:F4:90:B1:B9:70:ED:42:4A
Certificate issuer:       /CN=1366c398f03210bf17103737f490b1b970ed424a
Certificate serial:       01A0FCB43D7D1ACF45186CDD8B2E3F56F82D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E2bDmPAyEL8XEDc39JCxuXDtQko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.mft
Manifest number:          01B4
Signing time:             Fri 02 Oct 2026 13:01:05 +0000
Manifest this update:     Fri 02 Oct 2026 13:01:05 +0000
Manifest next update:     Sat 03 Oct 2026 13:01:05 +0000
Files and hashes:         1: E2bDmPAyEL8XEDc39JCxuXDtQko.crl (hash: LtzYt2zUC0F9bQKVRiOJlT5ZPJe7gYNsouvDoNRZazk=)
                          2: fIkPV_l_k4SzslIO_m2xCkrW7yo.roa (hash: 4eiXEQq4L1lVAPQNjACQvwiKKs16RCaoEElInvItTzY=)
                          3: l12NJpIYI2RvZ6Sne8MdQgF3CAY.roa (hash: be9HgbYHtY8qJtefM856XAcCsr78PfK4drNIboDrauM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E2bDmPAyEL8XEDc39JCxuXDtQko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fc:b4:3d:7d:1a:cf:45:18:6c:dd:8b:2e:3f:56:f8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1366c398f03210bf17103737f490b1b970ed424a
        Validity
            Not Before: Oct  2 13:01:05 2026 GMT
            Not After : Oct  3 13:01:05 2026 GMT
        Subject: CN=063cf3d6f81e4140ac08feedb59b80675bba1e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9a:d5:bd:03:d0:17:02:ce:bf:d3:31:de:8f:
                    a5:fd:69:ae:4a:47:4e:1b:5b:37:80:6f:5b:c2:63:
                    ee:98:a4:85:df:a8:13:72:e4:73:74:94:e1:94:f7:
                    75:f3:df:9a:45:4d:90:97:f0:dd:3d:5f:eb:b9:47:
                    a0:da:2b:35:c3:f1:d7:28:cd:2b:a7:6b:4a:80:d9:
                    24:2c:56:39:e2:59:61:d6:ae:40:17:ac:b0:db:98:
                    c4:a1:e7:b4:cb:41:9e:c3:75:23:04:d4:7a:21:bc:
                    b9:05:5c:4e:9f:bd:95:2d:73:08:4b:42:b9:0c:7c:
                    88:5e:19:29:36:96:c9:76:c2:84:52:3a:36:61:63:
                    f1:c7:2d:c8:dc:2d:e8:94:a4:6e:a9:22:fc:34:c6:
                    f0:1b:1b:bc:02:78:de:ca:76:52:7d:b0:93:64:c4:
                    dc:6b:f1:e6:13:e2:ad:1b:06:ff:a9:e6:ef:d8:b8:
                    c1:54:e1:7c:e5:24:31:9c:a5:91:5b:1f:4f:41:cc:
                    98:90:9b:61:14:74:c8:91:82:1e:34:b5:48:9c:e7:
                    36:d6:6e:f9:f6:82:ad:c6:24:24:f4:ff:1c:84:8f:
                    01:c0:c1:5e:13:38:8c:ea:dc:7d:6d:a5:b1:70:f8:
                    5e:1c:bf:88:c6:a7:4f:8e:51:c1:7d:74:b6:c5:e7:
                    e7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3C:F3:D6:F8:1E:41:40:AC:08:FE:ED:B5:9B:80:67:5B:BA:1E:93
            X509v3 Authority Key Identifier:
                keyid:13:66:C3:98:F0:32:10:BF:17:10:37:37:F4:90:B1:B9:70:ED:42:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2bDmPAyEL8XEDc39JCxuXDtQko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5442db-3c61-4a79-8b5e-7f0973e5e133/1/E2bDmPAyEL8XEDc39JCxuXDtQko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f4:60:af:93:1f:51:1e:2d:27:b9:6b:06:e6:79:db:cf:c8:
         3a:31:c1:8f:76:d1:89:0a:7a:6b:e8:2e:89:68:53:2d:10:f6:
         0f:3b:eb:78:b2:76:71:84:60:4c:e0:de:a3:ab:b1:97:84:f2:
         30:cd:46:24:68:0a:28:ef:9a:5a:23:69:73:05:28:a5:4a:b0:
         82:05:c2:b6:7a:07:e5:c5:ec:2c:8f:3a:8c:ef:74:64:67:18:
         b2:7f:f1:e1:50:21:3c:71:6f:f5:52:f7:f9:1f:ee:4e:84:8e:
         9a:a4:be:6f:8a:d7:f7:0e:3f:7c:35:5b:34:ca:b6:4b:94:bc:
         b4:5b:00:db:fa:5c:46:18:da:41:99:7e:2d:4f:6d:26:19:4e:
         32:3d:a2:65:30:63:2d:b4:5d:5d:c0:43:d8:34:39:68:f3:fd:
         c6:5f:e0:f1:e8:a5:48:40:aa:d6:23:ac:89:ef:e2:54:bd:e8:
         92:ae:73:ab:16:39:0b:d8:5f:f2:62:67:46:47:86:34:46:b8:
         c7:58:9d:df:93:cd:31:22:23:10:c2:29:29:4b:f0:d0:21:01:
         40:f9:9c:53:4d:c3:ad:bf:42:bb:34:e4:d3:b1:62:bb:94:8a:
         b6:fd:82:25:fb:dd:38:f1:68:58:cc:93:a5:a6:4c:23:fe:d0:
         b1:ed:57:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:11:18 2026 by rpki-client