Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
File:                     EDfew086MutlAvFmKoKiD4teohw.mft (raw, json)
Hash identifier:          1Jh/Lt6MNIN42lZ34WN9pSa0A8sUhC9/S+gfiFQqKeI=
Subject key identifier:   06:3F:38:01:D1:0E:16:B0:1C:72:89:23:99:B7:D3:9A:F3:D7:75:83
Authority key identifier: 10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C
Certificate issuer:       /CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
Certificate serial:       01A13E266353EABE47391E2973BEA0FEC7F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
Manifest number:          1AA2
Signing time:             Thu 15 Oct 2026 06:01:05 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:05 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:05 +0000
Files and hashes:         1: EDfew086MutlAvFmKoKiD4teohw.crl (hash: gAfgBcuDSI85dxHaFIHufaQnsKDPV2StIptBbC0HhJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:63:53:ea:be:47:39:1e:29:73:be:a0:fe:c7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
        Validity
            Not Before: Oct 15 06:01:05 2026 GMT
            Not After : Oct 16 06:01:05 2026 GMT
        Subject: CN=063f3801d10e16b01c72892399b7d39af3d77583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:c9:c3:e1:45:6f:de:f5:4b:cd:e1:f9:9a:
                    e0:b9:0d:7d:22:a5:78:d8:ce:d7:b9:a5:4d:ef:e4:
                    15:5d:eb:aa:98:a8:1e:88:63:34:7c:af:99:60:1b:
                    93:f8:71:20:c4:23:31:95:62:c7:df:e6:bd:37:1a:
                    0e:08:e2:d1:ad:25:03:28:73:b3:30:69:3f:49:74:
                    a2:3f:a6:37:e4:f6:46:23:7a:93:18:56:59:b5:d2:
                    31:2e:0d:25:05:79:cb:50:e1:2d:0e:64:44:50:40:
                    90:6e:a1:d3:95:12:d2:b7:2c:c6:8f:29:5c:15:b6:
                    5c:95:90:43:da:c4:d1:f0:c7:6f:96:0b:ad:22:ca:
                    ce:e7:57:2c:1b:66:47:53:fe:ff:28:63:b6:3c:95:
                    f1:f4:66:3b:a0:58:bf:a3:59:b7:f1:ef:b1:cb:44:
                    c1:61:35:f8:21:0f:15:b4:2c:d6:37:15:08:fb:4a:
                    62:7b:29:ae:e4:c7:7b:b6:cd:4d:0c:7d:df:31:97:
                    9e:95:5d:65:c7:5d:26:00:46:9d:26:65:ad:63:16:
                    37:89:03:c5:09:07:62:23:13:42:75:67:96:1a:d3:
                    f8:b1:89:3b:4b:cf:6e:d0:d2:b4:47:7b:7f:03:15:
                    3a:cf:22:9f:2b:fa:99:e6:4e:e5:1c:5e:a3:3a:56:
                    40:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3F:38:01:D1:0E:16:B0:1C:72:89:23:99:B7:D3:9A:F3:D7:75:83
            X509v3 Authority Key Identifier:
                keyid:10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:48:2c:3f:32:30:54:a5:b1:56:9a:d4:2d:89:58:57:53:ca:
         55:ef:7a:43:f3:ae:d0:f7:ed:5a:d3:a7:09:f3:aa:39:15:2b:
         8f:e8:17:7c:e7:50:7d:5c:f8:8d:fc:af:da:8d:f9:21:1a:f9:
         31:fc:a3:4d:d7:a8:b5:6f:02:f8:40:00:77:01:2d:51:07:da:
         80:0c:50:d9:08:35:3a:01:54:8a:da:d2:43:87:2a:71:fd:bb:
         2c:50:31:c7:74:0e:64:73:39:b0:c4:a1:f9:99:b4:67:04:bf:
         9c:71:51:bf:06:d4:e0:b3:e0:c6:a9:20:61:6e:15:ee:f8:9e:
         d0:03:2b:d8:86:99:b2:4e:03:c3:c6:2a:b6:6d:6c:24:43:49:
         ac:7d:56:d6:b7:15:7e:f1:cb:07:44:88:49:34:40:49:19:f7:
         3e:62:c1:81:d3:e2:11:ff:d4:d0:3b:50:c7:55:12:c7:c1:8a:
         09:3c:2c:ec:a3:ca:a3:ab:bf:f2:53:f2:d2:be:11:75:49:92:
         4b:25:27:2c:0b:7f:cb:a2:2e:de:97:8a:d5:a2:7b:38:e3:13:
         f5:6d:bf:db:48:88:ed:14:cd:d6:b8:b8:99:bd:f0:55:a9:da:
         6d:c2:c4:e9:8c:33:0f:08:d1:14:23:34:bd:74:9d:26:9d:14:
         65:b0:f0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:56:56 2026 by rpki-client