Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
File:                     EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json)
Hash identifier:          Es0PA0mIQaN4TRT2hA/BO99YZMN/iOTmOTW67bbUbJg=
Subject key identifier:   92:2C:41:B8:48:0E:21:B0:C3:72:7F:DB:F0:38:E7:BF:3C:51:4D:42
Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
Certificate issuer:       /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Certificate serial:       01A122787824D7D69B462DF8A06239F357B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
Manifest number:          0B98
Signing time:             Fri 09 Oct 2026 21:01:22 +0000
Manifest this update:     Fri 09 Oct 2026 21:01:22 +0000
Manifest next update:     Sat 10 Oct 2026 21:01:22 +0000
Files and hashes:         1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: /XZchENmDxd6yEdYdU21lfqWH/F6kuBT8mDhpBLL+L8=)
                          2: oaAkI4u-q1sNX4XewPVfZpBZbiQ.roa (hash: CN/AvchRlL8gZqtJDbJknMgG+JNTjA+0pvGllBDxlpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:22:78:78:24:d7:d6:9b:46:2d:f8:a0:62:39:f3:57:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
        Validity
            Not Before: Oct  9 21:01:22 2026 GMT
            Not After : Oct 10 21:01:22 2026 GMT
        Subject: CN=922c41b8480e21b0c3727fdbf038e7bf3c514d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8a:af:86:39:3d:ba:27:b0:50:40:67:3c:de:
                    8e:7a:e3:0b:90:af:78:97:27:9e:81:a8:6e:46:05:
                    09:9b:81:a7:f5:8a:55:ff:4d:c9:84:aa:29:aa:ef:
                    86:ac:ef:cb:ef:30:ca:68:89:e2:8b:45:ec:62:32:
                    d2:96:0c:4c:0d:34:a7:4f:92:76:e4:9b:da:64:0d:
                    ec:04:0a:9c:1d:ca:e7:c4:65:ce:fa:41:1b:a8:f9:
                    90:fd:38:0f:13:8e:b8:cf:5c:e0:ed:5b:95:f9:23:
                    6f:88:0d:f7:b5:f5:1e:30:57:ea:45:24:9b:e5:ec:
                    8d:fe:0e:5e:81:ef:c7:7d:ed:89:f0:f7:0b:d4:6b:
                    ea:91:ae:27:61:3e:5e:a6:f5:e5:0e:da:92:1c:f9:
                    4d:03:d5:b3:31:c4:fb:26:cc:8b:04:74:c8:7d:88:
                    80:18:26:20:49:4e:e4:f1:aa:08:9f:de:b2:48:7b:
                    7f:c4:d5:d4:f5:51:14:8c:d6:bd:26:80:0e:bc:cf:
                    18:21:01:f9:95:a1:18:c3:13:41:23:84:21:95:ff:
                    ed:56:9a:53:41:06:59:f5:ea:65:18:67:17:97:55:
                    8a:d5:3f:c4:55:8a:46:3c:7e:6f:ce:ca:73:22:39:
                    65:e0:19:82:59:3d:2e:c0:13:72:61:7b:8c:62:ba:
                    97:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2C:41:B8:48:0E:21:B0:C3:72:7F:DB:F0:38:E7:BF:3C:51:4D:42
            X509v3 Authority Key Identifier:
                keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a7:77:4e:22:47:ef:cf:e0:89:21:a6:e5:a8:93:89:d6:62:
         47:c3:a6:8b:f2:37:ff:79:03:e7:60:b2:e2:94:b8:8b:07:bc:
         1f:40:71:11:26:0b:09:93:e6:56:41:c1:c5:c7:3f:91:dd:17:
         e9:4c:9f:36:d4:db:5a:0c:7a:0f:05:da:9d:e8:e7:5e:92:0a:
         7a:cc:d3:df:ae:5f:51:31:de:98:25:11:31:d8:81:3c:f4:5b:
         e2:df:a8:53:a5:ed:88:6e:40:a1:da:a5:88:92:2b:99:16:e8:
         b2:d0:3f:c1:42:28:79:22:4f:0d:92:c5:4b:3d:4a:6b:de:5e:
         78:cc:e4:3b:fe:e7:33:77:bc:80:d6:eb:22:ad:12:1d:d7:b5:
         3e:3d:23:a1:6a:8c:e5:8c:d7:03:4c:23:42:5d:28:2a:c6:8e:
         89:c9:5b:cf:bb:22:a5:91:8b:63:42:a9:de:c4:6c:ed:ac:bf:
         ef:ec:4d:45:c3:20:07:7f:0a:be:8c:fc:ef:e9:0d:36:58:e1:
         67:92:0d:66:17:f1:a2:af:4b:a7:41:3d:60:e4:6c:b6:0a:69:
         64:5d:ec:3a:79:73:94:ac:84:26:63:fe:79:14:d5:26:03:2b:
         1f:aa:e2:8d:44:1f:c0:09:78:bf:9e:d2:5e:7e:ce:f2:a0:57:
         ad:ad:b1:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEieHgk19abRi34oGI581e5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTMzYTY1MjNlMmVkMGEwYzlhMzZlYThhN2M2ZjBlNzJh
NWRkNjQwHhcNMjYxMDA5MjEwMTIyWhcNMjYxMDEwMjEwMTIyWjAzMTEwLwYDVQQD
Eyg5MjJjNDFiODQ4MGUyMWIwYzM3MjdmZGJmMDM4ZTdiZjNjNTE0ZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYqvhjk9uiewUEBnPN6OeuMLkK94
lyeegahuRgUJm4Gn9YpV/03JhKopqu+GrO/L7zDKaInii0XsYjLSlgxMDTSnT5J2
5JvaZA3sBAqcHcrnxGXO+kEbqPmQ/TgPE464z1zg7VuV+SNviA33tfUeMFfqRSSb
5eyN/g5ege/Hfe2J8PcL1Gvqka4nYT5epvXlDtqSHPlNA9WzMcT7JsyLBHTIfYiA
GCYgSU7k8aoIn96ySHt/xNXU9VEUjNa9JoAOvM8YIQH5laEYwxNBI4Qhlf/tVppT
QQZZ9eplGGcXl1WK1T/EVYpGPH5vzspzIjll4BmCWT0uwBNyYXuMYrqX/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIsQbhIDiGww3J/2/A45788UU1CMB8GA1UdIwQY
MBaAFBITOmUj4u0KDJo26op8bw5ypd1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2Et
ODI0NzI5YWI0YjlhLzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85MzRlYzMtYjc2YS00MGQwLThhM2EtODI0NzI5YWI0Yjlh
LzEvRWhNNlpTUGk3UW9NbWpicWlueHZEbktsM1dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKd3TiJH
78/giSGm5aiTidZiR8Omi/I3/3kD52Cy4pS4iwe8H0BxESYLCZPmVkHBxcc/kd0X
6UyfNtTbWgx6DwXanejnXpIKeszT365fUTHemCURMdiBPPRb4t+oU6XtiG5Aodql
iJIrmRbostA/wUIoeSJPDZLFSz1Ka95eeMzkO/7nM3e8gNbrIq0SHde1Pj0joWqM
5YzXA0wjQl0oKsaOiclbz7sipZGLY0Kp3sRs7ay/7+xNRcMgB38Kvoz87+kNNljh
Z5INZhfxoq9Lp0E9YORstgppZF3sOnlzlKyEJmP+eRTVJgMrH6rijUQfwAl4v57S
Xn7O8qBXra2xrQ==
-----END CERTIFICATE-----
Generated at Sat Oct 10 00:38:37 2026 by rpki-client