Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
File:                     E11E-QKeG110PPzlgR7-Xib4yGI.mft (raw, json)
Hash identifier:          LfAb5i74XReW+Zz5PNYYkwofb6bwf6mC0PecLQzl9JU=
Subject key identifier:   8B:47:FA:FF:A4:17:39:00:1A:16:A9:50:EF:21:DA:E7:31:F5:12:08
Authority key identifier: 13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62
Certificate issuer:       /CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
Certificate serial:       01A13E25DF53EE2CE0303C963C65B2C7BD23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
Manifest number:          09DD
Signing time:             Thu 15 Oct 2026 06:00:31 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:31 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:31 +0000
Files and hashes:         1: E11E-QKeG110PPzlgR7-Xib4yGI.crl (hash: kR3B6VW3fgwTWxgrnQBhDV7WN0SIwG0I+rg4c8SPu7g=)
                          2: G790ctvfB8H7olkvHbj2C62gXak.roa (hash: 719eZlvdoP18xjD6bNkykAF0yzH6SUelF8SSBbaOpiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:25:df:53:ee:2c:e0:30:3c:96:3c:65:b2:c7:bd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
        Validity
            Not Before: Oct 15 06:00:31 2026 GMT
            Not After : Oct 16 06:00:31 2026 GMT
        Subject: CN=8b47faffa41739001a16a950ef21dae731f51208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:07:3d:1b:5d:37:c3:87:68:93:d9:02:92:
                    87:37:2a:a7:88:83:b0:38:5a:60:d3:13:26:4f:76:
                    8c:a7:6b:3b:9f:e3:d6:4d:34:03:92:47:b7:39:02:
                    9f:80:35:03:ca:79:e3:63:0b:f0:c2:1d:c3:2a:13:
                    11:a5:ca:5a:92:98:c7:ba:b0:cd:9b:70:28:5f:56:
                    cc:5a:52:de:e1:f4:6b:28:68:a0:41:30:cd:21:90:
                    8b:af:9b:4c:56:21:0d:a5:15:c4:7c:c1:99:4b:5b:
                    c9:7e:c8:a0:c6:b5:e6:57:2f:3b:b7:4a:22:df:36:
                    61:63:72:60:1e:87:cd:3d:3d:98:83:7d:23:98:15:
                    33:97:06:30:b2:a0:97:31:59:23:7a:b7:d3:8b:9d:
                    4d:16:d0:e2:ef:8a:71:92:7b:58:37:73:00:e3:f3:
                    1f:ba:aa:e7:15:d9:f5:0f:9e:f5:36:7f:43:5d:6e:
                    4a:ea:4b:1c:a5:e4:44:e8:43:69:0e:f7:18:e8:5a:
                    32:ee:18:87:a5:e9:dd:a7:55:51:47:50:c2:df:8c:
                    9b:0f:1c:e0:7a:eb:8a:74:47:6d:fe:d6:9a:c7:8c:
                    17:f0:ee:b2:67:1a:0e:cd:dd:e6:0f:ff:ec:49:6a:
                    75:d5:37:28:51:b1:2f:f2:5f:1b:a1:66:ef:4f:ad:
                    58:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:47:FA:FF:A4:17:39:00:1A:16:A9:50:EF:21:DA:E7:31:F5:12:08
            X509v3 Authority Key Identifier:
                keyid:13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:71:bb:04:c9:d8:b0:78:1f:8d:99:b9:74:6f:9c:37:1f:31:
         b2:af:0e:c6:60:70:1a:3f:c3:ee:02:eb:f7:45:8e:d1:de:ab:
         c7:96:aa:5e:4f:ce:46:23:78:0b:b0:1a:af:d9:4f:10:3f:de:
         32:bb:58:dd:52:da:46:d0:0b:eb:50:4e:03:84:d2:f1:7f:e6:
         c6:97:90:af:20:d5:47:29:49:81:10:2a:68:a7:81:63:57:b2:
         e6:93:7e:9c:09:69:16:36:7f:86:56:60:07:b8:70:10:ee:af:
         a5:82:28:3d:76:73:78:15:73:04:b6:b0:86:0a:ab:85:b6:07:
         f2:00:92:88:a6:94:99:90:a7:45:83:29:21:be:b9:78:4f:b7:
         4a:4d:2f:2f:de:ab:93:2f:59:73:b0:b8:31:3c:ba:8b:05:5e:
         a2:31:55:66:7f:0d:7b:69:54:36:7a:c9:42:5c:99:dd:40:7a:
         6a:36:bf:fc:3a:32:d2:80:08:82:de:10:20:8a:20:cd:50:a9:
         21:60:08:45:65:f8:10:f1:10:04:0d:07:7e:d0:f3:83:e0:f8:
         14:c6:08:03:80:ec:34:b4:09:9c:26:9b:13:0f:aa:b9:7d:94:
         53:b6:87:5a:5e:e1:1d:d0:ed:1c:4f:79:bb:4e:69:09:dd:7d:
         1a:5c:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:29:31 2026 by rpki-client