Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
File:                     EeKnjdx_E58MIqKmNmK0gSrlEy4.mft (raw, json)
Hash identifier:          YBHhTiWuOF0gGTZwjowU43jd9KdSv9wrPX9/e+F0LCo=
Subject key identifier:   47:96:32:2A:3A:79:29:55:4A:0E:5E:05:70:B3:A0:59:E9:58:E2:24
Authority key identifier: 11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E
Certificate issuer:       /CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
Certificate serial:       01A1949F7B1E35B1CDC6C34B01AED0ED137F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
Manifest number:          11BD
Signing time:             Sun 01 Nov 2026 01:00:41 +0000
Manifest this update:     Sun 01 Nov 2026 01:00:41 +0000
Manifest next update:     Mon 02 Nov 2026 01:00:41 +0000
Files and hashes:         1: EeKnjdx_E58MIqKmNmK0gSrlEy4.crl (hash: yJmDGLgQwyCWu4H854QSnHZ6rIuIXyxuXbN0niy9ntg=)
                          2: Ubp5Og51PZBNS6HboXw93j92KsA.roa (hash: /k1Klx55mGrgkQUlZEtN8/AR7GCNuwD05hpmFMl774Q=)
                          3: pWXZtCsdY4YY3ukaTshaoyzjeSc.roa (hash: aOl1H4Qz0lJuDr1Yv2a145gjt3ffANHgu1PQv3jNCUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:94:9f:7b:1e:35:b1:cd:c6:c3:4b:01:ae:d0:ed:13:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e2a78ddc7f139f0c22a2a63662b4812ae5132e
        Validity
            Not Before: Nov  1 01:00:41 2026 GMT
            Not After : Nov  2 01:00:41 2026 GMT
        Subject: CN=4796322a3a7929554a0e5e0570b3a059e958e224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:81:cd:72:72:ac:73:3c:c6:06:fd:1c:fc:22:
                    2b:65:95:a0:36:e5:49:69:34:a5:52:c3:87:8d:1b:
                    d9:fa:5e:ee:ac:8b:08:ee:16:64:ef:5b:6e:7c:15:
                    71:01:e6:6b:cd:44:00:e3:92:cc:da:c2:ed:8b:c7:
                    42:df:30:be:94:dc:fc:a9:fc:31:06:2e:30:f2:9e:
                    b6:78:99:ed:c4:32:63:5e:94:77:9e:3e:a8:4d:ef:
                    22:9b:f4:f4:02:b4:9a:ee:fb:48:53:57:49:54:81:
                    31:dc:04:05:9d:c2:28:a4:8f:fe:c0:55:d4:dc:b5:
                    e6:66:ed:be:42:78:66:2c:cb:62:66:8e:22:3f:56:
                    ff:65:7d:f9:58:d1:92:2b:6d:9d:55:18:26:a9:b1:
                    a7:fc:d3:aa:c3:5b:f4:b2:39:39:3d:cf:47:b3:4b:
                    cc:0a:1b:78:7b:d1:f3:b0:e6:8f:ee:36:0d:c9:87:
                    ff:56:44:2a:bd:26:c7:12:52:8f:69:ec:a1:61:d2:
                    6e:f2:1e:5d:fe:5f:17:62:ec:49:be:cb:c3:2d:92:
                    3b:ff:5d:ee:43:64:6d:11:0b:96:48:2b:ff:9a:29:
                    39:54:8a:8d:75:61:f9:2a:0a:cc:63:78:34:aa:37:
                    ec:ee:75:95:0b:24:31:98:b7:0a:08:c1:0a:e3:c9:
                    19:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:96:32:2A:3A:79:29:55:4A:0E:5E:05:70:B3:A0:59:E9:58:E2:24
            X509v3 Authority Key Identifier:
                keyid:11:E2:A7:8D:DC:7F:13:9F:0C:22:A2:A6:36:62:B4:81:2A:E5:13:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeKnjdx_E58MIqKmNmK0gSrlEy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd15c7-476a-4c57-baf4-de5f7bf59839/1/EeKnjdx_E58MIqKmNmK0gSrlEy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:76:90:f0:fd:1f:46:b5:4f:6f:09:03:65:a7:b4:eb:67:33:
         13:77:25:a9:eb:02:66:8f:e9:02:6a:49:cb:05:96:a7:64:ca:
         e7:93:fa:9d:16:ea:43:b5:49:e2:d4:b7:33:ce:60:6a:46:19:
         e9:38:20:ae:99:03:7a:85:b1:21:82:4d:69:27:0f:ec:60:22:
         2e:16:3b:3c:78:52:db:99:8b:f0:3c:0f:f8:51:38:d0:b5:58:
         cb:6e:21:40:ba:85:73:2a:5b:4d:3d:57:bd:95:09:9f:ee:85:
         d7:08:f1:0b:33:af:db:aa:2b:f5:c0:c0:56:96:77:f6:66:63:
         8e:cb:8f:51:87:9a:e0:43:be:4c:56:54:30:89:c8:48:fe:68:
         33:b1:b4:30:31:fd:ee:13:d4:f3:90:9a:34:a3:92:0a:89:0c:
         1f:c5:ea:96:54:ad:8d:87:81:92:b7:a7:65:ef:65:0a:95:d1:
         82:60:75:85:21:de:52:70:32:cd:38:19:95:d3:4a:c0:62:29:
         90:fd:9e:a3:22:89:ce:e0:4d:66:bf:28:c1:5f:74:14:cf:28:
         bc:9f:64:7c:8c:e1:55:c4:34:0e:02:30:c9:9d:4b:bd:31:e0:
         bb:30:39:6f:ac:e5:b0:a2:35:b8:27:f7:67:dd:3e:36:4a:a4:
         81:14:67:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:25:01 2026 by rpki-client