Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/452089-54df-4dba-a3c2-86ed71b03cf8/1/EkTDoNBBKujnAR6ftnhqwtu91Aw.mft
File:                     EkTDoNBBKujnAR6ftnhqwtu91Aw.mft (raw, json)
Hash identifier:          6ph+IJ9Bum/0TINcYSas/dDO0w7KyP/RFP8ejIUn7yg=
Subject key identifier:   5C:AC:82:2E:8B:99:87:6E:04:A4:C5:85:64:D3:CB:4E:33:10:27:6B
Authority key identifier: 12:44:C3:A0:D0:41:2A:E8:E7:01:1E:9F:B6:78:6A:C2:DB:BD:D4:0C
Certificate issuer:       /CN=1244c3a0d0412ae8e7011e9fb6786ac2dbbdd40c
Certificate serial:       01A18AC0D37D866AEC9DB0A75DF55AE97F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EkTDoNBBKujnAR6ftnhqwtu91Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/452089-54df-4dba-a3c2-86ed71b03cf8/1/EkTDoNBBKujnAR6ftnhqwtu91Aw.mft
Manifest number:          58
Signing time:             Fri 30 Oct 2026 03:00:55 +0000
Manifest this update:     Fri 30 Oct 2026 03:00:55 +0000
Manifest next update:     Sat 31 Oct 2026 03:00:55 +0000
Files and hashes:         1: EkTDoNBBKujnAR6ftnhqwtu91Aw.crl (hash: eCQ17arypFU4DRYTk3JI+mgGVflygrq2qHYxI3Ig0MI=)
                          2: zY_5R20fOJyxHBcEry0_CGd42MY.roa (hash: f3Kobf2iP6UPTb/sj6dJpEYfFzw7VJKrtqwrWBxLN/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/452089-54df-4dba-a3c2-86ed71b03cf8/1/EkTDoNBBKujnAR6ftnhqwtu91Aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/452089-54df-4dba-a3c2-86ed71b03cf8/1/EkTDoNBBKujnAR6ftnhqwtu91Aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EkTDoNBBKujnAR6ftnhqwtu91Aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 03:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8a:c0:d3:7d:86:6a:ec:9d:b0:a7:5d:f5:5a:e9:7f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1244c3a0d0412ae8e7011e9fb6786ac2dbbdd40c
        Validity
            Not Before: Oct 30 03:00:55 2026 GMT
            Not After : Oct 31 03:00:55 2026 GMT
        Subject: CN=5cac822e8b99876e04a4c58564d3cb4e3310276b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b2:cb:71:ad:f0:98:4f:83:d6:f0:52:1b:59:
                    1e:bf:60:69:80:83:08:df:68:69:79:8b:c0:00:31:
                    a2:15:a8:81:06:9d:37:33:f0:e8:69:f0:76:5b:02:
                    c0:e9:ea:ad:7c:cf:1d:59:fd:79:ca:dc:90:a7:83:
                    7a:8b:4e:4a:72:e6:28:14:13:6a:63:cf:52:35:1f:
                    05:e2:db:8d:67:13:0c:5b:66:f9:4b:c3:9e:11:5e:
                    1d:77:cd:0d:67:f3:52:3f:03:7d:a4:bf:48:1a:38:
                    54:d9:eb:e0:65:9e:2d:27:a0:a4:0e:be:24:f6:68:
                    82:4a:41:46:65:cb:10:41:4e:57:99:ea:00:ee:6d:
                    8a:cd:8d:7b:e4:3b:bc:1f:f2:af:db:6e:b3:3a:d2:
                    c1:f3:8c:9c:96:2e:b4:74:31:7f:bf:77:7b:88:e2:
                    9f:91:d3:2e:5b:81:7e:ea:44:26:7a:9f:f3:0b:7f:
                    71:63:26:b3:cb:c6:42:a8:bb:5d:0a:9e:4f:63:15:
                    44:93:d3:2c:27:f6:07:85:7e:97:84:53:65:52:ec:
                    68:f2:a1:bf:44:a4:f5:f4:fa:fd:fd:bf:55:64:af:
                    34:98:ff:33:d5:b9:d7:46:ce:8c:ef:4e:c2:0b:63:
                    b2:ea:03:59:9d:7e:69:9c:a9:0e:8f:2e:b9:12:7f:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AC:82:2E:8B:99:87:6E:04:A4:C5:85:64:D3:CB:4E:33:10:27:6B
            X509v3 Authority Key Identifier:
                keyid:12:44:C3:A0:D0:41:2A:E8:E7:01:1E:9F:B6:78:6A:C2:DB:BD:D4:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkTDoNBBKujnAR6ftnhqwtu91Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/452089-54df-4dba-a3c2-86ed71b03cf8/1/EkTDoNBBKujnAR6ftnhqwtu91Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/452089-54df-4dba-a3c2-86ed71b03cf8/1/EkTDoNBBKujnAR6ftnhqwtu91Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:07:26:73:2d:29:4c:71:6d:61:cd:c7:fb:6e:a8:72:1c:f4:
         a9:0d:bb:5a:68:48:d6:09:f6:38:29:aa:d4:70:71:ec:50:0a:
         fa:a0:bd:a1:c1:27:e2:d9:73:12:43:98:5f:af:f9:63:f5:13:
         b6:4f:ca:f7:f9:c2:8e:34:5c:dc:1b:f8:34:4f:48:f2:dc:af:
         54:fa:bb:cd:ba:c5:66:65:67:00:31:86:f9:d4:33:5e:31:dd:
         6d:38:44:54:6f:9e:1f:da:10:24:b8:2e:79:dc:5f:d5:b2:15:
         8e:57:fc:2d:11:70:24:05:e7:ce:53:de:4b:f8:b1:3c:0e:53:
         9b:84:6c:b4:a5:42:19:48:9b:3d:ee:3d:89:81:84:e4:2d:e0:
         ae:46:c3:bb:63:25:5b:dd:ad:71:d4:a9:7e:37:df:5d:69:90:
         23:54:f5:f5:67:f6:e9:a5:fe:27:fd:45:47:8f:89:00:66:3a:
         1f:65:7b:5c:35:a7:c0:a4:7d:9e:e7:3c:79:a3:11:2e:12:36:
         96:f8:7d:e4:00:f0:33:f5:76:de:3e:30:1a:dc:11:16:29:b1:
         29:ad:05:bd:22:2d:4d:ca:0f:15:c4:b1:00:62:41:c3:a6:e9:
         83:49:af:8a:f3:50:5e:3c:85:25:42:af:ea:02:89:b7:8c:d3:
         4c:f4:51:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:08:06 2026 by rpki-client