Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft
File:                     EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft (raw, json)
Hash identifier:          SrAebX68gDYve6L1w9jNDa+CCsQHb+IM4c+EjoCGMBU=
Subject key identifier:   B1:48:D6:9A:18:DB:BF:F5:BC:96:70:23:98:23:1A:FA:19:F3:68:43
Authority key identifier: 11:02:74:B4:5D:8F:ED:46:3E:D1:E7:66:ED:71:77:0F:FD:89:91:86
Certificate issuer:       /CN=110274b45d8fed463ed1e766ed71770ffd899186
Certificate serial:       01A06FF159E9223E1D38B014B44152B2EFAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft
Manifest number:          038C
Signing time:             Sat 05 Sep 2026 05:01:23 +0000
Manifest this update:     Sat 05 Sep 2026 05:01:23 +0000
Manifest next update:     Sun 06 Sep 2026 05:01:23 +0000
Files and hashes:         1: EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl (hash: TtAgS9Lx6XVI30GH+RyB5HP27Dfp1GQgy11LIo3tb28=)
                          2: LWh1HaeL5ortaVH3kik7DExqh78.roa (hash: qIpCeksyx0E8+hCHbqahdqByF+0cRttYVhOA2hnKbtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:f1:59:e9:22:3e:1d:38:b0:14:b4:41:52:b2:ef:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110274b45d8fed463ed1e766ed71770ffd899186
        Validity
            Not Before: Sep  5 05:01:23 2026 GMT
            Not After : Sep  6 05:01:23 2026 GMT
        Subject: CN=b148d69a18dbbff5bc96702398231afa19f36843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c7:1f:34:f8:81:3b:b8:0a:8a:d9:42:f7:ab:
                    58:7b:e8:fb:09:f2:a5:14:c6:c1:8e:08:99:11:7a:
                    cf:42:77:49:0f:61:60:72:ca:2c:3c:fb:d0:81:22:
                    ae:7f:54:13:42:00:f6:46:ef:5e:ca:56:9d:4e:84:
                    70:b9:37:bd:3b:f6:1b:21:c9:65:cb:d4:6e:1c:aa:
                    d2:fd:5b:75:2f:20:d2:e8:a6:27:c9:f7:65:1f:61:
                    b6:71:7e:4f:38:90:83:69:8f:b6:f2:bd:b2:93:f2:
                    a9:2b:5d:53:9a:7c:0d:26:76:11:9d:11:b9:fa:7f:
                    f5:c2:dd:75:e2:c2:2f:b3:cc:ad:45:60:25:38:44:
                    20:46:d4:99:2c:78:1d:94:68:96:e2:c4:a4:c3:31:
                    40:ec:ca:0f:55:48:0d:49:f8:01:f7:96:b6:92:a8:
                    bd:c9:02:7d:f0:fc:a8:1d:27:16:66:f5:9c:db:75:
                    10:6a:dd:53:0c:d7:68:2a:58:a9:0b:d3:8e:d0:54:
                    87:ab:b2:b5:bf:1a:80:d0:25:a2:43:6c:03:8e:8f:
                    ee:68:3e:7c:7f:5f:2b:17:a2:8d:87:27:a4:cd:e4:
                    35:0e:9f:d0:f8:c3:89:47:dc:d0:d5:b8:8e:aa:52:
                    41:bb:45:ef:bc:28:a1:cc:d2:21:97:cf:d1:9e:3b:
                    97:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:48:D6:9A:18:DB:BF:F5:BC:96:70:23:98:23:1A:FA:19:F3:68:43
            X509v3 Authority Key Identifier:
                keyid:11:02:74:B4:5D:8F:ED:46:3E:D1:E7:66:ED:71:77:0F:FD:89:91:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:80:fd:39:de:0b:02:ef:0f:75:a6:c9:d2:d1:0b:cd:83:30:
         60:e8:18:a7:8e:80:71:20:fb:d5:95:dc:fa:dc:9e:dd:e7:a2:
         83:3a:f7:23:62:39:f6:34:30:76:0e:76:d8:5e:3c:9d:f1:b3:
         ca:40:49:eb:86:d7:71:c9:99:f8:be:11:89:a7:b4:39:cf:8a:
         2f:5f:72:0c:c6:fb:67:0d:bc:70:83:17:88:d1:b2:a0:18:50:
         d8:a6:3c:55:34:62:78:19:31:9c:f5:7e:29:52:09:46:26:95:
         52:8d:32:e1:3f:ae:de:a1:20:e9:1c:67:35:7f:ee:4e:16:39:
         02:b6:63:df:26:33:b7:f1:26:89:a7:c6:3b:aa:05:50:3c:62:
         a9:ff:f4:d9:4e:a2:86:92:9b:cb:1a:b4:8c:b9:d7:97:1b:f8:
         75:e9:e7:3c:10:60:dd:5b:b9:14:2f:50:ec:7c:8f:35:78:4e:
         b2:fb:9e:b5:a5:d8:36:cf:2e:9c:d7:fc:07:38:56:84:61:93:
         cf:e1:f8:be:02:e8:54:27:21:dc:9e:e0:31:c6:90:ce:65:e8:
         96:8c:a2:eb:58:af:d7:d3:b0:42:c7:b7:bd:07:85:a7:f1:63:
         cc:f1:d2:9f:b1:a5:63:4f:3a:56:95:ae:e3:f3:fc:71:c4:4c:
         5c:94:80:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:00:49 2026 by rpki-client