Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File:                     EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier:          SX9LBRzwbBIsGq/VwzZPal+pUOCmofvzCCGOVVxjuzk=
Subject key identifier:   8A:F0:38:55:E7:DC:4C:AF:41:42:71:E4:D4:14:3F:83:C3:44:75:39
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer:       /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial:       01A13F39CF39232A53467B129FF5C87103C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number:          0ADE
Signing time:             Thu 15 Oct 2026 11:01:55 +0000
Manifest this update:     Thu 15 Oct 2026 11:01:55 +0000
Manifest next update:     Fri 16 Oct 2026 11:01:55 +0000
Files and hashes:         1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: IAg/dn99lV5hfGP6YnE5o6AAc5AXy4jUXcw5gqlXkRo=)
                          2: q7k3Jgi45VhxVB2FaU-fxYdycok.roa (hash: aUl7kjDi6eCHksQ88LJAOR22rf6+FmaVUEOAmzpORAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 11:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:39:cf:39:23:2a:53:46:7b:12:9f:f5:c8:71:03:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
        Validity
            Not Before: Oct 15 11:01:55 2026 GMT
            Not After : Oct 16 11:01:55 2026 GMT
        Subject: CN=8af03855e7dc4caf414271e4d4143f83c3447539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7e:f9:f1:04:69:be:a9:98:88:56:36:d4:68:
                    e7:30:45:41:44:53:65:67:2b:4b:91:69:47:a7:3f:
                    74:49:f6:aa:2d:cb:a8:e6:ee:a9:90:4f:18:e7:aa:
                    01:63:b5:3e:98:54:e8:22:c5:7b:0d:5c:53:07:f5:
                    6c:fe:3b:9a:46:56:03:dd:b5:3c:76:1a:44:c1:e0:
                    32:88:3f:3b:4a:74:17:15:8f:6b:29:3e:cf:bb:da:
                    fe:d4:d4:cd:a8:8c:fd:ca:cf:71:8c:fa:12:80:71:
                    a5:4c:73:06:5d:85:c9:b2:1a:52:57:75:31:d1:8b:
                    24:35:b5:95:f8:80:cc:23:17:3a:9f:d4:20:64:a2:
                    7e:39:52:5a:e0:a0:e0:fa:72:ec:77:c8:b7:a6:42:
                    f0:da:c1:87:b8:db:16:a4:8e:7e:19:a4:f3:f3:ef:
                    cd:1b:2a:95:c0:5a:20:02:d9:46:b2:b5:2e:a6:5a:
                    30:2a:a9:38:dc:0b:df:87:15:ba:81:41:cc:35:d9:
                    50:6d:86:f0:45:af:29:cc:33:ef:b6:dd:28:ca:e2:
                    ff:d3:cd:83:e1:dd:25:f6:70:2d:09:32:18:4f:a0:
                    f0:a4:b3:b5:ed:82:d4:34:d4:96:5f:79:94:fa:de:
                    bd:0e:89:f8:ec:f3:99:f7:49:33:51:cf:a1:7b:09:
                    6a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F0:38:55:E7:DC:4C:AF:41:42:71:E4:D4:14:3F:83:C3:44:75:39
            X509v3 Authority Key Identifier:
                keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:32:3a:4a:9b:46:6a:53:07:0b:9f:1f:8f:a0:0d:03:18:f2:
         25:52:97:6a:e6:5a:24:46:c9:fa:35:31:d5:b8:ae:0b:d8:cd:
         a6:15:7b:bd:7f:b9:dd:a0:38:db:3e:26:38:e4:18:db:cd:1b:
         de:29:32:45:60:2b:3c:0b:12:3b:7a:cc:59:d5:e9:81:20:99:
         f9:d2:a5:46:bb:af:68:5d:3a:bd:a5:cf:02:c9:c0:02:7c:20:
         83:1d:30:25:01:43:92:3b:5c:7d:96:df:9b:ad:0a:21:6c:34:
         5a:dd:6a:02:78:b3:04:9f:3a:6a:18:41:07:a5:dc:ed:14:8e:
         18:16:d6:94:45:b6:e6:d8:78:72:17:9d:49:b0:e5:15:c9:b4:
         1c:96:ec:7a:ef:5a:b0:53:69:19:0d:27:bf:73:0f:e7:4d:33:
         09:32:ae:17:de:3d:9d:14:2f:c7:b3:a6:52:3d:d3:44:f5:77:
         76:58:35:21:c2:f8:02:12:b0:d7:43:9c:8e:22:7e:d8:96:f0:
         8e:c8:2c:63:6c:d6:40:03:c1:d6:68:25:fb:2e:3d:cb:91:b9:
         43:85:42:c4:11:48:87:fc:e7:dc:68:13:ee:2c:cb:57:27:0d:
         4a:8b:b2:30:58:a6:27:b0:35:63:b3:fb:c4:0c:b1:e4:fd:ee:
         66:0a:46:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:06:31 2026 by rpki-client