Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
File:                     EQKbhwTDK6_sKzyCn89YaqGz2cE.mft (raw, json)
Hash identifier:          3ApfW1qDgc+nKPdFMj+LD7ZvcM4p81jyOZqvukZJU8g=
Subject key identifier:   42:2C:E6:43:6C:37:7B:3D:A5:C0:B4:6C:BC:46:95:B7:49:EB:50:56
Authority key identifier: 11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
Certificate issuer:       /CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Certificate serial:       01A08C0D949E9FDFCA994ACF2A8B5B9C100D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
Manifest number:          1753
Signing time:             Thu 10 Sep 2026 16:01:35 +0000
Manifest this update:     Thu 10 Sep 2026 16:01:35 +0000
Manifest next update:     Fri 11 Sep 2026 16:01:35 +0000
Files and hashes:         1: EQKbhwTDK6_sKzyCn89YaqGz2cE.crl (hash: uMqnK1uc+BW9/PzQsyHY0DpXu8kEF1W1SfX6+AvnKFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0d:94:9e:9f:df:ca:99:4a:cf:2a:8b:5b:9c:10:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
        Validity
            Not Before: Sep 10 16:01:35 2026 GMT
            Not After : Sep 11 16:01:35 2026 GMT
        Subject: CN=422ce6436c377b3da5c0b46cbc4695b749eb5056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:63:2c:91:12:a2:9a:50:20:28:d2:d3:dc:
                    92:1f:d2:0d:7d:70:0d:87:d1:0a:65:e5:05:8b:83:
                    a8:56:b5:95:92:ce:a7:32:a3:8e:22:34:a5:84:fe:
                    7b:de:d4:3a:e6:bc:2e:a6:97:56:7d:07:b6:ab:99:
                    e3:89:2e:10:78:23:df:be:a5:16:ee:cc:e7:ec:4c:
                    c5:76:3a:e9:d1:94:08:09:0a:8e:42:1f:f8:53:19:
                    a5:26:88:c2:af:0c:b6:a8:e8:f5:a9:c9:6c:35:f9:
                    6d:3f:c8:5b:e0:1e:47:45:6d:2a:3d:32:ea:87:6e:
                    56:ac:8e:34:06:e8:f0:0b:9b:44:1a:05:7b:13:11:
                    e4:75:6b:19:42:57:2b:e2:2d:77:d9:44:0c:ae:cd:
                    b5:3d:d0:c4:88:ba:94:f9:7a:6f:6d:77:d3:6d:5a:
                    1c:ec:5d:fc:c9:50:44:c7:cf:55:9e:ed:67:7e:51:
                    e8:e3:3f:34:a1:bb:aa:44:45:31:5a:0e:0f:7a:8f:
                    e3:b8:c8:c8:54:9c:85:7d:3f:26:d1:52:8e:06:a1:
                    b2:36:2c:19:60:25:5f:6b:30:9b:e7:8f:11:b5:0f:
                    02:d6:c8:e5:8e:1e:d4:9b:c4:0e:53:08:0f:32:bc:
                    03:60:a7:98:52:d7:ab:44:b7:1c:a6:75:e1:4f:b5:
                    a5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2C:E6:43:6C:37:7B:3D:A5:C0:B4:6C:BC:46:95:B7:49:EB:50:56
            X509v3 Authority Key Identifier:
                keyid:11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:31:e5:e5:be:e3:ef:3a:72:c9:93:bb:14:eb:81:96:5e:15:
         0e:a9:a6:16:4f:ab:7e:02:4a:6d:21:87:cb:bc:fb:e5:d0:bc:
         48:a2:87:b3:a0:05:d9:20:54:68:fe:46:ce:ff:52:86:49:05:
         d5:62:58:48:db:ee:62:cf:fd:ab:c0:31:5c:e1:63:02:e9:e7:
         28:a8:b8:5c:76:b3:10:a3:e5:82:bb:e0:5f:65:28:8c:a3:51:
         0b:9e:1e:61:fa:e1:7a:35:4b:7b:b0:aa:c8:04:f0:ee:9d:83:
         f2:62:8b:dc:fd:0e:91:7a:7c:a2:75:ad:95:ae:7f:ac:46:9f:
         6c:fe:c7:d4:0a:5a:85:66:2e:70:fc:0b:63:cd:bf:63:53:a4:
         14:37:36:d3:2a:ba:af:98:6b:1e:eb:d3:ec:77:b6:da:12:a6:
         d7:fc:ba:27:ba:2d:a0:e9:0e:cc:5a:c8:47:e3:18:c4:14:c6:
         c6:42:45:86:6f:e4:93:81:fb:3c:7a:15:5c:bf:c2:dc:88:90:
         d1:b6:38:96:65:dd:38:90:3e:fb:e9:01:d9:63:80:bc:94:77:
         b6:78:91:e6:7a:f6:b2:71:93:0c:96:95:c8:e7:9c:20:8c:8c:
         da:27:27:58:21:4a:38:a6:0c:97:be:ef:d6:3d:e5:b2:b1:f7:
         c5:94:8d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:11:28 2026 by rpki-client