Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
File:                     EdJ3EZBuQdC_164BvAo40-eeJgE.mft (raw, json)
Hash identifier:          tdfwk2SmkbyxgJhWsThJ2cEBnYDkuWT5q0PYkSiRFXU=
Subject key identifier:   85:71:03:C7:F2:65:4A:13:90:18:51:AC:94:58:F5:F3:58:37:D6:BC
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Certificate issuer:       /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial:       01A08D56B5441BD623103F5A7DABE5D8C4E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
Manifest number:          1A4C
Signing time:             Thu 10 Sep 2026 22:01:04 +0000
Manifest this update:     Thu 10 Sep 2026 22:01:04 +0000
Manifest next update:     Fri 11 Sep 2026 22:01:04 +0000
Files and hashes:         1: EdJ3EZBuQdC_164BvAo40-eeJgE.crl (hash: RECrPuXryTW69DpbXOnKqvJLiz772pOMki3Np0xULu4=)
                          2: gXTGqs4LKJz0Vrtvliei4acD1Ew.roa (hash: p/wSJPqOIsg3ZzxrAAFzNgFBQSzliYRj4Gqn0szjKSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:56:b5:44:1b:d6:23:10:3f:5a:7d:ab:e5:d8:c4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
        Validity
            Not Before: Sep 10 22:01:04 2026 GMT
            Not After : Sep 11 22:01:04 2026 GMT
        Subject: CN=857103c7f2654a13901851ac9458f5f35837d6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:13:06:2c:00:5e:5c:32:4d:b6:b4:c9:d8:d5:
                    6c:aa:d5:63:44:48:fc:1f:7e:c2:9b:0e:38:04:eb:
                    64:5c:3d:a5:75:d4:ee:4e:d1:35:c4:d9:7a:ad:76:
                    f4:17:27:b4:18:5a:09:ea:9a:f2:af:0d:d2:f3:0d:
                    e7:24:f3:0c:9c:7c:30:0c:8b:aa:e2:1a:cb:67:5c:
                    53:c2:a0:ba:9d:41:a1:50:39:8f:92:ce:d3:18:29:
                    9c:74:12:40:24:c3:61:e8:da:a1:5f:6c:bc:1f:b1:
                    53:6d:cf:0f:10:8b:34:76:8f:c3:33:ff:ba:1d:e0:
                    06:ef:99:c3:8e:f0:d6:94:9f:47:cf:3d:56:0b:f3:
                    66:85:2a:35:d1:d8:bd:37:e3:ac:c4:7a:af:7a:5f:
                    06:db:56:7a:8e:d1:a4:7f:98:a0:a7:e4:5b:dd:4b:
                    0e:40:0c:f2:f3:96:2f:ab:34:bb:34:ce:aa:ec:00:
                    19:c8:7a:21:cf:e1:58:dd:c0:e7:ff:2f:f6:b4:12:
                    92:b6:68:f9:3d:a1:25:01:88:ef:b2:89:cf:ef:57:
                    b3:98:37:56:16:4c:69:93:c1:4d:0c:de:86:66:df:
                    eb:0b:3d:ca:ed:48:03:0f:36:8a:e1:e8:89:24:43:
                    d7:aa:c0:c1:a6:e9:ce:26:d7:1f:7d:90:ec:47:8c:
                    41:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:71:03:C7:F2:65:4A:13:90:18:51:AC:94:58:F5:F3:58:37:D6:BC
            X509v3 Authority Key Identifier:
                keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ce:a9:2e:dd:fa:45:a0:05:dc:fb:cf:00:69:c6:e5:c6:bf:
         e8:c6:7a:10:43:a4:24:6c:ca:7c:3e:10:d9:1f:86:3b:6f:69:
         f2:2f:30:d5:e0:20:bf:74:fc:d6:3f:14:84:75:ea:98:9d:ba:
         cc:cd:bd:94:5b:b8:c7:91:3d:54:58:c5:d8:ff:63:dc:8c:de:
         47:5d:ef:b9:aa:d5:02:e2:8f:9e:29:e2:04:2f:b9:55:0a:e2:
         f0:c5:5b:eb:95:4b:3b:66:6e:bf:ce:3b:79:0d:88:4c:80:af:
         a1:17:be:25:3d:92:7d:c4:b6:9f:63:f4:93:8b:de:16:e4:e5:
         f7:83:d2:6a:cc:f5:37:8a:53:a6:ea:f4:2e:02:7b:e8:4e:4a:
         79:e9:f2:70:98:14:b1:f6:f7:99:fb:58:2d:79:31:b6:0b:69:
         d1:b7:f7:5a:ac:32:a0:42:48:67:fd:94:3b:7e:33:03:4c:61:
         5b:83:28:76:11:a5:cb:78:e7:38:da:9c:87:79:37:ff:c6:91:
         1d:6d:20:99:96:68:7a:8f:74:01:fc:76:db:57:2c:59:61:56:
         ee:61:57:de:81:4c:91:0d:80:0e:9b:1e:0b:b6:ea:ed:c7:3a:
         00:37:bf:97:da:41:79:d2:c6:18:93:74:77:e8:96:82:1e:4d:
         8f:04:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:15:04 2026 by rpki-client