Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File:                     EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier:          CNOQRuhY2Rqegfi6EEym2l4BmzG/hMKakA/ct0iiLao=
Subject key identifier:   5C:05:AC:28:6C:66:0D:FE:09:02:8B:BD:D0:A3:0C:4E:12:C8:C5:9E
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer:       /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial:       01A00093ABF70CDCB1CC1ED99C440C5AC257
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number:          0A39
Signing time:             Fri 14 Aug 2026 14:01:12 +0000
Manifest this update:     Fri 14 Aug 2026 14:01:12 +0000
Manifest next update:     Sat 15 Aug 2026 14:01:12 +0000
Files and hashes:         1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: OT3b5dGvUIzNS8OsNlE9hGYgdVZUHXxBhMAYQ5sMQoM=)
                          2: q7k3Jgi45VhxVB2FaU-fxYdycok.roa (hash: aUl7kjDi6eCHksQ88LJAOR22rf6+FmaVUEOAmzpORAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:ab:f7:0c:dc:b1:cc:1e:d9:9c:44:0c:5a:c2:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
        Validity
            Not Before: Aug 14 14:01:12 2026 GMT
            Not After : Aug 15 14:01:12 2026 GMT
        Subject: CN=5c05ac286c660dfe09028bbdd0a30c4e12c8c59e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8b:00:b2:f9:93:8b:e4:80:f9:b4:90:43:b8:
                    fb:f7:b5:ec:51:0e:48:9a:0e:53:0a:53:a9:0d:40:
                    d4:30:38:7d:be:e7:50:aa:a8:c2:ad:c9:62:9d:9d:
                    11:9a:d5:e6:9c:d1:34:49:1d:81:62:f5:f0:e7:77:
                    ae:50:98:f1:a0:ba:56:f0:c1:b5:bf:9b:c0:1c:24:
                    da:28:3d:c0:f2:c9:6f:cd:b8:1f:aa:56:a4:4b:39:
                    5d:33:c4:d1:57:a8:11:04:48:f4:f7:c3:02:bb:20:
                    43:20:43:6b:8f:cc:57:08:4e:1d:c8:63:17:8c:d7:
                    df:19:81:d5:fd:2d:a0:b3:2d:f9:fd:80:48:ae:19:
                    01:80:75:4f:cb:25:4b:79:a5:62:c9:41:4c:32:ee:
                    c5:87:2f:b6:b4:ad:46:71:18:76:d5:ea:c1:75:8c:
                    20:c1:31:1d:8d:af:f4:70:f8:1f:69:4f:54:24:1a:
                    77:b1:8c:51:8b:b6:35:ef:16:05:a5:5c:fd:7c:4d:
                    f5:13:e6:05:71:1b:06:18:f0:ba:f7:61:6b:4e:d9:
                    47:4d:f0:c0:3b:2d:63:6b:3f:cc:b1:d1:72:ca:65:
                    76:fd:ac:ef:89:fb:e3:b1:36:ae:20:7e:46:76:ff:
                    37:8f:b5:40:00:72:c6:cb:4a:83:29:81:bd:8f:61:
                    4f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:05:AC:28:6C:66:0D:FE:09:02:8B:BD:D0:A3:0C:4E:12:C8:C5:9E
            X509v3 Authority Key Identifier:
                keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:36:05:67:e3:67:06:92:b2:d1:0a:96:69:89:55:c5:88:af:
         25:91:85:61:0f:4c:d5:26:e0:da:74:8d:26:87:27:de:7d:10:
         f4:4c:c5:ac:cd:c4:e8:77:0c:e8:28:58:5b:be:d5:29:37:47:
         11:d9:60:cb:81:15:83:e4:4c:16:69:17:57:d1:10:52:20:12:
         b7:9f:0e:7f:2a:bd:60:9d:0b:82:be:ea:8e:42:01:c4:f7:a1:
         ef:6a:cb:c5:88:7c:44:e7:7e:e4:68:c0:21:a1:bb:2f:f6:b5:
         bf:50:d9:f7:a9:07:60:98:cb:58:4b:cf:79:e1:d5:66:ba:36:
         a8:9f:79:3a:a2:5f:63:1b:b6:cf:89:55:94:57:5e:a5:cf:e3:
         ee:77:2c:fd:c3:55:80:5e:df:74:54:5f:5a:fc:66:2f:aa:ea:
         0a:dc:6a:f3:db:30:fb:30:ba:ef:d1:85:2b:ae:c8:51:8f:1d:
         ef:6e:8c:95:9f:0f:43:ad:b5:a8:9e:0a:2a:91:a9:35:c6:92:
         2f:30:2d:c8:c5:b6:d9:dc:9f:0a:a1:75:6e:49:43:af:96:16:
         4e:b3:78:d9:38:be:c0:22:08:ab:f5:04:ac:91:51:b1:bf:61:
         e7:58:d6:00:c9:54:57:8e:1f:87:99:9c:e1:b8:1e:d2:a9:f3:
         02:a4:c3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:32 2026 by rpki-client