Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.mft
File:                     ElV9TH4Hxulcs5EpLcEYZvZhn10.mft (raw, json)
Hash identifier:          a7cJilJUFMgAmY1/VD00wtajWWfvNKGoW3ZXnOffRSE=
Subject key identifier:   BE:FE:D2:EF:39:F8:9E:B0:B1:1B:24:EC:2D:EE:A8:B6:C8:44:FB:6C
Authority key identifier: 12:55:7D:4C:7E:07:C6:E9:5C:B3:91:29:2D:C1:18:66:F6:61:9F:5D
Certificate issuer:       /CN=12557d4c7e07c6e95cb391292dc11866f6619f5d
Certificate serial:       01A174A7420901577206B57DB134234B517E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ElV9TH4Hxulcs5EpLcEYZvZhn10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.mft
Manifest number:          0336
Signing time:             Sun 25 Oct 2026 20:01:20 +0000
Manifest this update:     Sun 25 Oct 2026 20:01:20 +0000
Manifest next update:     Mon 26 Oct 2026 20:01:20 +0000
Files and hashes:         1: 8iHCL-HIsWmSQWcboIJtcTz5dA0.roa (hash: yMhfyArXlBp53ltADAhKVaNnmVsKrW5l1Xn8ONQr2Og=)
                          2: ElV9TH4Hxulcs5EpLcEYZvZhn10.crl (hash: +9miY/QKWhqxx1nIXTFwVIiB9hJOm+KK2z4k0wQyKwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ElV9TH4Hxulcs5EpLcEYZvZhn10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 20:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:a7:42:09:01:57:72:06:b5:7d:b1:34:23:4b:51:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12557d4c7e07c6e95cb391292dc11866f6619f5d
        Validity
            Not Before: Oct 25 20:01:20 2026 GMT
            Not After : Oct 26 20:01:20 2026 GMT
        Subject: CN=befed2ef39f89eb0b11b24ec2deea8b6c844fb6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e1:29:4f:71:a5:0f:72:a4:53:60:34:c3:d1:
                    18:5e:23:92:d9:61:cb:bb:1d:1f:e6:ef:7f:86:b2:
                    a8:55:f8:8e:65:63:02:e6:13:23:d9:b5:5b:69:d6:
                    4f:fe:72:c0:f5:3c:60:8e:05:6e:d7:61:db:76:a7:
                    53:76:e2:51:d7:47:21:ac:c1:fe:ca:a9:e2:6c:43:
                    0c:23:6e:46:70:a1:3f:a9:8c:e0:a7:b1:99:b8:ff:
                    86:9b:cb:25:0d:06:16:12:e0:8a:cd:ca:ed:83:a1:
                    e0:a6:6e:7c:92:c3:15:d5:98:55:83:1e:e1:ed:94:
                    62:c1:06:d1:0e:c2:39:4e:b5:b8:a6:3a:52:4f:30:
                    57:39:82:17:8f:69:39:28:33:93:08:01:c1:8e:d8:
                    f5:84:f4:1f:ee:b4:21:76:00:51:5c:74:bf:65:7e:
                    0a:b1:07:5c:e2:e6:ab:d6:e7:ae:a5:4b:47:35:3a:
                    3a:ad:55:24:78:8c:92:7f:07:35:29:71:d0:dd:45:
                    3d:9e:19:fd:d0:32:4b:3c:c3:74:65:12:5a:76:2b:
                    9a:dd:0c:dc:0e:8b:37:74:dd:55:ed:ad:8f:9a:0b:
                    53:22:cf:a9:94:42:a4:94:66:c1:76:44:a5:cb:e3:
                    0e:02:ec:6d:e8:85:fd:f4:5f:48:d7:31:67:71:70:
                    79:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FE:D2:EF:39:F8:9E:B0:B1:1B:24:EC:2D:EE:A8:B6:C8:44:FB:6C
            X509v3 Authority Key Identifier:
                keyid:12:55:7D:4C:7E:07:C6:E9:5C:B3:91:29:2D:C1:18:66:F6:61:9F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElV9TH4Hxulcs5EpLcEYZvZhn10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:99:e7:e1:a5:81:f3:02:84:2e:2f:5b:65:41:f7:6d:05:50:
         84:ad:f1:21:55:70:92:16:05:53:ab:76:fd:14:e9:74:7a:7c:
         54:82:16:11:f3:23:b6:9b:65:b8:76:11:d2:0b:d2:1e:44:97:
         28:c7:e7:f2:0d:86:3d:51:72:a4:c9:8e:94:d6:59:56:bc:45:
         a0:78:c6:6a:91:e8:96:88:cf:53:7b:32:ae:44:7b:23:5f:da:
         fb:d0:88:ad:cc:66:e8:c8:6b:75:d2:b4:0c:8d:ef:5f:95:50:
         b9:d6:a9:a3:b9:f6:db:75:96:ef:26:04:1c:bb:9a:c9:96:5d:
         38:34:54:67:14:e8:c3:e9:50:71:39:dc:0c:f2:bd:da:1e:5b:
         e3:a7:88:33:40:43:98:45:c2:6f:0b:5b:6f:62:e5:90:53:40:
         04:2e:1e:9c:51:b1:cc:3a:76:19:7b:28:15:60:53:5d:33:a8:
         4b:1a:f8:4f:6b:dc:bf:48:da:c9:b5:d5:34:53:06:1b:b9:9e:
         63:ad:d1:3c:e6:d4:b2:d0:2c:66:6f:d7:19:9d:92:ed:22:fe:
         80:9e:1a:8a:1a:f6:3b:2c:b1:c4:a1:36:de:9f:87:33:9a:04:
         1e:dc:3a:6e:f2:62:c4:7c:67:ef:13:0a:55:ee:ac:66:32:e7:
         0a:20:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:33:10 2026 by rpki-client