Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
File:                     FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft (raw, json)
Hash identifier:          n+VFrl8e/53r+7/wvzQpnuGMlHPhh8Izd2u8Ux8ai8o=
Subject key identifier:   E2:E9:34:C9:22:15:EF:E4:DF:5F:E9:8B:09:C6:75:12:6A:6F:5D:FE
Authority key identifier: 16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0
Certificate issuer:       /CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0
Certificate serial:       01A13A49BABDBC996546AD93989008457329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
Manifest number:          1AA3
Signing time:             Wed 14 Oct 2026 12:01:12 +0000
Manifest this update:     Wed 14 Oct 2026 12:01:12 +0000
Manifest next update:     Thu 15 Oct 2026 12:01:12 +0000
Files and hashes:         1: FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl (hash: WcySkGbW4MGNlxBCeI6sQneUSCfdw4Yeep7/iclN6dA=)
                          2: OE-vaTYmCvvkebOY3MrRx4ljmi8.roa (hash: 0FkLAj5wepnlrTHbT8freYwSEALt3SIuuxDXD7TpUMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 12:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:49:ba:bd:bc:99:65:46:ad:93:98:90:08:45:73:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0
        Validity
            Not Before: Oct 14 12:01:12 2026 GMT
            Not After : Oct 15 12:01:12 2026 GMT
        Subject: CN=e2e934c92215efe4df5fe98b09c675126a6f5dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2d:b2:cb:20:1e:50:e3:46:a5:b2:93:49:3b:
                    cb:2e:c8:9d:69:8c:4a:5d:c0:28:b5:4a:83:8f:f0:
                    17:a2:4b:41:de:fa:0c:16:ff:7f:f3:f8:1d:53:b0:
                    24:e8:e4:2f:ca:4c:ab:67:9f:41:3b:c5:c4:e9:3c:
                    c1:c5:01:23:a8:65:aa:22:4b:40:1a:cf:0f:c2:a6:
                    9e:3a:6c:27:05:68:64:a0:cc:e5:77:df:05:20:0f:
                    f6:ab:72:30:38:46:a1:39:3d:18:45:f0:f5:de:88:
                    e5:d2:e5:aa:38:a5:30:5c:62:80:63:46:c7:0e:2b:
                    b0:e5:76:4e:3e:b1:8b:1f:de:74:bf:43:47:67:72:
                    88:cb:0e:1c:04:7d:39:e8:bb:71:86:fe:d9:5f:71:
                    f1:69:01:9c:cd:56:4a:43:21:c3:c6:36:3a:50:d1:
                    6c:5d:7b:61:21:87:9b:21:25:56:e5:24:78:d2:b9:
                    91:c7:c7:72:3e:f5:9f:39:5f:28:a4:69:ea:11:b7:
                    fe:cc:df:6c:fc:98:e9:e1:78:c6:98:48:90:57:96:
                    81:a1:cf:4b:5e:ff:ab:e1:70:4a:46:9c:64:f7:6e:
                    a8:1f:81:d3:d9:74:e4:0b:7b:eb:9a:13:14:1b:f0:
                    82:3c:7a:5a:70:01:25:02:01:37:24:44:7f:fd:96:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E9:34:C9:22:15:EF:E4:DF:5F:E9:8B:09:C6:75:12:6A:6F:5D:FE
            X509v3 Authority Key Identifier:
                keyid:16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:85:37:ef:1c:c3:fb:b7:63:48:b7:d7:a3:44:37:54:97:07:
         50:8f:46:5c:0a:32:03:90:c5:f5:e1:20:9e:a4:69:f8:a9:28:
         b3:8b:9c:d1:ee:d3:b6:70:f5:a2:4f:c9:fb:a1:75:ca:96:24:
         87:fb:d5:5f:38:5a:bf:fc:25:50:11:e3:28:12:61:da:51:fd:
         a3:63:79:3d:f0:ef:ce:d5:a2:62:c2:51:00:6c:84:45:27:4e:
         22:9d:be:bf:06:14:1d:fb:aa:c7:cf:ee:be:a6:f2:84:b3:f0:
         8a:db:3b:1c:d6:62:c0:b0:66:e3:e0:8c:bd:46:cd:f5:53:59:
         6c:b3:16:33:9b:84:c0:e0:75:75:c0:f0:18:76:c3:1d:03:55:
         de:8d:fa:c1:0c:5d:49:58:13:b4:b6:7d:31:78:76:23:92:75:
         d8:be:57:cc:15:56:75:4d:44:8d:8a:fe:0e:3c:38:b4:75:ae:
         b0:54:f7:4b:5e:bb:94:87:01:08:69:01:53:24:f9:8e:8f:8d:
         40:e8:09:24:69:0e:91:87:db:8d:ab:5a:e0:43:5d:05:e9:2c:
         26:eb:61:6f:2d:d5:00:4c:ff:47:8b:19:20:0e:21:28:e1:91:
         6e:34:e6:eb:4c:0f:95:78:d8:54:f3:d1:6c:eb:9c:38:a2:1e:
         eb:7c:90:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:29:51 2026 by rpki-client