Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
File:                     EzzXwanHnILu5chqQjwXwdY8NBM.mft (raw, json)
Hash identifier:          NRl1e371e4pVWjfRNzu9lIqN6ATHuJiI3YpO4jT2bSY=
Subject key identifier:   75:25:EB:BD:6B:5E:D4:A0:68:E5:EB:F1:F8:12:39:3E:F8:3A:20:83
Authority key identifier: 13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
Certificate issuer:       /CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Certificate serial:       01A18150AFF5DFE62B9B56696B0DF54263E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
Manifest number:          1ACA
Signing time:             Wed 28 Oct 2026 07:01:50 +0000
Manifest this update:     Wed 28 Oct 2026 07:01:50 +0000
Manifest next update:     Thu 29 Oct 2026 07:01:50 +0000
Files and hashes:         1: EzzXwanHnILu5chqQjwXwdY8NBM.crl (hash: 5Ig7xpuEp4/C0GW11c9F/YVM02kwg1/FxmKPC5EBZ50=)
                          2: WTbEe94waQcAOWSmsq1gJHbzJ-w.roa (hash: RQ0yquPveMna0uUrZmIBE6jJFIWp6HG8s98uBt2ysIQ=)
                          3: XGCNBsd4u6QOk9r0MzhRQOuN9ZU.roa (hash: FSmwQ5r6NLBZECcz2CKbhB2EYhBz90265wYtBC2pd4E=)
                          4: j72ehUcYFQsY8mwd247RHKpGmrA.roa (hash: R5PTXqk1HdBWYa8WeY/H3/r2BVqX4E5o1X6EGl909q8=)
                          5: rCCPh-mLpc7daTsM4LgnGKTzoNk.roa (hash: qm0Mei8UOmaXqagO6MtJ9K4mF8ePw84zkbqc33Xhnhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:50:af:f5:df:e6:2b:9b:56:69:6b:0d:f5:42:63:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
        Validity
            Not Before: Oct 28 07:01:50 2026 GMT
            Not After : Oct 29 07:01:50 2026 GMT
        Subject: CN=7525ebbd6b5ed4a068e5ebf1f812393ef83a2083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2d:97:49:d2:ef:11:ba:bb:45:b9:f5:ba:bb:
                    3b:6a:e3:f6:f4:ae:ce:13:cb:b3:21:09:31:cb:ba:
                    de:a3:3f:29:9f:ef:bf:44:7d:62:f0:d8:3a:ad:1a:
                    43:82:9c:86:81:fa:f6:86:55:fe:c3:0b:ef:9d:9c:
                    f6:3f:d5:88:9e:4b:ee:2f:c3:1c:c2:ac:66:a7:89:
                    ed:aa:f0:81:ec:fd:ab:30:fd:f2:ef:ed:c4:30:ab:
                    b1:60:c8:82:3b:76:14:9b:25:3e:bd:a1:10:42:79:
                    19:40:63:b3:60:e0:b9:3f:36:af:d8:7a:c5:54:bf:
                    51:88:85:9f:ba:a4:98:bb:7e:64:c8:e4:90:b8:62:
                    7b:e9:b4:d0:b8:cf:98:aa:a3:77:37:fb:ca:d6:84:
                    44:e8:5f:c2:a0:1a:e8:72:c2:d6:24:3b:1e:d8:8f:
                    36:92:06:30:96:3c:01:07:0b:f3:25:43:54:c5:c9:
                    c5:ce:75:80:86:2e:5a:b8:86:1a:fa:33:cc:6b:dc:
                    d8:40:a0:c6:c7:14:56:13:ba:67:b7:35:20:15:bd:
                    5e:cc:76:88:b6:d3:f4:2a:3e:ca:f0:c0:31:0b:da:
                    73:a2:ff:2a:f5:bc:9c:47:01:b5:95:21:13:64:d9:
                    53:05:fe:64:1a:f2:4a:e3:1b:f2:f4:be:5f:b8:ad:
                    ea:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:25:EB:BD:6B:5E:D4:A0:68:E5:EB:F1:F8:12:39:3E:F8:3A:20:83
            X509v3 Authority Key Identifier:
                keyid:13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a2:2b:97:84:27:9a:4f:0e:e4:b6:bc:3b:51:54:69:45:6a:
         38:3e:06:03:c9:8b:06:0c:29:03:20:b7:8f:10:24:06:76:e7:
         71:6c:fc:61:ef:7f:f5:de:54:b9:3f:e8:b7:b5:25:42:8f:c6:
         b9:7d:41:f2:aa:0f:14:e2:c7:32:24:e5:3b:56:0a:1f:34:a3:
         37:42:e6:53:ff:ed:a4:15:93:07:ff:d5:1f:94:ab:17:2d:4d:
         0b:8f:68:dc:5a:ee:58:a5:7e:1e:a4:b6:73:0c:32:e3:4f:1e:
         e7:57:f8:17:3c:8d:9b:63:53:2d:dd:b1:61:8e:be:d7:79:87:
         2a:32:7d:64:84:d7:be:75:22:a8:b2:7c:27:d0:03:3d:22:3a:
         3f:b4:08:5d:9e:f2:bf:1f:ee:8a:c2:a9:0f:c3:ed:a2:89:d7:
         d9:73:7b:ae:0d:47:d7:05:c6:5a:81:f9:c2:85:48:af:b7:04:
         b8:86:75:c2:c4:7a:b1:0b:9e:41:5a:9d:5d:eb:ef:b7:09:74:
         fe:cb:35:94:aa:1c:a8:62:fe:04:ab:ab:12:40:3a:a9:45:9b:
         b8:21:74:63:cc:1a:13:72:a8:eb:1b:a6:5b:49:25:4e:b5:fb:
         bb:65:1b:30:fd:55:c0:af:f6:9a:3f:11:64:21:16:7d:58:3e:
         19:d4:33:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:22:08 2026 by rpki-client