Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
File:                     mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft (raw, json)
Hash identifier:          OtYpJ2kar07ho4Vn4yvcb5Q/XjmRe502mec2wiQNNYI=
Subject key identifier:   76:D6:2F:66:3F:64:EC:09:2B:66:18:39:93:F4:7E:3E:E6:57:F6:19
Authority key identifier: 98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
Certificate issuer:       /CN=98466aec752928b6d4865b99e8608c4aec4b78ac
Certificate serial:       01A16E36D0792951F8FC4E0C1D2CCD3C2F70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
Manifest number:          049F
Signing time:             Sat 24 Oct 2026 14:00:48 +0000
Manifest this update:     Sat 24 Oct 2026 14:00:48 +0000
Manifest next update:     Sun 25 Oct 2026 14:00:48 +0000
Files and hashes:         1: mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl (hash: nHwflHv9+iuWGJ5lipyJHMvfy1nLiTjAIs2XtkZNr7M=)
                          2: nXPV6vL9Myf87iwdt8oMBUpIgzI.asa (hash: jq25H7X+5Q2wBhKdDZk+7MpbH+S6ejGtNRjeRxPO9HA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6e:36:d0:79:29:51:f8:fc:4e:0c:1d:2c:cd:3c:2f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98466aec752928b6d4865b99e8608c4aec4b78ac
        Validity
            Not Before: Oct 24 14:00:48 2026 GMT
            Not After : Oct 25 14:00:48 2026 GMT
        Subject: CN=76d62f663f64ec092b66183993f47e3ee657f619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:48:c5:c1:e5:71:d8:88:de:b6:33:1f:66:2b:
                    32:2f:c4:48:61:23:3b:3b:fa:e2:a9:fc:7d:e4:7e:
                    15:5d:4d:f5:61:a9:a6:07:6d:39:ba:23:c8:e9:3b:
                    51:dd:d6:ca:d0:e8:8a:2a:39:cb:34:b9:45:58:90:
                    19:a8:52:14:5a:c1:dd:57:e8:00:3c:e1:15:d3:dd:
                    95:d5:85:f6:09:0f:c2:89:5e:b6:57:36:8c:5e:4c:
                    8c:23:39:35:a7:d0:3b:00:60:31:90:69:63:dc:da:
                    bc:ee:13:7b:f7:42:59:9d:a7:50:0b:16:c3:0c:bd:
                    6e:19:68:d0:c4:ae:b1:86:d5:54:d7:41:fc:1f:7a:
                    e3:91:40:ae:76:c9:14:ae:c3:a9:63:2e:6f:fb:67:
                    70:6a:c7:50:65:68:15:21:26:8e:48:60:7b:36:1d:
                    df:a0:43:a1:85:f2:77:7d:46:4a:10:35:11:7d:aa:
                    b1:fd:48:c4:60:09:8a:cc:7e:28:51:77:91:9f:6a:
                    f1:92:fb:1c:23:19:4d:a4:bc:9e:8e:08:89:a9:1b:
                    27:34:17:c6:08:8e:13:d2:dc:e0:84:79:ac:79:d1:
                    23:1c:9f:a4:48:10:a4:e3:1f:92:f2:80:11:42:f7:
                    5d:22:c8:46:92:d0:b9:65:fb:8d:c2:19:78:b2:fb:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D6:2F:66:3F:64:EC:09:2B:66:18:39:93:F4:7E:3E:E6:57:F6:19
            X509v3 Authority Key Identifier:
                keyid:98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:02:ea:76:64:65:44:72:d0:88:80:2e:f9:10:05:eb:55:c0:
         86:3d:a4:19:56:27:2a:24:76:41:c3:47:0c:de:57:0f:7a:76:
         22:43:a8:15:fc:df:7c:fc:90:9e:a7:90:56:a9:17:f7:cc:0e:
         a4:2b:45:c5:6e:09:1b:43:77:0f:bc:73:c5:83:ca:92:fd:89:
         dc:c5:6c:e1:4b:b6:71:cf:b1:2b:cd:35:dc:05:16:bd:7a:5b:
         c6:64:e6:6d:d8:71:9f:d5:6f:5f:78:73:b5:69:dc:74:0e:f1:
         2c:71:76:50:95:4c:25:14:2e:5f:bc:6e:f6:07:46:d6:41:76:
         7f:e1:6e:7d:5c:b7:26:9f:89:f3:51:98:03:ee:32:18:21:54:
         57:79:1f:b8:bb:94:fb:cd:5b:77:73:a0:38:78:5e:6d:81:2b:
         1c:81:af:40:b4:b8:97:6f:77:89:13:60:11:75:be:4c:15:86:
         57:17:6e:e0:fb:55:9d:13:0f:bf:5a:b6:b2:a8:09:36:db:ab:
         5e:35:13:3e:46:b0:97:96:47:37:ba:f9:c5:55:ad:26:47:fa:
         f2:04:13:a5:6d:fb:99:21:1d:24:a3:40:3a:44:b9:2c:dd:c4:
         ad:dd:4f:76:02:43:de:e1:64:3c:53:db:68:7f:76:99:92:f5:
         18:57:f4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 00:34:55 2026 by rpki-client