Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
File:                     CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft (raw, json)
Hash identifier:          IdpQRBwZSR6dLjo7JvSvdHjqTFk/bXx/BCJ0STLci70=
Subject key identifier:   58:E9:AE:5F:94:B5:87:66:D8:39:39:4E:D0:78:FF:16:A8:DA:48:00
Authority key identifier: 09:5E:95:BC:C8:D0:DE:18:BA:F8:40:91:00:79:BB:C2:7B:E9:BB:F2
Certificate issuer:       /CN=095e95bcc8d0de18baf840910079bbc27be9bbf2
Certificate serial:       01A1249D757E43755A2A34DC55C502B9DA18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
Manifest number:          01E0
Signing time:             Sat 10 Oct 2026 07:01:01 +0000
Manifest this update:     Sat 10 Oct 2026 07:01:01 +0000
Manifest next update:     Sun 11 Oct 2026 07:01:01 +0000
Files and hashes:         1: CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl (hash: 05u6bIHx+LSIkXmQPXu21VJRxP5m7skie1ei7rGa5IY=)
                          2: OnyZlnAGFE9z6qHS8PQZpxuPoJI.roa (hash: MSNL5ZzuAie/1vcGJ5gTivp3rjaaK9xa+gQRkIgvUMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 00:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:9d:75:7e:43:75:5a:2a:34:dc:55:c5:02:b9:da:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095e95bcc8d0de18baf840910079bbc27be9bbf2
        Validity
            Not Before: Oct 10 07:01:01 2026 GMT
            Not After : Oct 11 07:01:01 2026 GMT
        Subject: CN=58e9ae5f94b58766d839394ed078ff16a8da4800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:c4:7a:dc:08:fd:a0:ca:b9:c3:fa:8d:a8:
                    9e:e5:fd:7c:c7:68:2a:90:0d:4b:d1:69:b2:8c:5e:
                    8a:bd:96:9f:76:0d:fb:86:ca:2f:80:87:47:53:b6:
                    61:24:ce:4f:1a:a4:4e:d1:13:fd:34:b0:5d:8e:38:
                    d6:09:cf:34:fd:97:08:b1:2f:7d:48:c9:58:2e:a2:
                    3e:07:36:41:af:74:32:9f:3a:79:0d:cb:7e:e6:2a:
                    54:07:40:37:84:43:22:5e:f7:5d:30:8b:79:24:5c:
                    aa:ae:92:72:87:80:e7:af:88:e8:0a:af:b1:17:dc:
                    89:89:02:7d:19:70:39:e7:6d:c9:39:99:e8:7f:0a:
                    66:c9:95:dc:4f:59:83:d8:00:ce:6c:44:f4:9d:1f:
                    c5:23:f1:92:fb:c2:a0:8b:32:1c:60:58:95:35:6c:
                    3b:d9:90:e3:96:06:e6:12:44:b9:bb:ee:67:be:23:
                    12:65:8f:fd:cc:c4:61:f5:77:4a:2a:91:15:7e:06:
                    ac:de:75:49:d5:6a:c8:18:7c:2d:b1:e4:34:43:d4:
                    db:00:80:13:06:af:0f:c8:9c:45:73:73:ed:6d:4a:
                    23:10:24:a3:e1:83:22:6d:8a:eb:5a:d0:5f:b0:94:
                    e1:ab:a8:0c:c4:fa:ba:02:c3:df:81:b2:ff:31:f1:
                    bd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E9:AE:5F:94:B5:87:66:D8:39:39:4E:D0:78:FF:16:A8:DA:48:00
            X509v3 Authority Key Identifier:
                keyid:09:5E:95:BC:C8:D0:DE:18:BA:F8:40:91:00:79:BB:C2:7B:E9:BB:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ef85f2-ba01-4447-a6b4-fc81918c4887/1/CV6VvMjQ3hi6-ECRAHm7wnvpu_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:2f:33:c5:98:ae:91:46:4e:51:16:76:75:41:6f:1d:3f:e0:
         49:ed:97:5d:d2:be:5c:13:ea:2d:43:e5:bb:f2:cd:ed:16:d4:
         4b:37:ac:c0:11:eb:bd:59:59:b1:4e:8c:8e:d2:1a:f3:03:03:
         0d:06:00:6c:8e:56:e2:ef:0b:e2:3a:a4:24:a0:a8:a2:0f:10:
         77:ed:97:98:e8:41:7f:f4:f9:0a:7c:eb:f8:3b:98:7e:64:43:
         a8:b5:d5:c5:c8:31:d1:8a:78:45:27:70:28:4a:20:5f:d2:5c:
         f5:98:c7:93:07:f2:40:3d:f0:e0:8a:bb:59:4b:07:f6:03:e2:
         51:79:d6:01:53:bc:bf:be:16:fe:f0:9f:c4:04:92:96:ec:d9:
         3d:cd:56:f7:1e:eb:7e:2d:2b:9b:97:a4:78:2a:68:16:95:0e:
         54:aa:91:d1:7f:2b:b1:84:2e:2c:af:15:f7:f7:4a:6b:4b:cc:
         af:e6:c3:14:44:b1:58:9d:62:2d:23:f9:51:54:3d:d5:34:cd:
         ce:37:05:e4:b0:d2:bd:98:4c:11:19:85:60:fd:f4:d8:e6:e0:
         b2:35:f7:c6:c7:9c:00:2e:1b:a4:09:5a:7f:69:40:25:04:a4:
         a3:98:e8:96:4a:79:09:89:31:b4:f9:a9:04:cf:79:10:90:67:
         49:75:a0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:53:59 2026 by rpki-client