Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
File:                     9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json)
Hash identifier:          FweXGxNwmq+6JTorwu/ktUseKbZ3YYbRfQOHvYRQ2hw=
Subject key identifier:   E9:67:78:B0:09:99:D2:49:A1:2B:95:39:7F:43:DF:DF:71:6F:44:09
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Certificate issuer:       /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial:       01A13E94B3C1F9EC2C24E1062BA10E1791B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
Manifest number:          0FC4
Signing time:             Thu 15 Oct 2026 08:01:34 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:34 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:34 +0000
Files and hashes:         1: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: RGzryG1SKtWf2tGC5pqtGJeueSpuS4hJRgTFe0bsV98=)
                          2: SwOCpl1kg6g2zUiZWN5A0MmSX5s.roa (hash: QKVD0HzLsQvlnPuI8LqZ6Irb+MhBQbX7xWp6qMbEmic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:b3:c1:f9:ec:2c:24:e1:06:2b:a1:0e:17:91:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
        Validity
            Not Before: Oct 15 08:01:34 2026 GMT
            Not After : Oct 16 08:01:34 2026 GMT
        Subject: CN=e96778b00999d249a12b95397f43dfdf716f4409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c4:70:7a:0f:8b:57:73:ef:5e:a6:2c:46:a6:
                    fd:02:1a:12:93:ff:51:53:f0:91:d7:b4:2d:1b:62:
                    40:7e:65:5b:9c:55:84:d3:fd:af:0d:26:7f:52:61:
                    f6:bd:18:65:ab:4e:ab:63:6b:81:34:c3:e8:cf:5d:
                    ac:0b:03:2b:b1:22:99:9b:55:7d:87:b2:a5:da:1a:
                    2e:21:fd:e4:21:6c:ab:b0:ba:67:e6:db:b3:70:81:
                    f3:f4:02:ff:0a:9d:b4:f9:a0:c8:3b:06:58:a3:d6:
                    04:0a:4f:46:00:ed:7a:65:6f:ca:19:fc:40:40:3e:
                    24:e9:2d:e8:ee:7a:de:1e:6d:2c:f9:0e:f1:28:a5:
                    6b:32:44:ee:a0:6f:14:7e:e3:6c:97:99:21:bb:a2:
                    e4:33:b9:2b:b0:22:8b:f5:12:48:5c:ba:88:29:24:
                    e4:29:ef:9a:13:de:a4:17:10:00:99:f9:4f:ec:a8:
                    2c:1a:0d:bb:bb:6b:bd:ff:5c:1a:67:ca:3e:9a:b9:
                    e2:d8:7f:07:91:fc:53:80:fe:39:6e:a0:21:45:1e:
                    bd:ea:dc:6d:9a:18:22:b9:3f:62:38:f1:9d:26:37:
                    c7:13:84:1d:04:71:6d:88:cc:94:bd:43:4b:d2:6f:
                    34:c1:b0:13:55:59:29:0d:34:1a:55:d0:dc:30:cc:
                    9c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:67:78:B0:09:99:D2:49:A1:2B:95:39:7F:43:DF:DF:71:6F:44:09
            X509v3 Authority Key Identifier:
                keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a9:b9:61:f7:c7:ad:7a:6e:82:66:4e:76:fa:1a:82:aa:1c:
         2c:33:d5:20:cb:a7:4e:72:97:8e:90:f7:17:bf:94:80:f1:de:
         56:7e:69:ec:2d:6d:0c:57:6f:73:df:06:6c:18:47:fa:87:3a:
         37:5c:8f:7b:df:7f:07:12:58:88:ac:4f:af:73:00:95:a2:fe:
         60:f6:20:17:e7:a0:b0:e3:6a:ee:ae:24:15:8d:5f:79:fb:9c:
         37:9a:df:26:b4:cc:58:37:af:00:30:30:e1:4b:f9:4d:96:94:
         ce:26:8e:51:21:0b:0c:3c:aa:35:62:c1:02:b0:0d:b3:0f:d7:
         25:b0:8b:95:c1:db:3a:e3:a6:26:45:a7:9a:d1:bc:96:86:ee:
         ab:da:16:7f:c3:e7:0b:2f:66:66:42:a0:18:e6:19:10:4d:c6:
         9c:13:4a:5c:88:1f:38:11:a7:95:18:59:68:aa:8c:0e:f8:59:
         05:68:6c:93:c9:f7:9a:6f:88:00:e3:8c:11:f9:b3:6a:34:5a:
         ef:cd:72:45:d3:21:84:8b:f6:a1:3f:5e:3d:ad:4c:84:ae:d7:
         97:f2:a0:52:9e:c6:7a:09:c7:c7:a9:9c:eb:0b:47:6b:d1:92:
         c9:bf:d1:b9:30:de:cf:8b:ec:c5:10:4b:43:b8:c1:4e:2d:8c:
         96:55:6a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:22:59 2026 by rpki-client