Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
File:                     EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft (raw, json)
Hash identifier:          RjClrvJi4lNzUHTeoxyhE5fxnFktCjymfMe61fJyl0s=
Subject key identifier:   27:18:23:67:DE:2A:E6:23:53:BC:16:AA:29:BA:21:4F:6A:A2:41:5F
Authority key identifier: 11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4
Certificate issuer:       /CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
Certificate serial:       01A17EF40161019EA052B4CA09921C5E303D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
Manifest number:          0D6E
Signing time:             Tue 27 Oct 2026 20:01:22 +0000
Manifest this update:     Tue 27 Oct 2026 20:01:22 +0000
Manifest next update:     Wed 28 Oct 2026 20:01:22 +0000
Files and hashes:         1: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl (hash: mMaDKodnVcRzxGZXJDj00cH/fisn9qgWaMArDAtRVJs=)
                          2: EZyVvJ5bgJq-P7qECfwi4jRgjOI.roa (hash: aArOh7D2m0R/tR8bRjsgJKmh1qSOBK7Sx7lK9wOrfn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:f4:01:61:01:9e:a0:52:b4:ca:09:92:1c:5e:30:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
        Validity
            Not Before: Oct 27 20:01:22 2026 GMT
            Not After : Oct 28 20:01:22 2026 GMT
        Subject: CN=27182367de2ae62353bc16aa29ba214f6aa2415f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:89:0d:01:03:05:11:81:4b:ca:f3:1b:a0:36:
                    64:e6:f4:6a:54:e1:db:34:9f:e4:1c:4e:bd:86:4f:
                    25:e8:2a:8e:91:b3:ae:19:60:32:39:7b:55:bb:f2:
                    ed:07:6a:c5:7d:41:41:53:7e:5f:47:14:e7:5f:6f:
                    ff:28:2a:9f:14:48:6a:eb:11:06:5c:2c:ee:35:dc:
                    ba:8e:97:4f:11:fc:12:b9:de:e1:b4:77:17:6a:db:
                    dd:c6:78:c6:52:b7:48:6c:e9:d3:6a:a5:a2:61:f6:
                    f9:51:78:54:f0:10:a1:e8:b1:72:2b:63:53:57:4a:
                    7b:ae:ec:e2:75:2c:e0:fb:32:4e:7b:80:d6:a7:86:
                    d6:f4:d3:f9:f0:87:d0:bf:24:e8:a0:5f:07:c7:0b:
                    85:39:e3:68:df:8d:90:3f:03:e3:4f:5e:51:8d:31:
                    61:f6:2a:49:73:0a:eb:26:56:ab:58:7d:f1:58:fb:
                    1a:81:25:40:83:c6:21:75:a7:c8:71:50:5f:f5:4d:
                    20:38:ae:a4:a4:46:b4:25:60:46:47:f8:e9:68:6c:
                    f5:2c:6c:67:84:78:2f:ac:1e:fc:ea:62:59:fe:40:
                    fd:aa:ba:f9:de:23:b6:f7:65:e6:b4:75:a3:91:10:
                    52:4d:e6:01:4b:c8:ef:b4:53:de:1a:46:10:36:48:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:18:23:67:DE:2A:E6:23:53:BC:16:AA:29:BA:21:4F:6A:A2:41:5F
            X509v3 Authority Key Identifier:
                keyid:11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:e4:3a:dc:99:92:7b:f5:6d:b3:df:fa:6c:d5:c6:2e:68:ea:
         4e:a7:93:da:2d:26:0f:11:1f:c7:77:c6:3d:8e:64:d5:fc:af:
         41:21:48:77:0a:17:6b:94:19:05:3d:4f:32:0a:40:af:c0:9f:
         aa:a2:c1:cb:12:62:64:6f:d9:a1:bb:9c:c3:9c:51:71:13:d4:
         91:ec:67:42:fe:b7:88:01:60:9e:90:88:9e:88:13:1f:6e:f1:
         9c:c1:2e:84:bd:b5:f6:56:1f:66:53:79:cc:42:f8:eb:49:b1:
         09:5d:e5:3c:20:fa:e1:89:31:26:da:ed:d2:fb:03:47:1a:12:
         17:53:67:10:5c:38:e7:f0:3e:e4:f0:ff:60:4f:bc:44:37:ac:
         03:b6:97:b0:28:82:db:e2:1f:93:dc:c2:57:26:3c:d0:2f:f3:
         ad:62:5c:19:e3:73:83:51:16:0e:3e:4e:6e:49:eb:29:a8:f3:
         e2:a8:95:21:4a:2e:f5:1e:66:de:c7:22:68:d8:f7:f4:fc:1a:
         57:64:04:f9:76:4b:13:e7:44:30:b2:a2:9c:19:8b:8a:f5:c8:
         06:00:8e:56:c3:44:ea:f4:28:3b:6f:85:2c:46:d3:b6:1f:8e:
         a7:ba:4d:7c:ad:cf:93:ec:1d:c9:1b:05:76:58:1e:34:a9:b8:
         fd:83:26:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:42:02 2026 by rpki-client