Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
File:                     EbBIqvW7QvbE2dOHrSen6yGfOII.mft (raw, json)
Hash identifier:          yFU4mlDARpDPGsVk41h5So3L7gPc8lbaYy5ExonHcbo=
Subject key identifier:   07:CD:E0:46:57:C9:4F:C5:55:1E:51:DB:0C:DA:0B:28:56:85:AF:0A
Authority key identifier: 11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82
Certificate issuer:       /CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
Certificate serial:       01A109944FFC4CD73FBD2BBDBCD4F60BE824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
Manifest number:          0517
Signing time:             Mon 05 Oct 2026 01:01:17 +0000
Manifest this update:     Mon 05 Oct 2026 01:01:17 +0000
Manifest next update:     Tue 06 Oct 2026 01:01:17 +0000
Files and hashes:         1: EbBIqvW7QvbE2dOHrSen6yGfOII.crl (hash: F68wstklz2nj8skWrLPHvERX5ti4ldApbo5/bFeAF8Y=)
                          2: V6MbHQ4IlulkadnPNR4GjRCTQBc.roa (hash: n6NjwhnZOFT/xKrdDQmsqkf3f28sKCszOE0xexeKQjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:09:94:4f:fc:4c:d7:3f:bd:2b:bd:bc:d4:f6:0b:e8:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11b048aaf5bb42f6c4d9d387ad27a7eb219f3882
        Validity
            Not Before: Oct  5 01:01:17 2026 GMT
            Not After : Oct  6 01:01:17 2026 GMT
        Subject: CN=07cde04657c94fc5551e51db0cda0b285685af0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8a:0f:0f:73:d1:d6:2a:f9:fe:45:be:28:18:
                    0c:ce:f9:84:95:3c:50:b4:e0:47:77:06:2f:ad:72:
                    3a:a5:78:21:fa:96:e8:8e:3a:a4:83:da:13:59:39:
                    e7:73:b0:21:91:77:7c:d1:7a:e9:23:05:ff:4d:99:
                    1f:60:5d:04:1a:4e:0a:23:72:5a:66:be:d3:66:5d:
                    8b:42:e2:28:4d:c5:f2:f2:6b:38:45:c7:64:3c:16:
                    8a:11:dc:60:55:20:37:ef:c4:13:c5:89:c1:66:d6:
                    13:31:49:4d:c5:49:6c:16:8b:81:cb:0e:7d:ed:73:
                    02:d7:84:69:84:aa:d0:4b:c4:81:f0:47:22:68:d4:
                    7b:58:44:2d:1e:25:f1:88:b1:85:ad:29:ba:7f:75:
                    88:28:5b:71:a1:42:ec:85:b6:53:fa:63:f2:d7:aa:
                    ce:f8:84:67:d4:aa:5a:0a:0e:1c:d0:be:fe:e2:99:
                    4a:bc:05:28:4c:08:92:ed:55:f2:2d:bd:2b:b0:00:
                    1a:2b:b4:dd:ec:7c:b1:a8:76:d4:e9:aa:bb:52:3b:
                    84:ef:e8:6a:60:0b:82:8f:ca:83:e7:54:0b:04:41:
                    32:f5:7a:de:fd:a0:43:a7:04:99:1f:38:96:38:14:
                    b3:dc:e2:45:14:3b:17:52:ef:4a:92:ff:dc:1b:e0:
                    bf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CD:E0:46:57:C9:4F:C5:55:1E:51:DB:0C:DA:0B:28:56:85:AF:0A
            X509v3 Authority Key Identifier:
                keyid:11:B0:48:AA:F5:BB:42:F6:C4:D9:D3:87:AD:27:A7:EB:21:9F:38:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbBIqvW7QvbE2dOHrSen6yGfOII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/7be9b2-2e19-4fe0-b17a-5cf3e76a1ebc/1/EbBIqvW7QvbE2dOHrSen6yGfOII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:dc:80:ef:67:ff:02:83:25:80:73:3f:ca:ca:20:99:16:c6:
         79:97:93:be:98:57:84:26:f1:18:c5:fc:e5:56:16:46:b3:01:
         14:03:a7:d9:eb:3f:4c:6a:b3:cd:4d:c6:cb:c1:23:e1:9b:82:
         9b:32:da:ce:4a:bc:02:f4:47:a4:61:12:58:4f:20:0b:66:2b:
         36:5d:cd:a6:4a:c4:28:80:77:e4:99:47:bb:1e:1a:51:0b:d7:
         43:44:40:8c:6e:7c:8e:31:e2:92:4c:98:ce:a8:94:53:17:72:
         b7:08:af:45:58:4b:01:9b:45:92:2f:c1:26:c4:ed:94:3c:ff:
         24:97:91:ad:01:62:ff:d4:67:c0:af:fc:82:2b:ef:00:5b:fc:
         41:5c:6c:99:ca:44:67:00:bd:53:e7:0c:e6:0a:36:1b:25:44:
         e4:80:1d:f3:b0:bc:23:cc:b6:84:ae:dd:a9:32:85:ca:12:98:
         61:50:74:76:34:6e:9c:b4:94:c9:28:53:ad:e4:7f:d3:a0:a2:
         90:f5:18:b5:06:92:a8:fd:51:67:c3:6c:24:d0:10:44:f0:3a:
         10:89:df:5a:5f:44:6a:fe:95:13:eb:38:1e:3e:26:fc:ca:2e:
         6d:61:46:bf:c7:54:96:00:04:ee:d3:eb:41:86:8b:d0:53:9a:
         93:d5:c0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:58:13 2026 by rpki-client