Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
File:                     EPt5C_XsxPQgY7C5YKmU95kClQs.mft (raw, json)
Hash identifier:          vlndtMFQEXppCrlZOpY+gpyQLpdiSiiQooWrlpGzI6g=
Subject key identifier:   3F:81:31:C1:0A:35:E4:42:8A:A8:23:D8:9B:00:9B:AF:EB:09:8B:75
Authority key identifier: 10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B
Certificate issuer:       /CN=10fb790bf5ecc4f42063b0b960a994f79902950b
Certificate serial:       01A1889AFFA3F4CC5DE3BF1C3F38C8F34421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
Manifest number:          0368
Signing time:             Thu 29 Oct 2026 17:00:21 +0000
Manifest this update:     Thu 29 Oct 2026 17:00:21 +0000
Manifest next update:     Fri 30 Oct 2026 17:00:21 +0000
Files and hashes:         1: EPt5C_XsxPQgY7C5YKmU95kClQs.crl (hash: Lo346rWkcGpEPwZQykI7rtNt+w56pbWReqriR2E7DDA=)
                          2: QlWvHkFefgt8b65GtnQ9BWdmuEA.asa (hash: 742qjyA1AawGih0s10BDQYzxDeEAV9mVKYVyfwrup1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:88:9a:ff:a3:f4:cc:5d:e3:bf:1c:3f:38:c8:f3:44:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fb790bf5ecc4f42063b0b960a994f79902950b
        Validity
            Not Before: Oct 29 17:00:21 2026 GMT
            Not After : Oct 30 17:00:21 2026 GMT
        Subject: CN=3f8131c10a35e4428aa823d89b009bafeb098b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:c5:c7:d1:5c:4d:88:64:49:59:98:10:64:
                    7b:87:04:bd:46:b2:ed:32:d2:3a:2c:27:9e:a0:79:
                    33:65:bf:a5:21:26:26:60:30:6a:34:b9:0d:51:02:
                    00:fe:79:f8:49:b2:3a:2e:27:b3:72:83:26:a1:26:
                    1b:f7:a1:82:b1:f3:cd:8d:c6:98:38:de:25:ac:3b:
                    c5:a5:f8:06:60:1b:6c:71:50:9a:17:bc:0b:a1:c1:
                    9f:d2:a1:21:a2:ee:69:10:43:d0:5e:10:91:e8:ea:
                    b3:e8:84:e6:11:37:0f:b4:ef:13:1c:59:13:b1:5c:
                    f4:21:9c:98:54:25:e4:b4:2b:c8:05:13:e0:88:24:
                    9d:1a:82:e8:c0:f9:01:27:d4:ec:21:f3:14:81:a8:
                    55:1d:12:c7:46:37:aa:ae:6a:2a:61:48:55:f2:af:
                    e6:a2:f1:13:ad:06:b8:74:9b:0a:f9:b6:74:ef:ec:
                    ac:0f:19:48:83:58:eb:e1:6c:22:04:ef:dd:af:df:
                    20:40:25:0d:bb:f1:69:00:0e:a7:d1:99:75:a9:ea:
                    f7:b6:81:b8:65:31:5f:f5:68:90:bc:27:b7:df:7c:
                    49:ed:36:ea:94:d2:d6:55:53:03:4f:7c:b9:e5:9a:
                    2c:6e:b5:7d:eb:f4:ec:f1:3c:5e:f4:f7:90:cf:2e:
                    50:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:81:31:C1:0A:35:E4:42:8A:A8:23:D8:9B:00:9B:AF:EB:09:8B:75
            X509v3 Authority Key Identifier:
                keyid:10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:5a:55:e9:90:e8:6a:ca:22:65:6f:73:a5:a7:9d:38:6e:6a:
         99:8e:21:99:bc:d3:9a:a5:bb:b0:d5:d6:ab:01:b2:92:89:03:
         9d:ae:04:82:7a:cd:83:5d:ad:cf:83:ac:95:3c:30:82:38:47:
         e4:0f:bb:7b:33:51:d2:23:91:da:54:80:cc:8a:47:a8:a4:03:
         bf:fd:fb:86:da:ef:ae:9d:f5:27:66:65:9a:46:cf:c7:27:5c:
         c9:30:be:91:56:33:5c:8d:73:88:d9:48:9b:d1:4c:2e:83:76:
         77:7c:8e:68:4f:d9:69:69:76:4a:bd:b9:6a:f1:a2:a2:30:77:
         5a:54:9c:99:c7:ff:d7:c9:7d:bd:d1:3c:cf:a1:18:99:10:85:
         51:16:64:58:76:4f:ab:5c:eb:73:ac:1c:57:56:de:e4:c8:68:
         a0:6a:56:a0:9d:c5:03:e5:09:13:9e:17:45:28:16:63:23:52:
         2b:5b:25:c9:46:b7:e6:54:29:15:ac:6f:f5:4d:68:3c:14:d4:
         62:80:07:0f:ce:44:cd:3e:04:1f:ab:d5:f4:4d:1a:a9:06:58:
         62:f0:e4:07:07:b7:6b:85:9d:4d:1f:29:9f:00:76:3c:4f:24:
         3e:19:13:6a:b5:6b:96:8f:29:f1:b4:02:16:ea:7c:24:08:b2:
         6b:82:44:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:15:23 2026 by rpki-client