Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File:                     CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier:          Ad2eRrsueVfCm1g24fwuVCkDVSg1LRTcpJMPedCUolY=
Subject key identifier:   EA:56:8F:7A:FC:72:12:D0:4A:64:6D:61:53:58:3B:46:96:21:B8:6F
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer:       /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial:       01A1431661B54E0E138038B880F038204DC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number:          0D75
Signing time:             Fri 16 Oct 2026 05:01:42 +0000
Manifest this update:     Fri 16 Oct 2026 05:01:42 +0000
Manifest next update:     Sat 17 Oct 2026 05:01:42 +0000
Files and hashes:         1: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: A9aPJs4/2/1rxN601KSeJjUDm1LouZQpsUW548mOW5E=)
                          2: jrESc5APENrqQkJhnFt6y_8ea-8.roa (hash: aS9GuOaG5e1hqXNc5Tek76eZwNGPGkUH9oPiGIbY26k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 05:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:43:16:61:b5:4e:0e:13:80:38:b8:80:f0:38:20:4d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
        Validity
            Not Before: Oct 16 05:01:42 2026 GMT
            Not After : Oct 17 05:01:42 2026 GMT
        Subject: CN=ea568f7afc7212d04a646d6153583b469621b86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:37:d1:66:8e:ae:2b:c5:1f:4a:4c:83:67:
                    f6:48:80:59:04:98:37:f7:c8:ab:91:25:de:0f:e6:
                    88:52:e2:b1:6e:bf:94:49:b3:4b:5a:e0:57:27:09:
                    42:58:7b:53:8a:bb:5f:ca:2a:2f:c7:8b:ca:e5:fe:
                    f7:60:35:35:2d:00:15:25:b0:8d:0f:e3:06:c9:9d:
                    c1:3c:35:57:cb:81:bf:6e:21:03:7a:1d:a1:d2:92:
                    e9:91:35:07:0b:8f:3d:fb:d3:04:ef:2e:2e:83:c9:
                    6a:89:a6:cb:16:31:ba:7c:01:fa:fe:bb:94:0b:69:
                    04:ef:7b:fb:f3:02:23:8e:7d:44:82:f0:7d:84:4f:
                    03:0a:51:a9:34:0d:0a:0e:61:19:bf:25:eb:de:94:
                    f9:5d:8e:1d:a8:30:26:ec:a1:88:3e:b4:ae:63:b0:
                    36:23:a2:2b:42:b4:8a:5b:49:18:76:6c:e4:f4:a1:
                    ef:80:c1:fc:10:d8:db:cf:6e:3a:02:cc:69:99:a0:
                    f8:ce:de:4a:1f:d3:52:2a:a2:fd:51:f0:63:55:f1:
                    66:04:9a:08:dd:f4:44:58:08:84:e8:7f:b9:9f:8c:
                    7b:66:6e:1c:95:93:12:f5:88:4e:12:15:c8:5d:c1:
                    03:a2:45:c3:ba:f8:54:57:3d:df:a6:10:4c:5b:c5:
                    2c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:56:8F:7A:FC:72:12:D0:4A:64:6D:61:53:58:3B:46:96:21:B8:6F
            X509v3 Authority Key Identifier:
                keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:7d:2d:5d:ea:62:68:6c:5b:98:4a:2b:21:11:0d:4a:22:ca:
         5c:c2:87:5f:24:13:5c:f1:7a:e9:71:e9:26:5c:79:76:d3:ae:
         4d:0f:9d:2f:5b:31:a4:20:3f:3f:d5:15:7e:b9:7f:d5:61:84:
         52:56:23:90:e5:14:f3:10:f5:62:13:3b:cd:68:81:70:a9:ee:
         44:6f:b9:39:b9:9b:69:17:cf:39:b0:25:81:2b:2f:59:e1:bb:
         bc:21:11:c6:2d:35:fe:98:68:2f:2c:e6:13:a8:b0:17:f9:f3:
         21:eb:da:2b:9c:80:b5:2f:7a:b6:ed:f0:c2:b5:60:07:8b:ca:
         66:af:78:09:43:07:ab:6d:30:ce:0b:98:8f:38:3b:93:7a:b9:
         f7:32:14:e3:1a:ca:80:ca:f4:e4:7a:b3:79:3b:27:fe:69:f8:
         55:40:6e:a5:56:20:82:32:ac:4b:f8:ef:44:08:2b:ae:a2:c2:
         e8:7e:e9:c6:3f:49:dd:c1:56:ed:c0:fe:96:32:65:1e:8e:49:
         84:e0:09:4b:40:08:74:9f:31:d7:92:61:30:d6:bb:ac:a8:f6:
         66:fd:e7:6e:c3:3e:82:bc:50:56:3e:8f:37:af:1b:92:ae:ee:
         38:ea:77:0c:78:42:65:08:54:71:e2:49:2b:5b:d7:81:8b:fb:
         e5:cb:d6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 14:42:16 2026 by rpki-client