Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
File:                     EPm9HHFv0ulaydYQddcJYhroBgA.mft (raw, json)
Hash identifier:          mJ5yOxmI+psdnihs5Gp2BqRCf7nLil79ZdQXwULa2j0=
Subject key identifier:   09:22:A1:6D:88:36:A7:8A:29:BC:E8:43:9E:03:62:1E:FA:22:E5:94
Authority key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
Certificate issuer:       /CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Certificate serial:       01A14A2A185C5F6B4ED00615BBE6442F6D96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
Manifest number:          0CE9
Signing time:             Sat 17 Oct 2026 14:00:34 +0000
Manifest this update:     Sat 17 Oct 2026 14:00:34 +0000
Manifest next update:     Sun 18 Oct 2026 14:00:34 +0000
Files and hashes:         1: EPm9HHFv0ulaydYQddcJYhroBgA.crl (hash: syaZboc7vZIk4rl7MGen0VaOwdDsSuQan8EGvFZh7bw=)
                          2: yfoSU4MQI1IIA9Yj3zamcPUf7K4.roa (hash: fzqLa9/pLczJAubnxnbiM1yIch9oKlX3jK2XbY433q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4a:2a:18:5c:5f:6b:4e:d0:06:15:bb:e6:44:2f:6d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
        Validity
            Not Before: Oct 17 14:00:34 2026 GMT
            Not After : Oct 18 14:00:34 2026 GMT
        Subject: CN=0922a16d8836a78a29bce8439e03621efa22e594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0d:5b:cf:98:d0:2a:d8:9d:82:df:11:0e:fe:
                    c2:a2:8f:29:50:a7:0e:00:9a:86:6d:f6:b7:97:b1:
                    9a:72:f4:39:81:4b:2f:1b:a1:b9:8b:20:6e:cc:a6:
                    e4:04:dd:c9:52:f0:27:9d:10:51:87:89:5d:a0:3b:
                    d8:58:9e:69:5e:b5:c1:be:3c:3d:32:61:b3:be:d9:
                    80:35:eb:e5:58:cc:13:38:ad:c4:07:ff:d8:bd:3e:
                    db:52:26:b9:5b:63:f9:b9:1c:3a:16:48:48:61:fa:
                    73:3d:7c:fe:d6:7c:7c:cc:ab:ec:57:3e:b9:f9:56:
                    59:3e:87:14:1c:d7:c7:26:df:b7:0f:f4:7d:a7:d5:
                    4f:96:18:fb:21:8b:04:6d:9a:3f:e3:ef:af:45:aa:
                    c7:72:39:84:be:55:1a:fe:4c:6c:f4:87:a1:bd:2c:
                    4c:70:84:8c:ce:47:52:e7:10:66:0f:52:47:43:a4:
                    54:a0:55:43:d9:7f:a5:6b:db:22:f6:5e:0f:46:76:
                    fe:56:8a:20:2d:f8:6b:81:07:14:f6:78:08:2e:c7:
                    95:7c:df:cc:ac:5a:f5:be:01:47:e3:34:61:00:2f:
                    d8:10:7c:f4:12:c6:ae:30:c6:93:5f:51:e5:89:d3:
                    a1:00:66:63:6b:02:3b:50:76:5f:a7:0d:87:78:2c:
                    b0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:22:A1:6D:88:36:A7:8A:29:BC:E8:43:9E:03:62:1E:FA:22:E5:94
            X509v3 Authority Key Identifier:
                keyid:10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:0d:07:ff:99:79:12:46:1c:f7:f6:c3:c5:f5:39:48:5b:cd:
         f2:50:d6:1e:b4:5e:f3:5f:37:c0:52:f4:e3:b4:dc:45:76:62:
         ca:be:af:c3:a5:27:38:43:4c:f2:8c:f5:b7:d7:5e:6f:18:6c:
         c2:9f:2e:03:57:04:05:94:c9:70:2d:c8:96:13:f9:3f:d1:a8:
         59:88:e7:4d:cb:5c:ac:da:7d:f9:f1:b7:a9:ee:4f:9b:ba:18:
         8f:3e:25:44:b4:95:10:2c:c4:8a:ad:56:63:b9:fc:41:94:58:
         85:dd:76:84:62:88:bd:1a:e2:6a:27:62:cb:d7:f8:2b:4a:16:
         61:8f:c3:a8:4b:e9:a3:74:1b:de:15:de:41:bf:da:7e:aa:2f:
         39:4e:a5:1b:43:6e:cd:9d:53:3a:d5:b4:e0:60:79:d7:b9:07:
         cb:25:1e:8e:e3:43:82:b2:19:6b:b8:45:ae:72:58:08:c9:41:
         4f:7f:02:38:61:e1:dd:65:c7:b7:ba:e4:c9:1d:7d:01:88:03:
         10:61:0b:68:11:4a:d7:51:fa:86:5e:64:56:8a:c7:af:53:f3:
         7d:c7:48:b9:60:39:dd:b0:2d:bd:e6:0c:a5:9a:16:f2:13:3e:
         94:12:94:4a:cb:7f:44:01:4b:fb:66:a6:7a:d0:e0:e3:d6:d8:
         5f:a7:3a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:29:13 2026 by rpki-client