Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File:                     EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier:          bb3CrZq2snGWUvwx36s9BCjCWuJDwm+oqsSqs4iB9zI=
Subject key identifier:   5D:30:7A:9E:AA:B1:62:E3:B7:71:95:28:E7:D4:D5:82:12:62:12:5C
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer:       /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial:       01A13E9535B2D0341B3F9243B4F3B8519210
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number:          1183
Signing time:             Thu 15 Oct 2026 08:02:08 +0000
Manifest this update:     Thu 15 Oct 2026 08:02:08 +0000
Manifest next update:     Fri 16 Oct 2026 08:02:08 +0000
Files and hashes:         1: 0QygA5EjmnNvfod7LRYIvHW6VOU.roa (hash: 9mJbNM5RFQ2gh5+u4PI5yU3lzfK+jzemRH8Ny/3lnYI=)
                          2: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: WfoqWAS0F+AgEHoWskpoq7Kc0dppNnahcMiXJ+az9wA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:95:35:b2:d0:34:1b:3f:92:43:b4:f3:b8:51:92:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
        Validity
            Not Before: Oct 15 08:02:08 2026 GMT
            Not After : Oct 16 08:02:08 2026 GMT
        Subject: CN=5d307a9eaab162e3b7719528e7d4d5821262125c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:b8:78:e9:cf:b5:0a:52:d3:5e:8d:1e:f7:
                    f9:0f:41:79:3a:42:26:ed:a2:38:36:1f:8b:a2:79:
                    1b:d0:2b:44:c4:89:0b:6c:ff:e9:aa:56:71:0a:b3:
                    af:41:df:a6:59:84:8f:fd:05:d3:68:73:29:d1:ea:
                    24:ef:e5:73:84:61:0f:31:ed:2d:bc:f3:e7:39:63:
                    b3:1c:6c:1c:ac:67:a8:18:c2:0e:4d:eb:7b:34:5b:
                    8e:31:63:45:a6:2a:2b:a6:40:b9:6a:ef:0c:f9:00:
                    5c:f2:d8:43:be:38:7f:1e:52:54:d0:7d:11:cd:84:
                    9a:e4:48:82:4f:cf:cb:81:a2:33:71:48:ae:86:fc:
                    00:b7:f3:15:d3:c7:0f:23:9c:f9:e7:2f:59:ab:35:
                    94:ea:f2:50:f2:28:f3:2a:00:82:cb:06:ea:63:86:
                    71:7b:f5:46:12:6d:85:fd:9b:88:4e:79:81:e5:b9:
                    7e:3a:6b:1e:f1:cb:81:c6:15:a1:34:8a:0a:ba:b5:
                    5d:4b:11:b6:fb:e4:d8:f8:28:00:f4:6c:da:cd:e7:
                    21:e4:e4:7b:b5:64:fa:5e:16:79:71:fa:48:df:2a:
                    3a:4a:f6:88:85:26:db:33:3b:b8:6d:74:b8:88:51:
                    9d:94:6d:0f:a4:60:2a:ac:72:9f:43:d9:a5:a6:d5:
                    a6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:30:7A:9E:AA:B1:62:E3:B7:71:95:28:E7:D4:D5:82:12:62:12:5C
            X509v3 Authority Key Identifier:
                keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:31:63:7c:8e:51:a1:33:2c:70:3c:52:8b:da:6c:c7:a0:9b:
         40:0b:95:ae:9f:25:29:18:5d:53:40:18:14:df:ec:6f:2a:73:
         c9:f0:d3:97:e2:cc:58:4a:eb:c5:18:9b:f8:8a:db:dd:33:b8:
         0c:97:93:7a:56:94:f2:ac:29:f0:f2:fb:03:3a:1f:83:dd:50:
         26:b3:d3:bd:64:29:41:1d:6c:c0:20:d4:24:30:a0:0b:db:bc:
         b7:a4:6f:ef:cf:b9:54:4c:0e:68:91:b0:6e:aa:14:11:2d:f7:
         d5:f3:f0:43:9c:a1:6c:03:7a:b5:7c:e4:29:b9:98:24:63:f4:
         f4:1b:ac:b8:1c:36:9b:59:7e:f3:0a:44:a8:70:14:9a:d6:11:
         c3:3e:bc:6a:ef:9c:4c:41:21:e4:5e:31:1d:6c:4c:14:16:9b:
         f5:85:54:40:eb:37:d2:bc:ca:34:58:99:42:db:66:81:9e:e0:
         96:a6:cf:f3:11:a9:af:0d:e3:bc:80:25:db:6f:9a:a3:a8:eb:
         fa:e5:dc:49:14:cd:c6:43:f1:0d:3d:9e:ee:be:b7:83:0c:47:
         d5:32:3f:ef:2e:e5:96:71:b5:5f:a8:bc:13:84:bc:ce:c1:9a:
         b5:54:4d:af:55:32:4c:05:29:77:3f:16:e2:80:8a:35:c6:53:
         73:2b:61:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:44 2026 by rpki-client