Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft
File:                     EynNPuL-EmqCyipYyH7Vg4_ir1c.mft (raw, json)
Hash identifier:          JVgevmtEgCD9gK2zNpj1WNHsw5SKFIp4LlInMb3DF9s=
Subject key identifier:   FB:44:D2:79:35:16:1A:DC:8D:EB:A3:DF:73:51:35:6C:BF:7C:27:30
Authority key identifier: 13:29:CD:3E:E2:FE:12:6A:82:CA:2A:58:C8:7E:D5:83:8F:E2:AF:57
Certificate issuer:       /CN=1329cd3ee2fe126a82ca2a58c87ed5838fe2af57
Certificate serial:       01A17C97BDC2FEFDEF261776BB114665E914
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft
Manifest number:          16AB
Signing time:             Tue 27 Oct 2026 09:01:21 +0000
Manifest this update:     Tue 27 Oct 2026 09:01:21 +0000
Manifest next update:     Wed 28 Oct 2026 09:01:21 +0000
Files and hashes:         1: EynNPuL-EmqCyipYyH7Vg4_ir1c.crl (hash: PSbCcyiGLC8+sqFkvt8aJdXiWXHI5tRFs5rYphpU4eA=)
                          2: GD5zGeK82JMRLCdDxAWJu0129c0.roa (hash: UJN0UN2eYXvmzjBE0pThRBHPym/0Sf7LLjajUxCXmBA=)
                          3: hWHZBj8opxLji1dLlE3VmNv5Hls.roa (hash: soPJ0c1Js9F+eNHpUDKlZXFQ1H4GaNDtLLKDaTHKOIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:97:bd:c2:fe:fd:ef:26:17:76:bb:11:46:65:e9:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1329cd3ee2fe126a82ca2a58c87ed5838fe2af57
        Validity
            Not Before: Oct 27 09:01:21 2026 GMT
            Not After : Oct 28 09:01:21 2026 GMT
        Subject: CN=fb44d27935161adc8deba3df7351356cbf7c2730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2c:4b:9e:60:92:d7:35:2e:28:05:c3:cf:bf:
                    4b:8e:62:d8:6e:5f:94:b9:c7:df:70:e1:9b:f2:80:
                    ee:54:ed:29:c4:d7:6e:96:18:c8:f3:10:ba:02:94:
                    5f:de:22:87:0b:46:8a:e1:d8:a4:4d:81:e6:6f:02:
                    67:23:32:ef:af:e6:3a:bd:f4:4a:cc:dd:65:a0:02:
                    f0:f3:58:30:a5:08:53:55:76:6d:79:c0:58:b3:5d:
                    c1:1d:ad:f4:93:43:cd:9e:9f:77:ea:9f:d1:83:bb:
                    1b:04:6a:14:1d:bf:77:b1:49:38:50:bb:cf:c5:5c:
                    94:12:81:77:5f:67:29:73:bc:3f:70:b0:38:e6:d2:
                    9a:66:f5:05:c7:84:dd:8f:ab:25:10:86:88:78:5e:
                    9a:b1:0e:0f:c8:75:07:c1:10:8c:9f:f4:23:ec:7d:
                    af:2b:d7:ef:34:ba:a4:82:71:aa:c3:cf:18:7f:52:
                    78:8d:d1:84:53:b2:f1:a2:ce:00:f1:8b:64:6b:74:
                    d2:b8:b7:df:e2:3b:ed:2d:9c:00:f5:c0:09:6f:7a:
                    c4:f2:d1:06:53:d2:04:0d:e5:95:d8:a6:82:a8:bb:
                    23:f7:f4:41:1f:a3:2c:17:6e:ed:1a:d7:3c:09:cf:
                    86:8c:32:80:89:43:53:50:c8:4e:ac:7a:88:1c:6d:
                    b7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:44:D2:79:35:16:1A:DC:8D:EB:A3:DF:73:51:35:6C:BF:7C:27:30
            X509v3 Authority Key Identifier:
                keyid:13:29:CD:3E:E2:FE:12:6A:82:CA:2A:58:C8:7E:D5:83:8F:E2:AF:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:94:e6:f8:7b:11:44:86:4c:07:50:9d:54:3b:c3:ce:32:37:
         79:9c:86:90:f0:91:d7:ba:02:45:cb:bb:80:10:25:6f:c5:56:
         49:62:74:c6:f6:ea:31:d7:8c:91:84:5f:f6:ac:d2:69:1b:69:
         94:d5:b4:19:fa:c1:3c:a8:ad:f8:48:cf:7b:af:0d:77:b0:35:
         ec:2a:99:42:5a:7f:e1:6e:bd:90:56:c7:48:50:2f:9b:f8:64:
         33:30:99:01:56:ad:56:d6:b3:5b:9a:17:d4:47:c2:c1:2c:e7:
         d9:ec:d0:53:73:42:a7:78:d0:a7:18:8f:4a:93:43:ac:94:42:
         f7:a2:a9:c4:be:94:ad:79:17:a7:6f:af:9c:4b:1a:41:7b:2d:
         35:a5:6a:5e:01:b8:89:6e:ff:b3:23:a9:e5:6c:e8:96:f0:a5:
         71:2f:99:d5:41:56:46:71:97:a9:d4:b5:9d:0a:40:7c:4d:07:
         5c:d9:94:dc:d0:98:71:f2:09:03:25:a4:44:b9:ee:be:c5:e8:
         fe:48:55:d9:d6:1b:29:0f:62:4d:c8:05:94:6c:f3:05:59:33:
         b2:8e:9e:9a:bd:0c:c9:ce:eb:4e:cd:2f:a8:e6:ea:d2:96:29:
         af:d5:b4:ae:e2:f0:a1:2e:a5:67:d1:c3:92:b3:5e:cb:c3:1e:
         d2:da:42:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:48:43 2026 by rpki-client