Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
File:                     EFQ6UZfrJUREfp02s-vxRFLHd-s.mft (raw, json)
Hash identifier:          A6EuGjvtVCmTW1iuRFOW7Gzqhz9/AaSWKgsIO/mngoA=
Subject key identifier:   3C:FE:02:72:56:63:D2:03:40:CF:04:27:71:22:A0:3F:96:33:21:C4
Authority key identifier: 10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB
Certificate issuer:       /CN=10543a5197eb2544447e9d36b3ebf14452c777eb
Certificate serial:       01A181F4F1C1C38FDE6DEB8EAB3D6E079B8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
Manifest number:          1AD0
Signing time:             Wed 28 Oct 2026 10:01:15 +0000
Manifest this update:     Wed 28 Oct 2026 10:01:15 +0000
Manifest next update:     Thu 29 Oct 2026 10:01:15 +0000
Files and hashes:         1: Bh3T0wrbLTJNrgrFw5i_pM5iRtQ.roa (hash: WA266Ck4o7dnRZpdhoDA7vpztTFIYRX6CCiGAbMsH1Q=)
                          2: EFQ6UZfrJUREfp02s-vxRFLHd-s.crl (hash: w26WIf5ijqyHH57xQcRzIn3cToE9UOxCP2JOu9BFjuc=)
                          3: ImpO7LSnSh8T-SAP2SuJNfFSJgE.roa (hash: dSmKjTB9FQy0lASiaAn8YI8srtKhdTfzJGvqm7f0pf4=)
                          4: k0ldwye2atdMGffynKmUvuUXgZU.roa (hash: JrwiTiu9NwMxULNngbCiKVNUte/YzwEe47fYqeH12rc=)
                          5: kWmdNWKi9Z8NkBJjIP6q2qnDIzE.roa (hash: IDZUcKyb2+KauUsdYDvGc0d+DoUPFNW0+bS0KsggXC0=)
                          6: w7i2bwt8IuX7uhkgM7L9p2j_aB8.roa (hash: YPB9yo2HV0ef3PXW3ThNALc491eUz66QPQXwpw48Na0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 10:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:f4:f1:c1:c3:8f:de:6d:eb:8e:ab:3d:6e:07:9b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10543a5197eb2544447e9d36b3ebf14452c777eb
        Validity
            Not Before: Oct 28 10:01:15 2026 GMT
            Not After : Oct 29 10:01:15 2026 GMT
        Subject: CN=3cfe02725663d20340cf04277122a03f963321c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c9:9d:fe:fe:81:d0:a8:77:74:26:36:8b:a5:
                    33:17:58:2d:42:ff:b1:df:25:ad:04:56:98:a3:15:
                    86:0e:ea:f2:09:4d:a4:a2:a4:fd:b2:c6:00:55:ee:
                    dd:51:9e:63:a3:d3:f6:46:47:0b:b3:83:21:1d:f3:
                    ed:bd:90:b6:31:d9:42:8c:65:b8:7c:b5:62:39:10:
                    df:52:3e:d7:36:9c:ba:1d:d5:72:99:1c:17:bd:65:
                    48:e5:60:29:3f:a0:ab:33:f3:bc:3d:ef:24:00:47:
                    3b:cf:a1:56:95:8f:fc:e5:9a:b1:ac:29:86:92:14:
                    1a:70:cb:63:0b:8e:0f:55:f7:03:76:d0:ad:fd:1e:
                    96:da:06:f6:f5:54:29:b9:d7:6c:40:30:dc:c6:7b:
                    c7:d2:a8:45:20:c0:36:ea:7f:c1:6b:6d:84:19:fd:
                    50:04:37:e4:6f:74:27:82:55:9f:dc:f6:37:74:71:
                    a2:8d:4a:fc:b6:ac:53:86:c6:87:d8:67:f3:8b:e3:
                    d9:b9:03:74:96:20:ab:a6:a4:1b:5a:2f:26:f2:a6:
                    b1:35:38:38:5c:91:0b:29:94:36:ee:8c:27:3b:82:
                    36:e0:86:53:4b:b7:48:f2:05:f4:e9:24:1d:59:42:
                    a3:5e:c9:5f:56:da:3f:f8:ec:1c:51:b4:92:11:5a:
                    1a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FE:02:72:56:63:D2:03:40:CF:04:27:71:22:A0:3F:96:33:21:C4
            X509v3 Authority Key Identifier:
                keyid:10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5c:1c:58:5f:57:e0:67:6d:ae:7a:d4:85:18:f4:a7:35:14:
         07:70:d2:c1:44:1d:e5:ec:4a:f3:81:e8:d9:86:a8:48:5d:8c:
         4e:33:64:44:aa:08:a6:00:08:c9:16:95:2e:a8:cd:3f:07:b1:
         ba:5a:bb:21:55:5b:93:b0:fb:4c:89:90:b5:ef:d1:22:bb:28:
         13:94:40:e7:22:05:aa:96:aa:b3:ea:23:34:86:62:9e:df:55:
         ad:61:d3:90:4d:c6:22:8a:c8:3c:2f:ce:f0:b4:e3:2b:d3:b4:
         9f:cc:7f:73:b0:ab:b1:18:58:40:e5:25:3a:92:9d:c0:40:a2:
         1c:f8:b9:da:38:6e:d0:6f:9a:9e:bf:9c:27:9e:5a:9d:3a:25:
         4a:85:f7:7c:a5:27:72:9f:95:f0:2e:90:0f:28:41:3e:dc:61:
         e8:a0:de:9c:53:43:86:9e:8c:6a:6c:0a:f8:0d:3b:14:75:97:
         d7:bc:29:21:89:9a:c0:90:b2:07:f3:2d:57:bb:83:0a:64:a1:
         91:28:77:56:9f:5e:2d:61:f8:68:f6:42:8f:d1:0d:86:75:c7:
         3e:bd:dd:e6:e9:14:7b:4b:0c:bd:cc:36:56:a9:eb:d9:39:af:
         c8:17:52:50:33:c8:68:c3:01:de:42:e1:0f:3e:d4:a4:46:2c:
         76:b6:f3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:47:14 2026 by rpki-client