Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
File:                     ERAUzorTjRU1AJbVSe4cWAXQncg.mft (raw, json)
Hash identifier:          ddELgAJTsa7Bor/wsE5BcbJhuwt7wmaZonloK5t/eYI=
Subject key identifier:   ED:12:CF:81:55:42:6D:8C:5B:A5:97:79:C4:52:F6:5E:8F:64:95:60
Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
Certificate issuer:       /CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Certificate serial:       01A104DB996489EEF0D3F2D5A74F172B7B4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
Manifest number:          1A89
Signing time:             Sun 04 Oct 2026 03:01:02 +0000
Manifest this update:     Sun 04 Oct 2026 03:01:02 +0000
Manifest next update:     Mon 05 Oct 2026 03:01:02 +0000
Files and hashes:         1: ERAUzorTjRU1AJbVSe4cWAXQncg.crl (hash: sXVo0JM8sK/+xUx0K5uhWmqUcxxiC6PBHHCHRYxguUQ=)
                          2: ZPA0yTEgbeGTPx3uVMlT6oTLbXM.roa (hash: 1cNaYSmAVMmYxCmd/+BHA+BklNBA0EPt0mpd9OexoGk=)
                          3: eZKM8TJMYeLWEyu920Ld75NcinM.roa (hash: tmv3AASNUdy6CqfMaQz0xtQC6GhRK7nXqdtlIL9UhUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:db:99:64:89:ee:f0:d3:f2:d5:a7:4f:17:2b:7b:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8
        Validity
            Not Before: Oct  4 03:01:02 2026 GMT
            Not After : Oct  5 03:01:02 2026 GMT
        Subject: CN=ed12cf8155426d8c5ba59779c452f65e8f649560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fb:37:70:eb:8f:ea:9f:b3:52:ae:bf:d7:89:
                    5e:fb:64:98:75:6e:75:68:a7:46:6d:05:86:d6:25:
                    96:b9:be:d9:a6:6b:a1:2c:b9:80:c3:a5:7e:75:18:
                    b8:2e:4f:61:42:7a:76:ed:75:9a:dc:49:55:8d:1e:
                    ce:c9:c8:12:2a:85:b5:f7:8f:69:b0:bb:ad:d6:01:
                    91:f3:f6:30:49:d1:31:2a:ef:12:c0:91:90:e1:d7:
                    67:2f:9f:c3:e8:d2:51:3a:c1:17:ff:a1:fd:d6:b5:
                    82:f6:f9:ed:f7:08:c0:16:e5:bb:6a:f3:41:7c:00:
                    ea:78:00:59:5b:8d:02:f5:5f:a1:29:cc:e8:48:c7:
                    49:32:da:99:de:35:a4:f0:29:8c:5d:78:21:41:13:
                    06:50:93:93:d9:c9:8c:9e:2e:ab:09:1a:bc:c6:cb:
                    58:c5:7a:9e:45:d8:67:3e:1c:6b:66:b1:41:93:09:
                    6f:16:5a:37:bd:b1:b1:dc:88:7b:23:85:29:53:05:
                    93:ce:8d:9e:f1:2a:9d:24:e9:bc:c6:13:f4:05:9b:
                    fe:45:bf:4c:ab:8f:3d:32:6a:42:5e:d9:9a:77:bd:
                    e6:bd:56:2e:5f:aa:8c:b7:36:80:09:c6:0e:97:c3:
                    59:2f:00:34:74:da:67:5e:e6:ed:b1:f9:5b:19:8e:
                    82:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:12:CF:81:55:42:6D:8C:5B:A5:97:79:C4:52:F6:5E:8F:64:95:60
            X509v3 Authority Key Identifier:
                keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1c:c8:17:1f:31:47:38:23:69:b1:bf:26:7b:d3:de:b9:ec:
         21:ab:4c:fb:53:20:76:ec:fe:92:c1:b9:c9:52:8d:b2:d8:36:
         cb:58:c0:e4:6c:54:37:41:15:ae:9c:9a:8f:d9:cc:64:f5:3c:
         7d:45:bc:b5:d0:1b:2f:2a:8a:f0:f3:3c:b6:31:ca:c8:8c:0b:
         bf:e1:24:56:70:1b:cf:4f:4c:56:34:30:39:82:e0:48:7f:1a:
         80:62:2e:7a:b6:51:2d:02:09:23:47:e6:16:8c:cc:df:d1:c9:
         14:34:32:c7:54:d2:b9:43:c7:35:1d:ea:7b:0a:6b:35:20:a9:
         f1:b2:7a:27:be:cb:60:0f:b9:14:c1:d2:05:7d:29:24:0f:e3:
         31:dc:68:65:63:da:fb:ff:f9:b7:20:79:04:38:f0:c0:c9:12:
         c2:be:95:fd:41:3b:9d:e7:f6:8e:f2:28:74:cd:9c:4c:7c:be:
         68:58:1e:9d:1d:8a:ce:ba:76:cd:5e:d8:22:0d:7a:fc:39:7a:
         36:81:6d:42:48:b2:94:c7:38:39:be:e4:77:31:05:6d:36:9c:
         ed:c3:f4:7f:66:d3:20:13:7b:59:1e:e1:91:2f:33:d6:df:79:
         7d:1c:e3:d2:c2:e7:03:30:56:f9:e9:1a:56:82:89:37:5c:19:
         70:00:14:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:59:39 2026 by rpki-client