Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
File:                     EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft (raw, json)
Hash identifier:          nixCSdsst+BzTA1aq5tJqrcX3OPgmg2ka4yL2jWpF6A=
Subject key identifier:   9D:B0:28:9A:FD:C4:D5:DA:A5:0F:7E:43:15:47:3F:16:91:85:C0:B7
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Certificate issuer:       /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial:       01A152F6D3F4B58DA610D4B3502F588523F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
Manifest number:          0496
Signing time:             Mon 19 Oct 2026 07:01:10 +0000
Manifest this update:     Mon 19 Oct 2026 07:01:10 +0000
Manifest next update:     Tue 20 Oct 2026 07:01:10 +0000
Files and hashes:         1: 6NomImNZWaHi6JxMplj9lMIruGU.roa (hash: 66ybrBR0IXxLeTkfJbiHhp6BZdj8GOj7WY0PcGUFYik=)
                          2: AW17FInZXbbfzlPfQfag3e5H2tA.roa (hash: dmQitLz8NUYQglDkSo+N/IQ9Ntp7x8tsHi+hjRpZyNs=)
                          3: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl (hash: VsqRxNrrNYx5qaGEffxELU/53vPrl0JYsZcQAzkINtU=)
                          4: G_a_D4w6XID3HHcAkDZ33ncczUI.roa (hash: TJwpjG7RY739+T5MlCso7ay89Sk16BHwPqa3u2ERz/0=)
                          5: N6YysdN9coyWq8a_olGcakNcTTY.roa (hash: XflvML4jU8nWdsR81GpugPsjYujETxYvRfm/otH2XUQ=)
                          6: U5qz6xEJwpl9W5yFofcjv_QYJdg.roa (hash: SFU07nCtw7gmZMA4jhGAvEN7wK5wQZgNbDVm6oGSUf8=)
                          7: xdqZMIH3R0kq1OUzrCJ7_j5BrPk.roa (hash: JI0nZYfinXynWc9Z+bVX76ENbeGi+A5V4Zl9wHWDiy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 07:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:52:f6:d3:f4:b5:8d:a6:10:d4:b3:50:2f:58:85:23:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
        Validity
            Not Before: Oct 19 07:01:10 2026 GMT
            Not After : Oct 20 07:01:10 2026 GMT
        Subject: CN=9db0289afdc4d5daa50f7e4315473f169185c0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5b:16:41:63:4a:37:72:3d:ad:a9:9d:13:e2:
                    6b:28:0e:99:f1:86:82:b6:71:80:01:af:33:2a:42:
                    8d:b9:1a:29:70:4b:8a:7e:7f:73:8c:a8:7c:02:02:
                    f9:d9:b9:2d:e4:87:b6:dc:c9:c7:53:22:2a:f0:d7:
                    c2:db:76:44:e9:49:b2:14:25:df:59:7d:5f:09:08:
                    a0:33:9c:e5:94:15:28:0d:f4:d1:22:ac:01:0f:a0:
                    ce:dc:27:a9:44:06:a2:d7:de:7b:e8:4d:b4:ae:af:
                    22:1d:f4:3a:8f:67:97:6a:ea:0b:19:d6:34:a0:d3:
                    e0:4d:e3:0d:29:fc:99:c4:a4:ee:56:31:1b:2b:c5:
                    5a:d7:49:9f:cd:c8:aa:2f:c0:85:f3:8b:83:87:6e:
                    29:6a:8b:cc:10:48:6a:f0:6e:be:55:87:a8:f9:ed:
                    79:b8:01:09:b3:3c:bb:a3:ed:41:46:b4:6f:6c:82:
                    5d:28:a5:0b:e2:ce:95:58:e3:26:88:42:6f:4f:f7:
                    f5:03:bd:fd:6a:a5:08:0e:7e:8d:95:cf:51:e5:a2:
                    a9:26:d2:3a:c1:22:09:6c:29:88:b2:b6:a1:ce:a6:
                    2b:3c:59:9c:fa:f6:92:73:51:77:87:7c:7b:a4:d8:
                    68:eb:0c:ce:09:56:e9:e6:0c:32:fc:71:4d:96:87:
                    a5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B0:28:9A:FD:C4:D5:DA:A5:0F:7E:43:15:47:3F:16:91:85:C0:B7
            X509v3 Authority Key Identifier:
                keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ba:a8:af:c5:2b:4b:36:5e:3b:da:2a:dd:d2:c5:dc:16:8e:
         5e:5f:b2:18:cc:96:81:95:c5:c0:74:c8:5e:3b:c2:21:fa:36:
         55:14:ef:e7:35:db:51:04:ec:6d:00:7d:25:a3:4d:0e:fc:bc:
         42:bf:77:2d:6c:f7:e8:17:58:c7:48:91:25:63:33:49:e7:8b:
         18:a2:4c:c7:90:64:b4:ef:14:43:ed:c2:ab:80:9d:50:59:da:
         a0:92:75:a9:9c:d8:d3:4b:86:ce:3a:84:bc:87:bd:12:7d:05:
         54:5d:e3:94:2d:0e:c7:c2:06:d5:7d:e5:d4:30:68:13:ad:9b:
         d5:c2:ba:b7:c7:1c:6f:0b:26:a8:1e:47:d5:dc:2d:fc:c9:48:
         0c:81:d1:2c:a6:9e:0b:90:b6:6a:41:d9:27:a4:68:40:6f:c6:
         a1:7a:d1:fd:13:3c:1c:6a:1f:88:86:fc:92:78:c1:29:68:86:
         3b:a0:35:68:b4:e5:73:fb:50:93:a8:95:24:73:34:a9:d2:7b:
         69:2e:9a:6b:c9:04:04:0c:c2:cb:b9:cf:30:93:89:47:63:0e:
         55:cd:4c:c8:b3:31:42:6a:a2:a1:16:72:20:2b:92:0a:99:24:
         92:90:b2:51:0f:c6:ed:19:63:84:df:4b:de:88:86:12:12:4f:
         cd:46:77:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:54:36 2026 by rpki-client