Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
File:                     EVVnl9qc5x7sKV81sAhZuQzoxfA.mft (raw, json)
Hash identifier:          ZxN2MnZ7KWkl3IzCutmFCJbph32td0YPdkxNRDzgfSs=
Subject key identifier:   71:60:E0:48:E8:56:F9:56:6D:16:F1:60:CB:F8:3D:92:3E:B7:08:AB
Authority key identifier: 11:55:67:97:DA:9C:E7:1E:EC:29:5F:35:B0:08:59:B9:0C:E8:C5:F0
Certificate issuer:       /CN=11556797da9ce71eec295f35b00859b90ce8c5f0
Certificate serial:       01A11B2BB4E534E33279590AA82685D233E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
Manifest number:          02AA
Signing time:             Thu 08 Oct 2026 11:00:11 +0000
Manifest this update:     Thu 08 Oct 2026 11:00:11 +0000
Manifest next update:     Fri 09 Oct 2026 11:00:11 +0000
Files and hashes:         1: EVVnl9qc5x7sKV81sAhZuQzoxfA.crl (hash: fpCseD6tWjplYy+qTbULwkyNNhRzixUvV/ErFkAhllg=)
                          2: tUtGKToVFVEdLnvzwP_qbyoWrD4.roa (hash: oDawWr/gCtZY5IlLhtFkFwJPnj3rhzKF04OEEY7CZlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:2b:b4:e5:34:e3:32:79:59:0a:a8:26:85:d2:33:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11556797da9ce71eec295f35b00859b90ce8c5f0
        Validity
            Not Before: Oct  8 11:00:11 2026 GMT
            Not After : Oct  9 11:00:11 2026 GMT
        Subject: CN=7160e048e856f9566d16f160cbf83d923eb708ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1d:e4:f5:bf:f7:3a:21:25:68:c6:a9:71:2c:
                    39:ae:7a:f6:bc:b6:a7:18:5f:d0:48:e9:08:46:e9:
                    28:07:c5:9e:3f:0b:9d:eb:7b:b6:6f:3d:b9:09:29:
                    2c:d3:cc:c3:0a:c9:c1:3d:8f:d1:32:bd:7b:72:37:
                    8f:99:c8:80:89:4c:05:4c:48:7c:6f:5b:de:5c:08:
                    95:97:43:93:d0:28:0b:c7:fc:92:8b:67:e7:b1:01:
                    96:67:ed:96:60:a8:a8:49:4d:42:73:6c:a6:28:8c:
                    c2:89:f3:57:af:0d:08:09:11:ea:05:c2:86:6e:e9:
                    4a:14:fa:b6:67:ee:67:60:41:2a:cd:3c:a7:8e:4b:
                    0b:b2:a1:12:d3:af:9f:30:7c:11:f3:4f:6f:23:a7:
                    84:e7:e0:52:56:5c:3c:eb:a4:d4:51:52:f0:ef:98:
                    dc:5f:ce:f5:18:21:71:96:06:fa:20:1c:a1:51:51:
                    51:d2:9f:bd:c9:ad:9f:2b:51:7e:5a:de:10:88:9d:
                    e7:09:3e:14:79:67:a2:b2:de:e4:ca:76:a4:be:26:
                    8e:68:bc:a3:8f:19:ea:39:fe:d2:59:df:d5:b2:ef:
                    f3:c6:98:fe:c8:c7:61:8d:1a:70:f6:f1:3b:c6:8d:
                    25:2b:a3:0e:61:ee:54:bc:78:da:5d:cc:21:72:93:
                    af:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:60:E0:48:E8:56:F9:56:6D:16:F1:60:CB:F8:3D:92:3E:B7:08:AB
            X509v3 Authority Key Identifier:
                keyid:11:55:67:97:DA:9C:E7:1E:EC:29:5F:35:B0:08:59:B9:0C:E8:C5:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:1f:8b:89:46:41:49:49:c9:e3:8c:ba:95:ca:1a:04:5d:74:
         be:4a:1f:08:1c:09:af:d2:e6:74:54:d1:e2:50:f8:00:46:bb:
         d7:2c:8b:cf:cd:df:05:44:fe:de:e0:65:bf:24:07:92:86:7a:
         7a:59:dd:9a:cd:6f:46:72:1b:45:95:ad:a4:e6:ca:6e:c6:94:
         a6:e6:e0:12:35:e4:25:d4:d5:80:0c:5a:d2:af:eb:15:ee:5e:
         9e:d0:81:53:4b:7b:9c:60:1a:19:a3:1f:53:08:89:e6:40:8c:
         43:77:db:91:bb:3a:99:a5:aa:38:7c:de:39:3a:3b:2e:a8:7a:
         8a:70:a9:bd:3f:8a:65:c7:3d:36:d7:ab:b8:a4:77:f9:f9:0e:
         87:50:17:65:7e:c3:8e:5c:17:68:b6:8c:c5:42:76:cd:4c:29:
         7c:a0:00:2e:9f:4c:33:f3:cf:c9:3c:d3:1b:ce:d7:10:05:2b:
         6f:60:8d:ec:d4:1d:0b:d5:e4:3f:37:e2:34:91:fa:95:e3:e3:
         25:1f:5f:26:e9:23:51:2d:0b:a7:26:7c:bb:09:19:f7:ed:32:
         a1:ee:54:d2:01:d9:13:f1:da:4f:0f:0d:85:2d:14:7d:b4:f1:
         a6:cc:e7:7f:e5:2e:71:38:44:b4:c3:25:6e:35:f5:35:36:cb:
         87:7e:03:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEbK7TlNOMyeVkKqCaF0jPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNTU2Nzk3ZGE5Y2U3MWVlYzI5NWYzNWIwMDg1OWI5MGNl
OGM1ZjAwHhcNMjYxMDA4MTEwMDExWhcNMjYxMDA5MTEwMDExWjAzMTEwLwYDVQQD
Eyg3MTYwZTA0OGU4NTZmOTU2NmQxNmYxNjBjYmY4M2Q5MjNlYjcwOGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B3k9b/3OiElaMapcSw5rnr2vLan
GF/QSOkIRukoB8WePwud63u2bz25CSks08zDCsnBPY/RMr17cjePmciAiUwFTEh8
b1veXAiVl0OT0CgLx/ySi2fnsQGWZ+2WYKioSU1Cc2ymKIzCifNXrw0ICRHqBcKG
bulKFPq2Z+5nYEEqzTynjksLsqES06+fMHwR809vI6eE5+BSVlw866TUUVLw75jc
X871GCFxlgb6IByhUVFR0p+9ya2fK1F+Wt4QiJ3nCT4UeWeist7kynakviaOaLyj
jxnqOf7SWd/Vsu/zxpj+yMdhjRpw9vE7xo0lK6MOYe5UvHjaXcwhcpOvnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFg4EjoVvlWbRbxYMv4PZI+twirMB8GA1UdIwQY
MBaAFBFVZ5fanOce7ClfNbAIWbkM6MXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVZWbmw5cWM1eDdzS1Y4MXNBaFp1UXpveGZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80Njk2ZTUtZmNlYy00NGEwLThmMDMt
MWVlZGE5YTlmZjhmLzEvRVZWbmw5cWM1eDdzS1Y4MXNBaFp1UXpveGZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80Njk2ZTUtZmNlYy00NGEwLThmMDMtMWVlZGE5YTlmZjhm
LzEvRVZWbmw5cWM1eDdzS1Y4MXNBaFp1UXpveGZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKR+LiUZB
SUnJ44y6lcoaBF10vkofCBwJr9LmdFTR4lD4AEa71yyLz83fBUT+3uBlvyQHkoZ6
elndms1vRnIbRZWtpObKbsaUpubgEjXkJdTVgAxa0q/rFe5entCBU0t7nGAaGaMf
UwiJ5kCMQ3fbkbs6maWqOHzeOTo7Lqh6inCpvT+KZcc9NteruKR3+fkOh1AXZX7D
jlwXaLaMxUJ2zUwpfKAALp9MM/PPyTzTG87XEAUrb2CN7NQdC9XkPzfiNJH6lePj
JR9fJukjUS0LpyZ8uwkZ9+0yoe5U0gHZE/HaTw8NhS0UfbTxpsznf+UucThEtMMl
bjX1NTbLh34D9Q==
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:14:30 2026 by rpki-client