Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
File:                     E-Ga72g5aeuYLy3bIZtGUq8muW0.mft (raw, json)
Hash identifier:          BurGjDTxGxMnMIYOyHQzwyOllBeDCxMJZTexNiEf85w=
Subject key identifier:   9E:A1:BB:26:94:D6:40:43:D7:D2:68:AB:00:AD:D8:20:C9:79:FB:27
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Certificate issuer:       /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial:       01A16269AE0AB523DE879A7E1187880FCF49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
Manifest number:          1ABB
Signing time:             Thu 22 Oct 2026 07:00:55 +0000
Manifest this update:     Thu 22 Oct 2026 07:00:55 +0000
Manifest next update:     Fri 23 Oct 2026 07:00:55 +0000
Files and hashes:         1: E-Ga72g5aeuYLy3bIZtGUq8muW0.crl (hash: EIOhn3wtEaxbMEngRinHP0asf9MCzzXigL6cA3fmozA=)
                          2: bnyewlBl2rNg_sE2Xed_Qzb7YTk.roa (hash: rQigy+jl1LrGUPH3pHiRChWTBL0WnXymta07qKb9Rbw=)
                          3: dkLJNc8YE1qupqt8vejn4yN_8pU.roa (hash: 9F30pB6QAME+aQUtJBPApccmf32qIQY7Y6P8efT0WEs=)
                          4: fvrmT3BDya5vUxums74XuzYqty0.roa (hash: q+hIuLuMabVUkBWiWW3pA8MFsL2LuFbfABq1AZhRA2Q=)
                          5: j4On1jEgDqGHCrQyanmlHTLIPfU.roa (hash: FBZAhcfJ9YrnvMKAbA0ULbxZIF42C1VrsQa2aWPitG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:62:69:ae:0a:b5:23:de:87:9a:7e:11:87:88:0f:cf:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
        Validity
            Not Before: Oct 22 07:00:55 2026 GMT
            Not After : Oct 23 07:00:55 2026 GMT
        Subject: CN=9ea1bb2694d64043d7d268ab00add820c979fb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b2:ac:5b:fe:55:e2:9e:97:50:93:dd:1c:cc:
                    4c:4b:c4:c7:5a:69:85:bb:a9:24:cb:1f:7f:de:b6:
                    c8:e4:a2:a4:6e:ff:d1:fd:b5:95:72:21:81:af:91:
                    2b:33:a5:01:02:42:26:6b:42:e8:55:0b:2c:44:0b:
                    48:df:99:62:d1:eb:cb:a1:9a:b3:f1:44:8c:e6:8c:
                    ed:4a:28:37:e0:7f:d7:f0:e5:f8:0f:45:07:05:b0:
                    bb:69:75:5b:19:6a:92:57:a3:45:0b:9f:eb:20:24:
                    b1:bd:37:07:36:31:3d:3b:d1:18:fd:68:95:ff:b1:
                    d8:ff:d2:00:a5:73:b3:dc:8f:5f:d3:e3:ce:f2:0b:
                    7c:0d:10:ae:be:d5:78:31:f8:a1:56:cd:81:fb:54:
                    ea:01:d2:ac:c4:d1:f7:2f:b5:e4:58:f7:92:b1:6f:
                    0b:5a:a8:41:de:e4:88:6e:2d:96:40:27:a2:b4:14:
                    75:9d:c8:65:f0:e0:a2:38:38:d3:14:47:dc:2f:6a:
                    05:67:c1:d7:ed:f9:f8:4e:7e:ed:15:5d:3a:7a:74:
                    5b:32:9e:84:1a:6c:56:2b:fb:a2:b8:63:64:75:72:
                    89:c9:6e:54:f7:b6:8d:1d:1b:9b:70:5b:2e:53:cc:
                    8d:c4:65:8e:08:19:32:07:3e:67:0d:72:90:7e:69:
                    61:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A1:BB:26:94:D6:40:43:D7:D2:68:AB:00:AD:D8:20:C9:79:FB:27
            X509v3 Authority Key Identifier:
                keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:04:a1:53:0d:c0:fb:d4:6a:34:ff:77:f4:29:bf:0f:4f:e3:
         c1:cd:51:d1:e6:c3:32:90:52:89:8a:f6:ac:23:ca:9f:15:21:
         b3:ed:04:c2:c9:f5:15:7a:e4:00:2b:59:e1:cb:13:57:43:2f:
         21:ad:82:74:69:0d:10:cf:df:51:d7:5e:3f:dd:cd:0e:cd:56:
         80:16:5b:94:88:81:71:ee:8f:02:22:43:46:75:08:be:ab:35:
         06:33:57:e4:30:93:3f:57:c7:c1:4b:d3:d7:5e:3b:95:2c:fd:
         90:fb:39:d1:3d:07:cb:60:5d:52:d5:24:d8:73:ae:23:b0:b5:
         d5:71:c5:81:8f:df:1f:c9:10:b6:ce:b7:d6:cc:54:db:15:9d:
         29:93:57:09:05:b9:9c:d2:f8:25:9c:61:fc:b9:ba:24:11:40:
         af:09:72:c8:11:d6:16:94:1d:85:69:ee:df:2c:fa:78:02:4c:
         ee:c9:af:de:94:80:32:a0:1f:36:fe:b8:44:ec:54:60:8d:58:
         de:9a:0a:22:12:a2:8a:f8:31:11:2d:ff:26:78:f3:67:bb:81:
         09:70:41:51:e4:cd:57:dd:0c:7e:f4:07:45:32:1f:4b:ee:ef:
         7d:e5:d9:10:9a:94:80:49:73:81:e6:1e:a4:86:f0:c6:a9:b7:
         9d:0e:4c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:40:14 2026 by rpki-client