Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.mft
File:                     EQnNl_ja-OKOnjY_oidxR7iMj9I.mft (raw, json)
Hash identifier:          t3ZBqoZSiXlCEWwrj7oiZcCpUbwcshBBaCVyv4wYS78=
Subject key identifier:   63:AF:32:5B:2D:A2:1A:2A:81:4D:BA:B4:2C:35:42:2E:FF:D3:BC:60
Authority key identifier: 11:09:CD:97:F8:DA:F8:E2:8E:9E:36:3F:A2:27:71:47:B8:8C:8F:D2
Certificate issuer:       /CN=1109cd97f8daf8e28e9e363fa2277147b88c8fd2
Certificate serial:       01A19BB455826C600B303EBB6C7237B9BF46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQnNl_ja-OKOnjY_oidxR7iMj9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.mft
Manifest number:          014A
Signing time:             Mon 02 Nov 2026 10:00:49 +0000
Manifest this update:     Mon 02 Nov 2026 10:00:49 +0000
Manifest next update:     Tue 03 Nov 2026 10:00:49 +0000
Files and hashes:         1: EQnNl_ja-OKOnjY_oidxR7iMj9I.crl (hash: 2SAJvl28lfgwWuOkn1WYb49T71Sod0cxIgvgo9FzhH8=)
                          2: MjyhcIDP5Cuj0z7nBld4_C2DGvQ.roa (hash: 4k0Ys4b3Bg2O9bxcwTlvra4F9uJDHWsWf5y4VFTdqqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQnNl_ja-OKOnjY_oidxR7iMj9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Nov 2026 10:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:9b:b4:55:82:6c:60:0b:30:3e:bb:6c:72:37:b9:bf:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1109cd97f8daf8e28e9e363fa2277147b88c8fd2
        Validity
            Not Before: Nov  2 10:00:49 2026 GMT
            Not After : Nov  3 10:00:49 2026 GMT
        Subject: CN=63af325b2da21a2a814dbab42c35422effd3bc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ef:a9:0f:86:89:59:93:4e:fe:e2:6f:1f:fe:
                    60:61:85:a9:13:bc:a0:ed:7f:57:f8:fd:1a:f7:28:
                    04:e9:a5:c7:c7:cb:d4:ab:61:f0:50:b3:8c:e3:15:
                    4f:05:a6:32:b9:25:cb:4c:1e:80:d3:2e:2d:e5:1e:
                    13:cc:bd:67:c8:76:30:12:e9:4c:b4:65:d2:21:56:
                    cb:14:e8:30:37:ea:fa:b5:fe:e4:16:dd:da:e3:13:
                    d5:7a:4c:f6:9d:3c:e6:19:71:38:e8:e3:8e:57:b8:
                    d2:8d:0b:ee:4d:fa:6c:ea:9a:9f:62:9c:b5:25:ee:
                    91:01:a7:aa:7d:25:a3:a7:c1:b1:ca:99:62:ef:0d:
                    4b:1b:21:bf:99:e9:f6:7a:2f:6a:ba:17:1f:de:74:
                    b0:68:10:a8:db:b9:51:6d:a1:3e:be:70:ae:89:58:
                    f2:d5:e9:d9:45:60:20:27:17:38:f6:50:69:12:63:
                    ee:cb:a5:c3:f4:90:f4:bd:ae:92:e5:5a:21:7e:92:
                    23:3f:e9:5e:1b:3e:02:53:12:b8:13:ff:71:b3:eb:
                    a7:f1:64:18:5a:7f:29:75:e8:8d:13:5e:fd:54:a3:
                    0b:42:54:ae:a7:f1:b5:a7:a5:09:d4:2c:e0:65:90:
                    a9:a1:a8:42:ee:0c:5b:a5:a5:df:ff:22:2b:46:57:
                    0b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AF:32:5B:2D:A2:1A:2A:81:4D:BA:B4:2C:35:42:2E:FF:D3:BC:60
            X509v3 Authority Key Identifier:
                keyid:11:09:CD:97:F8:DA:F8:E2:8E:9E:36:3F:A2:27:71:47:B8:8C:8F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQnNl_ja-OKOnjY_oidxR7iMj9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/737173-6256-49dd-9244-51aedecbe64b/1/EQnNl_ja-OKOnjY_oidxR7iMj9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c4:b0:0c:73:06:c2:f3:83:7f:8a:38:93:6f:65:0f:29:0a:
         99:83:8d:46:f4:5d:fb:7a:4a:f7:bb:82:25:c5:18:dc:4a:ba:
         fd:6a:1a:40:00:b6:7f:5f:af:35:92:01:fa:ad:b8:50:ec:f0:
         15:d4:bc:0b:dc:90:bf:b4:d7:07:55:a3:4d:74:8f:19:10:75:
         c9:e0:3d:e2:8e:20:e4:55:f8:2e:a8:a1:fa:b8:2f:5f:ca:b1:
         82:66:ba:ff:8a:31:40:a1:8c:e1:81:ac:f5:3a:b7:1d:b0:37:
         dc:e6:84:cc:96:c2:52:ec:50:a1:71:1f:0e:7d:a9:80:d8:4e:
         31:1a:90:48:40:59:3a:e7:b2:df:26:96:e0:e1:e5:16:cb:3f:
         1a:e5:e1:ac:8b:6a:9c:e2:0b:0a:46:f6:26:27:58:66:fb:8f:
         eb:12:e8:8a:dd:9b:88:fc:e1:71:2a:a8:61:d3:9a:60:f8:d5:
         a3:45:fa:1d:51:87:10:dd:f8:6e:24:a7:f5:ab:a5:d6:ad:82:
         01:81:b2:11:c9:7a:43:0b:f6:2b:6f:0f:10:db:d5:ae:48:b2:
         dd:29:b7:48:2b:0d:a7:c0:22:5f:2a:38:8c:55:e1:ae:6d:fb:
         d7:17:3e:cc:be:2d:d9:44:23:8a:ab:04:e3:c1:25:27:96:32:
         26:9d:6d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 17:01:15 2026 by rpki-client