Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.mft
File:                     EQnNl_ja-OKOnjY_oidxR7iMj9I.mft (raw, json)
Hash identifier:          /uXNStkuLBUXGZk78uBwWFpExKXaI4RYcAENm2IdKPg=
Subject key identifier:   2C:36:E5:DE:81:F0:5D:82:80:06:B5:77:32:5E:67:E0:C8:2A:31:08
Authority key identifier: 11:09:CD:97:F8:DA:F8:E2:8E:9E:36:3F:A2:27:71:47:B8:8C:8F:D2
Certificate issuer:       /CN=1109cd97f8daf8e28e9e363fa2277147b88c8fd2
Certificate serial:       01A08D5737766ECDA7F8151367D6925FB890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQnNl_ja-OKOnjY_oidxR7iMj9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.mft
Manifest number:          BE
Signing time:             Thu 10 Sep 2026 22:01:38 +0000
Manifest this update:     Thu 10 Sep 2026 22:01:38 +0000
Manifest next update:     Fri 11 Sep 2026 22:01:38 +0000
Files and hashes:         1: EQnNl_ja-OKOnjY_oidxR7iMj9I.crl (hash: fXY2wIXCoQBJ5lrUjdqjFagYZZ8hZvAjTtpHZJRrLI4=)
                          2: MjyhcIDP5Cuj0z7nBld4_C2DGvQ.roa (hash: 4k0Ys4b3Bg2O9bxcwTlvra4F9uJDHWsWf5y4VFTdqqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQnNl_ja-OKOnjY_oidxR7iMj9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 22:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:57:37:76:6e:cd:a7:f8:15:13:67:d6:92:5f:b8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1109cd97f8daf8e28e9e363fa2277147b88c8fd2
        Validity
            Not Before: Sep 10 22:01:38 2026 GMT
            Not After : Sep 11 22:01:38 2026 GMT
        Subject: CN=2c36e5de81f05d828006b577325e67e0c82a3108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a8:96:77:fc:0c:fe:75:d9:3a:20:d5:7e:37:
                    1d:cf:1b:c5:7a:a1:d5:fa:9b:9c:98:5b:f0:02:8d:
                    55:12:92:5f:12:8d:ce:0b:27:c7:ed:ee:53:ea:b9:
                    7d:62:8e:06:36:88:64:c4:b3:03:7a:8d:48:04:e9:
                    be:76:20:90:5c:ef:63:80:9c:79:e6:e4:d1:2b:4b:
                    32:91:82:8a:10:2a:b4:f5:d1:8d:4b:62:46:37:51:
                    a2:54:3f:d0:08:0b:4c:8d:cf:5f:e2:54:49:7c:ca:
                    ca:ad:16:53:7c:b2:d7:ca:f5:ff:24:06:19:19:35:
                    d3:05:2a:97:4d:45:77:be:c8:33:db:81:de:d3:b9:
                    9d:34:67:2a:2f:27:1e:05:02:d7:84:ab:6c:03:89:
                    9b:55:bd:32:77:07:72:47:79:03:88:d8:3e:7c:43:
                    5a:99:8e:47:08:0c:5f:1e:2a:6f:ea:73:75:ef:39:
                    95:8d:fd:79:3a:fa:b8:ca:bf:ff:af:75:ac:17:ec:
                    52:96:5a:a0:11:c0:c8:de:42:08:b3:92:08:7c:34:
                    69:4e:f6:6f:ed:67:52:e0:f3:2d:b2:1d:5a:0f:68:
                    03:5d:b2:bd:de:d5:1a:36:bf:f5:f1:44:d1:c7:0b:
                    ff:2d:f3:0c:21:39:b6:d9:da:82:be:1d:1f:76:98:
                    9a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:36:E5:DE:81:F0:5D:82:80:06:B5:77:32:5E:67:E0:C8:2A:31:08
            X509v3 Authority Key Identifier:
                keyid:11:09:CD:97:F8:DA:F8:E2:8E:9E:36:3F:A2:27:71:47:B8:8C:8F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQnNl_ja-OKOnjY_oidxR7iMj9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:d8:d3:0a:c6:95:42:b7:85:23:80:d3:e4:26:17:05:2f:46:
         c7:3f:28:fc:20:3a:3c:ca:b8:c6:a2:59:4b:80:db:51:55:b5:
         9d:bb:8e:f0:44:81:36:cd:bc:e6:8c:30:98:b0:8b:08:13:91:
         03:3b:79:bf:3c:6d:cd:b2:6f:90:f7:24:c7:1c:41:7c:8f:5c:
         45:6d:61:fc:68:f1:66:29:a9:16:54:51:79:b1:4d:6d:0f:96:
         6d:0c:e8:35:e4:4e:a3:0c:04:ad:40:13:a1:5e:1d:af:87:7d:
         21:51:4f:3d:08:0f:f3:92:09:8f:2c:15:55:0a:08:d9:fb:6b:
         33:dc:84:4d:b1:8d:15:a5:61:7b:04:46:ce:f9:1a:88:13:c9:
         39:82:2a:17:7c:71:07:20:dd:26:72:a5:66:39:ba:57:ba:f8:
         dd:ca:10:45:79:5c:16:96:ff:8d:21:e8:84:55:e6:b7:3c:0c:
         0a:23:10:03:db:3a:86:9c:ec:6b:8d:26:45:cd:e6:b6:12:c2:
         7e:d6:18:d9:c9:d6:54:da:20:ec:88:58:ae:59:ac:e7:02:d3:
         e2:28:3b:65:88:3f:60:4d:1f:7c:6e:33:be:97:2a:bf:25:41:
         f3:e9:46:c3:0f:51:d5:60:63:6f:52:31:f2:6e:f8:2a:50:40:
         19:6b:4d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:34:32 2026 by rpki-client