Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
File:                     EPt5C_XsxPQgY7C5YKmU95kClQs.mft (raw, json)
Hash identifier:          6Z3FtWiSycfpcYJQNhoq2QUIZmlnkJ6bDVob+Et57SU=
Subject key identifier:   B8:AB:F5:F8:5D:E4:B9:8D:71:3B:D0:15:45:62:72:D5:99:E6:E9:5B
Authority key identifier: 10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B
Certificate issuer:       /CN=10fb790bf5ecc4f42063b0b960a994f79902950b
Certificate serial:       01A184BE98E33C3A440FE61A75F78F7411FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
Manifest number:          0366
Signing time:             Wed 28 Oct 2026 23:00:45 +0000
Manifest this update:     Wed 28 Oct 2026 23:00:45 +0000
Manifest next update:     Thu 29 Oct 2026 23:00:45 +0000
Files and hashes:         1: EPt5C_XsxPQgY7C5YKmU95kClQs.crl (hash: LS7ligAsBP2tyvOIi3fvhA5ifCYuHJBRDU/NPAi66r0=)
                          2: QlWvHkFefgt8b65GtnQ9BWdmuEA.asa (hash: 742qjyA1AawGih0s10BDQYzxDeEAV9mVKYVyfwrup1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:84:be:98:e3:3c:3a:44:0f:e6:1a:75:f7:8f:74:11:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fb790bf5ecc4f42063b0b960a994f79902950b
        Validity
            Not Before: Oct 28 23:00:45 2026 GMT
            Not After : Oct 29 23:00:45 2026 GMT
        Subject: CN=b8abf5f85de4b98d713bd015456272d599e6e95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:a5:91:70:33:fe:f3:ac:79:07:3a:55:a6:
                    3b:1d:99:24:ed:83:ee:68:78:6b:a4:d1:15:67:c6:
                    5b:23:05:e2:73:f5:5b:11:2f:86:d4:9e:d5:1b:ef:
                    e7:cf:78:4d:23:68:f1:fc:d9:b6:16:60:f6:91:a9:
                    9e:a9:47:71:97:ec:6e:e2:46:2b:3e:3e:b5:e5:56:
                    2e:ad:89:ec:e7:2b:63:f8:af:3b:4b:60:61:b3:4d:
                    c1:75:44:4e:0d:ed:3b:97:b7:6a:d2:43:6c:07:58:
                    6e:6a:a7:31:f6:d1:0c:28:90:6c:9b:43:08:ce:45:
                    a6:23:66:a5:1f:77:ec:6a:d8:d2:ce:99:c2:bc:5d:
                    88:7b:78:f5:43:01:f1:19:69:6e:09:12:0d:09:e6:
                    d2:f9:a7:62:33:e5:44:75:50:47:23:38:67:d6:45:
                    a0:8e:a5:54:d5:18:1b:e1:b7:db:92:a0:7e:d1:55:
                    0d:b1:e0:e8:f9:c9:7c:7f:dd:48:87:6b:7d:5a:c7:
                    37:80:e6:93:b9:89:67:4c:cb:ac:cb:40:6e:60:ed:
                    46:df:f7:2e:ad:f5:ff:e7:6b:42:f7:98:32:04:7a:
                    3d:59:29:45:55:b9:4e:a6:32:73:04:f5:34:56:e0:
                    1a:2e:bf:8c:ef:cd:cc:93:c7:3b:2c:df:60:79:60:
                    cc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AB:F5:F8:5D:E4:B9:8D:71:3B:D0:15:45:62:72:D5:99:E6:E9:5B
            X509v3 Authority Key Identifier:
                keyid:10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:db:85:73:cc:6b:1c:08:3d:f9:e2:3f:8f:89:ac:c7:d7:28:
         04:b2:05:bc:6c:f9:d2:66:8a:e0:a8:53:05:5e:cf:af:5f:94:
         ae:b1:04:29:e8:b6:a0:cf:63:5b:45:82:17:6e:6f:ea:d2:96:
         6f:48:c3:28:f5:82:f4:30:ce:e9:bf:69:a3:8c:12:42:a2:b6:
         15:e1:f2:43:0e:30:e1:15:5b:8b:fd:cb:99:d8:2b:4d:52:41:
         8c:f8:1a:c4:3d:c8:bf:96:e7:3b:69:80:2b:e0:96:6e:f5:6f:
         d9:03:5e:bb:39:18:09:b1:53:38:78:af:9d:b0:a5:b5:95:dd:
         f3:67:44:6e:15:19:c8:9b:44:bc:7e:a5:0d:ee:27:83:80:ad:
         f9:cd:ec:4a:ec:bd:fc:13:7d:e1:b9:90:7a:0e:65:7b:ae:30:
         45:80:82:9f:57:84:cd:25:c7:80:e6:53:46:70:05:0a:1b:a1:
         09:f6:c6:e2:ce:6c:01:d9:37:7b:15:a8:25:1a:7a:ca:b6:4d:
         d1:84:c7:2b:0b:a7:03:7c:79:2b:27:c5:ed:2e:e1:8e:eb:f2:
         2c:72:0d:a0:50:ce:5f:bf:f5:5f:fb:7f:cc:38:e1:1c:b4:e6:
         6c:10:e0:44:7f:01:f7:8b:a2:8c:e9:95:ef:ff:c5:f7:36:9a:
         9c:d2:fc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 06:33:24 2026 by rpki-client