Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
File:                     EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft (raw, json)
Hash identifier:          jn4B9qucVHA81IijHPyc77o6WoslrvmJJ1apEPboIGs=
Subject key identifier:   65:3D:4D:A9:F2:59:E7:31:DC:C2:1F:D9:27:2A:98:DE:F7:55:13:00
Authority key identifier: 11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
Certificate issuer:       /CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Certificate serial:       01A14BABC266C380D19CAB23A3677494D7EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
Manifest number:          14A3
Signing time:             Sat 17 Oct 2026 21:01:49 +0000
Manifest this update:     Sat 17 Oct 2026 21:01:49 +0000
Manifest next update:     Sun 18 Oct 2026 21:01:49 +0000
Files and hashes:         1: EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl (hash: TsrFMGtH7qG84JaLgGxgmFBi1k781RivtLLoqfh8gJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 21:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4b:ab:c2:66:c3:80:d1:9c:ab:23:a3:67:74:94:d7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1155b16fa9db7bceeccb89d1fe252632c0972514
        Validity
            Not Before: Oct 17 21:01:49 2026 GMT
            Not After : Oct 18 21:01:49 2026 GMT
        Subject: CN=653d4da9f259e731dcc21fd9272a98def7551300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a6:3c:b3:d3:33:b6:dd:84:9e:48:6d:d6:55:
                    3b:45:01:3e:a7:0d:3c:15:f2:6a:47:25:57:77:96:
                    3c:94:3f:14:67:5e:c7:7d:6f:7c:59:18:49:f9:99:
                    12:2d:c8:15:74:9b:31:e1:92:1c:2c:97:6b:14:6c:
                    ed:ec:ec:5d:02:87:a4:70:f5:7a:e6:db:2a:7c:2b:
                    0d:5e:08:8d:5a:b4:64:8a:d2:0e:ac:e5:1d:15:0e:
                    b0:82:08:9e:ac:6b:80:ba:c6:95:b8:53:6f:26:3b:
                    8c:c9:42:8d:7d:ae:6e:ae:7e:ed:be:a5:22:14:fc:
                    44:9f:a5:99:7f:3d:91:9d:97:47:85:4d:19:c6:43:
                    bd:63:ce:d9:fa:0a:04:69:3b:39:ad:d2:4e:fc:ec:
                    d7:bc:e2:21:ec:61:80:96:fa:ea:b0:78:a0:21:19:
                    81:b6:86:2b:61:bc:78:07:89:9b:82:97:ec:1a:da:
                    18:b9:9a:bc:47:cd:31:31:65:9f:8d:88:13:23:1a:
                    42:c2:74:ea:d7:aa:c4:85:09:0d:cb:fe:32:de:75:
                    40:d7:46:93:06:f0:0e:a8:75:76:02:e5:0e:ab:42:
                    2a:83:e1:7a:47:2f:da:6f:20:43:5b:7f:f7:91:68:
                    68:12:95:ee:1e:a4:62:05:b0:c9:6d:a6:a4:79:22:
                    96:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3D:4D:A9:F2:59:E7:31:DC:C2:1F:D9:27:2A:98:DE:F7:55:13:00
            X509v3 Authority Key Identifier:
                keyid:11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:be:ad:1e:7b:3d:f5:df:cd:f2:e8:59:35:48:2e:80:81:0f:
         53:56:56:78:2e:87:58:01:b3:c6:fb:c5:44:d2:6c:70:43:2a:
         63:c8:a8:50:a3:26:fb:80:f4:a4:cf:c6:a2:4e:e8:49:76:e3:
         cd:33:f0:25:09:62:f0:b2:5e:c3:47:22:b1:19:9d:f2:14:74:
         66:69:d2:fb:4a:52:44:9d:79:06:35:fe:44:be:f6:d1:d3:8d:
         ea:cc:60:26:35:f2:7e:b6:28:e1:97:25:ef:20:c5:a4:a8:e8:
         64:b1:5e:ac:da:a3:4b:28:3e:ca:5b:f3:5c:e9:d0:31:77:8e:
         93:2f:d3:c3:18:49:95:e5:cf:68:fb:17:dd:2d:2b:e2:bb:53:
         78:44:6d:e1:bc:fb:6c:0c:3c:8e:02:ad:6b:01:17:ef:fd:27:
         02:04:f8:01:bf:1c:f4:ed:e5:31:f4:f5:4e:26:18:24:7d:3b:
         12:a6:5e:06:65:f0:78:54:94:b1:77:fa:d1:cc:5e:0e:fe:1a:
         3a:92:ab:76:82:1e:a0:1e:fb:3c:a5:81:8c:ba:de:0f:15:84:
         d6:52:2d:13:26:ba:d2:58:98:c7:70:ab:3e:79:a1:65:b1:e2:
         71:fc:22:64:c6:4c:a2:0f:21:2e:b3:65:09:94:37:7f:63:7a:
         81:3c:6d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:16:49 2026 by rpki-client