Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
File:                     EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json)
Hash identifier:          p+V5HLfeGfBLloj3YcTk7AInxLtyLISuORCl+DAoJtc=
Subject key identifier:   44:69:76:71:D3:7E:91:EE:EB:AE:31:91:51:85:24:E8:BC:F7:88:4A
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Certificate issuer:       /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial:       01A08C7B5956C725BD5D61C624FD3F178D36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
Manifest number:          1A8A
Signing time:             Thu 10 Sep 2026 18:01:29 +0000
Manifest this update:     Thu 10 Sep 2026 18:01:29 +0000
Manifest next update:     Fri 11 Sep 2026 18:01:29 +0000
Files and hashes:         1: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: 77e4KOgZwCyz9YhhWua8wcYkOf22b8mm6BUXqizAH+k=)
                          2: oGSX6Be2A4gMsymfO3IeIELxVGc.roa (hash: 9nynO0eaDCEM38Kekr3tOs/yAPJlXITpxT9ftUpbs/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 18:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7b:59:56:c7:25:bd:5d:61:c6:24:fd:3f:17:8d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
        Validity
            Not Before: Sep 10 18:01:29 2026 GMT
            Not After : Sep 11 18:01:29 2026 GMT
        Subject: CN=44697671d37e91eeebae3191518524e8bcf7884a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:85:da:cf:a5:b8:c7:3f:3f:5c:e7:1d:2e:86:
                    8a:96:79:d3:a1:9b:fe:68:e7:5a:10:a6:45:a4:50:
                    40:90:22:7c:c6:69:50:f8:9e:0a:8a:53:e8:53:70:
                    b9:5b:b3:84:9a:5f:96:ae:97:7d:77:9d:d3:56:72:
                    61:dc:97:89:8e:f4:7e:cf:1e:11:f5:e6:e2:ff:07:
                    c3:05:53:03:e3:f2:69:b2:ee:46:c8:b2:6c:40:a9:
                    72:2a:02:61:36:b1:19:d1:4a:55:a4:0c:71:57:30:
                    eb:0a:0d:fd:26:93:f8:d1:89:82:55:6b:01:9a:c3:
                    28:b7:c5:3b:77:26:38:1a:72:da:50:fa:4c:06:9b:
                    5b:53:ad:c1:99:15:d1:85:a5:f4:c4:16:9c:d5:cb:
                    0c:f8:ba:16:e4:9f:f2:2e:18:b4:04:b5:c0:20:b4:
                    a0:cb:9a:8d:c9:fb:51:81:21:9d:7e:a7:27:00:f3:
                    b6:2f:04:09:e2:4b:97:ed:5e:99:f0:12:ae:71:ee:
                    81:36:07:0e:3e:d5:0c:6b:b3:3f:af:a7:9f:02:07:
                    c3:c8:f9:83:4b:83:21:f5:a2:dc:9f:41:69:18:30:
                    2a:44:3b:96:15:15:89:24:7b:59:63:62:20:a8:86:
                    bd:e1:fe:02:6b:cc:9d:cc:be:0a:88:24:51:a6:6d:
                    3f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:69:76:71:D3:7E:91:EE:EB:AE:31:91:51:85:24:E8:BC:F7:88:4A
            X509v3 Authority Key Identifier:
                keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c1:34:3f:b9:c6:af:29:ca:5d:32:87:b7:37:1d:aa:23:a7:
         86:4a:4c:06:b1:ba:a4:f8:08:2f:2e:34:6c:24:b4:fd:ff:8a:
         a4:4c:4f:7a:cf:b8:51:11:5c:9e:e1:2a:da:06:87:90:e6:a7:
         51:90:c5:b6:e0:6c:b9:17:4d:e3:d0:a9:50:41:00:d0:25:56:
         9c:8c:49:45:39:c2:97:13:29:64:b1:9c:15:72:e3:25:c7:72:
         e1:b4:e5:ea:95:24:16:8d:da:b3:ca:81:87:c1:e4:4c:3d:7f:
         30:80:ca:dd:e7:9c:ac:52:8e:e0:4e:9d:3f:c6:c9:f9:f5:fc:
         95:aa:b1:c3:fb:6f:3d:7b:76:8d:1e:70:bb:9b:34:26:4d:6b:
         33:85:93:96:55:97:4b:48:d8:30:a3:63:9d:e9:ee:98:e6:af:
         97:d8:6c:00:8b:c9:da:4d:4d:75:dd:7e:e5:46:29:94:89:d4:
         27:b7:0c:81:7e:40:fc:c7:9c:23:ac:23:92:75:0c:49:be:f7:
         ac:7a:c8:79:ec:2d:72:71:dd:b8:ca:8f:56:06:77:d0:ff:86:
         23:94:19:9f:34:46:44:06:9f:7c:fd:ca:67:c4:98:c2:86:bb:
         f0:fd:6c:1b:dd:0e:5f:3a:6c:2e:eb:ba:25:56:e7:da:7c:61:
         2b:ca:bd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:31:04 2026 by rpki-client