Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.mft
File:                     EQ_DrECkDY4ObxdbgrOP8fj4haA.mft (raw, json)
Hash identifier:          ZDiagjaTew0eER+KLk7+sKxwUIGcaBjtPa1fgPbBgs0=
Subject key identifier:   24:1E:48:40:89:64:67:9F:71:A2:DB:B0:90:10:9E:BD:D1:0C:EE:C5
Authority key identifier: 11:0F:C3:AC:40:A4:0D:8E:0E:6F:17:5B:82:B3:8F:F1:F8:F8:85:A0
Certificate issuer:       /CN=110fc3ac40a40d8e0e6f175b82b38ff1f8f885a0
Certificate serial:       01A189AE0FAB9A278DB098FEA82DE2FDCE88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQ_DrECkDY4ObxdbgrOP8fj4haA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.mft
Manifest number:          AD
Signing time:             Thu 29 Oct 2026 22:00:47 +0000
Manifest this update:     Thu 29 Oct 2026 22:00:47 +0000
Manifest next update:     Fri 30 Oct 2026 22:00:47 +0000
Files and hashes:         1: EQ_DrECkDY4ObxdbgrOP8fj4haA.crl (hash: 93ZGVc7Qv/2TsdhG4V8wsDTlm6pZ0iK8t0xZzkF49JA=)
                          2: TUf12jhMmcLOANf7cgOVkVeYwW8.roa (hash: 7Fp06A3yhCRN7VwSugruMcOv/NybhwRNEN+T2UwHQGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQ_DrECkDY4ObxdbgrOP8fj4haA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 22:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:89:ae:0f:ab:9a:27:8d:b0:98:fe:a8:2d:e2:fd:ce:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110fc3ac40a40d8e0e6f175b82b38ff1f8f885a0
        Validity
            Not Before: Oct 29 22:00:47 2026 GMT
            Not After : Oct 30 22:00:47 2026 GMT
        Subject: CN=241e48408964679f71a2dbb090109ebdd10ceec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:ec:ce:af:bf:74:7f:fc:9a:e1:48:62:bd:
                    b8:3f:82:c4:03:81:96:28:8d:a0:5d:2a:86:6f:22:
                    11:71:6f:a2:75:14:15:08:05:18:33:d7:56:bd:b0:
                    e6:1a:8c:3d:2f:43:b6:f8:76:e5:17:64:52:61:33:
                    81:2b:c6:5f:79:1e:e2:b8:e9:32:21:e8:bc:05:8c:
                    21:1f:f0:f1:dc:3a:85:77:5c:1e:93:86:2f:df:79:
                    08:09:80:92:7e:8c:0a:7f:9d:42:ca:13:2c:be:2a:
                    2e:3a:50:75:5e:96:2f:be:e9:56:ac:44:9f:a7:3e:
                    d4:e4:92:05:7e:32:80:d7:68:70:66:37:14:63:b8:
                    84:6d:a1:e7:14:58:dd:93:73:70:dd:f1:9b:d9:37:
                    b2:8c:52:f9:e6:51:89:e5:c0:1d:ef:c2:a0:74:86:
                    1b:c9:d7:a2:ae:3c:0f:08:e7:86:34:71:6b:35:29:
                    96:4d:69:4b:5e:9a:75:35:8b:11:d4:f3:bf:02:17:
                    d0:f7:15:bc:58:76:96:cf:1b:6a:92:07:7b:e4:10:
                    ae:ed:64:e0:8d:88:c9:d9:e8:1f:86:c1:63:1b:2b:
                    07:ee:56:55:95:df:73:3b:1b:2c:2c:45:c9:22:1e:
                    d5:79:1c:f1:d6:7b:97:94:d2:a9:46:de:15:f2:74:
                    a8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1E:48:40:89:64:67:9F:71:A2:DB:B0:90:10:9E:BD:D1:0C:EE:C5
            X509v3 Authority Key Identifier:
                keyid:11:0F:C3:AC:40:A4:0D:8E:0E:6F:17:5B:82:B3:8F:F1:F8:F8:85:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ_DrECkDY4ObxdbgrOP8fj4haA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0fad6f-e9d9-48b6-bd11-b0f5367c01f4/1/EQ_DrECkDY4ObxdbgrOP8fj4haA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:83:74:ff:f6:b1:e8:54:2a:34:26:aa:5f:17:1d:91:0d:90:
         07:8f:d7:9b:47:58:d1:8e:ad:3a:60:e8:4a:bf:ad:95:65:66:
         0c:ae:7b:bb:3d:73:a0:45:30:4e:6e:29:7b:30:f2:0b:39:a8:
         64:67:06:10:43:61:5b:4d:18:7b:c1:93:e8:ab:3d:b8:33:36:
         49:70:8d:ca:ab:87:6b:46:bf:f6:bb:a9:a3:f3:25:ae:8b:f2:
         66:4a:a7:ce:2e:92:c3:6d:9e:1f:8c:f3:aa:55:90:95:34:65:
         82:e9:7b:94:e3:47:ae:68:1b:b9:53:ae:de:05:fb:d3:de:01:
         25:f6:91:b8:69:9f:26:01:71:d0:73:72:25:fe:be:66:4d:69:
         50:4b:ad:c0:a1:52:c2:0d:be:9b:ba:8a:f3:c2:a3:cd:4a:e9:
         52:9b:75:76:43:a0:6e:8a:0d:fd:b0:cd:c2:c6:80:a9:92:f8:
         30:e0:37:7f:69:63:39:c3:12:1b:f6:c0:ae:83:6c:bb:30:c8:
         d0:69:a7:dc:29:07:77:86:63:f8:aa:4c:b3:1e:15:15:00:c6:
         74:21:82:f5:74:df:69:9f:a3:ac:89:26:b8:a3:30:a1:ac:d7:
         e9:13:a9:08:85:fb:ae:8a:89:93:71:b5:d9:a0:87:57:d5:13:
         21:a1:13:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:07:09 2026 by rpki-client