Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
File:                     EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft (raw, json)
Hash identifier:          5dlAXHiS6V1+Noqbldbqr8Ldphp9dU9e6LotlPK1cgo=
Subject key identifier:   5A:F3:91:D1:DC:7A:56:05:FA:D3:84:34:D3:E6:04:E3:83:94:6C:3C
Authority key identifier: 11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9
Certificate issuer:       /CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
Certificate serial:       01A15E8D37430AC453EF24A5CBDBC9777A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
Manifest number:          1ACA
Signing time:             Wed 21 Oct 2026 13:01:15 +0000
Manifest this update:     Wed 21 Oct 2026 13:01:15 +0000
Manifest next update:     Thu 22 Oct 2026 13:01:15 +0000
Files and hashes:         1: EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl (hash: XZznZ35g/i2ExpNmtycfy3CJhf9G180PjaWB1OlAxxE=)
                          2: UPqZ5GMoyjUOWC-VEQhweIzbWHM.roa (hash: 0Zf0+oi042bc7WXpxDDrx9EBealEJOQT4p1hzEnRzww=)
                          3: j01J8JV2uwPmKdRRQV3n_XVbHx4.roa (hash: wWdUxsFsMiU4pGs7qrmnXU+55ZJGb8/nPLCaqP1qED8=)
                          4: t0YFf86Y2qVN6Oa2QDG27YtEDAc.asa (hash: aJGabBAFgKlQxIAgh/1CnJnEAK37xWpllslzbKJ0Ws4=)
                          5: ylpTnnja-umYtT0xG4eucRtmOO4.roa (hash: fGrm2sVpnOv9GySIUrKEn7PHTRJ1EIP/yM4K2ur9PoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5e:8d:37:43:0a:c4:53:ef:24:a5:cb:db:c9:77:7a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a3864558bf42892bf9e5359bdb13f03b2527a9
        Validity
            Not Before: Oct 21 13:01:15 2026 GMT
            Not After : Oct 22 13:01:15 2026 GMT
        Subject: CN=5af391d1dc7a5605fad38434d3e604e383946c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a5:5a:1f:11:1c:0d:d3:e8:8c:8f:9b:e9:1e:
                    d5:a3:ba:88:32:96:db:64:f8:62:2c:63:d4:85:9e:
                    99:56:b1:c2:74:55:85:d2:83:0f:99:5c:58:82:1a:
                    a1:e8:e9:9c:e6:49:1a:0b:b9:2d:10:09:b6:76:3a:
                    fd:be:8b:7e:3d:f0:30:4a:1f:35:77:a0:e3:77:3c:
                    37:bf:bc:36:df:79:eb:3a:43:b3:23:15:8c:e5:8e:
                    cc:e6:46:42:7a:d8:af:42:60:fe:be:42:84:5d:57:
                    13:40:ca:d4:13:ec:b3:05:92:dd:1d:bb:d7:30:a6:
                    27:fc:bf:e1:33:51:17:3c:fa:cd:f2:f8:06:95:d1:
                    50:05:ec:dc:c8:c5:f1:2a:9f:d0:71:4a:83:0f:1f:
                    a3:a5:b9:97:b8:14:bd:76:fc:01:1b:26:e7:bc:2e:
                    00:d4:62:54:83:30:1f:05:80:eb:e8:73:3e:ad:e9:
                    11:77:ff:29:5e:98:b3:51:d4:c2:99:1b:6d:b2:2c:
                    07:b7:aa:b2:8c:37:ea:76:0e:fc:3f:17:cd:5c:53:
                    ba:77:b4:c3:cb:48:57:bf:34:8f:8c:b0:e6:38:9d:
                    21:28:54:29:72:67:f8:90:1a:c9:89:f2:25:bf:13:
                    fb:fd:e7:19:9a:3c:11:46:be:79:1d:17:81:eb:6a:
                    83:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F3:91:D1:DC:7A:56:05:FA:D3:84:34:D3:E6:04:E3:83:94:6C:3C
            X509v3 Authority Key Identifier:
                keyid:11:A3:86:45:58:BF:42:89:2B:F9:E5:35:9B:DB:13:F0:3B:25:27:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaOGRVi_Qokr-eU1m9sT8DslJ6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/acd34b-357f-4307-83c0-0857e3ec03e0/1/EaOGRVi_Qokr-eU1m9sT8DslJ6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:10:8a:19:35:33:f4:23:d2:ee:c3:44:dd:41:ac:2e:4f:53:
         61:7f:f5:94:e1:33:12:ba:12:6e:81:2f:c6:34:9b:a1:d6:ab:
         db:62:6a:1b:79:94:c2:63:36:5c:52:2b:4a:68:9f:58:b4:3b:
         f3:85:86:b2:83:9a:e0:bf:d4:51:48:6a:18:6e:b9:67:cd:93:
         27:d9:6c:7a:69:8f:a1:4a:7a:4b:50:10:ac:e5:e4:02:a2:99:
         63:0d:43:50:13:2a:ae:67:32:c6:63:83:ad:73:4b:a7:ae:09:
         1f:42:56:b7:f4:0c:e3:18:d0:63:ce:66:f5:8b:a1:bf:0e:67:
         49:7c:07:83:af:ba:59:ba:ec:0a:94:57:fd:23:56:66:55:ad:
         2b:86:e8:b5:6d:43:6d:75:df:e9:01:0e:45:5c:f6:de:04:c8:
         71:89:a9:52:47:cb:c8:4d:cc:11:97:ec:47:af:73:37:a9:93:
         18:7c:12:a8:47:af:ab:7c:ea:a2:97:ef:e8:20:33:41:aa:94:
         39:70:42:7e:a6:4d:36:bc:2b:e6:ea:c5:ab:02:93:a2:35:69:
         34:04:43:3d:43:df:bb:e4:18:f5:98:6c:8b:3a:ed:fe:d1:bf:
         a4:aa:4f:2a:44:23:ba:78:3f:d2:ab:83:f2:84:99:3d:4e:f8:
         47:02:9f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:51:14 2026 by rpki-client