Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
File:                     2UeygTSKvawkwr0W2gZ3XKdV9BA.mft (raw, json)
Hash identifier:          3kLgwtSNX2Iermcrvc2TcwVF6QaltLwKPrQbup+os3o=
Subject key identifier:   74:A8:0F:FA:B3:11:70:A6:C1:6D:5F:C7:4E:24:FB:81:9F:AE:D6:8E
Authority key identifier: D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10
Certificate issuer:       /CN=d947b281348abdac24c2bd16da06775ca755f410
Certificate serial:       01A13F397D4BED01CC609F27B972413547F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
Manifest number:          1112
Signing time:             Thu 15 Oct 2026 11:01:34 +0000
Manifest this update:     Thu 15 Oct 2026 11:01:34 +0000
Manifest next update:     Fri 16 Oct 2026 11:01:34 +0000
Files and hashes:         1: 2UeygTSKvawkwr0W2gZ3XKdV9BA.crl (hash: CrtJqIqdlIzZZwQbtvTa9Rif2j8Jd3koDsQ9S0Jf7k4=)
                          2: 30R6wB6gk0tAdQUb1nh5pGtizL0.roa (hash: 3d2YX3XYruYbRwjkdhZqOWEla3AbBvwumGbHye9XwtA=)
                          3: N1AbqW-LglnJHa8JDMfRFCkNqAg.roa (hash: pucNpOTLMDRyvd9Y5PyCoo7bgwR3bl/sj/khCUp1yHs=)
                          4: g9DlwoPcP__m6NZqUMdk9BeZ8_s.roa (hash: kBEZ3OB5J/nHjPA7g4sqM3oE29ycmGA4VRa1os8i/Po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 11:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:39:7d:4b:ed:01:cc:60:9f:27:b9:72:41:35:47:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d947b281348abdac24c2bd16da06775ca755f410
        Validity
            Not Before: Oct 15 11:01:34 2026 GMT
            Not After : Oct 16 11:01:34 2026 GMT
        Subject: CN=74a80ffab31170a6c16d5fc74e24fb819faed68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:bd:38:c6:61:7c:6e:47:cb:75:44:c5:a2:f7:
                    ab:99:fe:4a:41:0a:f3:67:d8:7e:a3:b4:50:1b:62:
                    bf:28:cf:02:3f:71:68:62:d0:79:a5:b2:09:34:89:
                    8a:e6:79:01:a6:70:4a:f6:03:2d:4c:7b:6f:3d:34:
                    4d:c1:5e:85:82:34:33:14:07:f0:53:b7:ee:b0:a1:
                    e9:e9:1f:2d:61:55:af:60:aa:5f:0e:06:80:d4:f2:
                    93:7f:b3:ce:f2:6d:ea:01:88:ec:e9:71:e2:5f:24:
                    48:d9:e5:73:20:b0:e6:7b:1d:67:db:d8:31:54:69:
                    85:c3:d8:cf:d2:e1:cc:fa:0c:ff:99:54:08:74:85:
                    94:13:6d:70:8d:6a:20:85:f5:17:74:4a:18:07:6e:
                    2d:c1:37:59:85:5a:6e:da:84:68:6b:a9:2a:c4:54:
                    2d:7b:55:6c:d4:ae:d0:91:80:82:83:61:7e:8f:d1:
                    12:4a:88:8c:8d:41:ee:9a:83:83:37:f9:4b:4c:cc:
                    e3:c1:e0:7f:7e:a0:84:c1:c9:16:54:bf:2a:88:19:
                    c9:e5:27:84:03:61:f8:94:3e:11:00:f1:4f:03:fb:
                    3e:86:20:1b:cb:23:76:93:37:e6:82:07:98:a1:86:
                    57:96:30:91:0e:19:11:94:21:50:8f:55:fe:31:44:
                    51:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A8:0F:FA:B3:11:70:A6:C1:6D:5F:C7:4E:24:FB:81:9F:AE:D6:8E
            X509v3 Authority Key Identifier:
                keyid:D9:47:B2:81:34:8A:BD:AC:24:C2:BD:16:DA:06:77:5C:A7:55:F4:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UeygTSKvawkwr0W2gZ3XKdV9BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d69830-ccb1-4675-ad2f-66ac0dba5bf2/1/2UeygTSKvawkwr0W2gZ3XKdV9BA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0e:32:f5:d7:5d:47:68:d9:23:4e:37:e9:3a:10:9c:40:5f:
         26:b5:80:5e:f5:19:e1:01:63:bd:09:a8:1c:a7:50:0f:21:0d:
         6b:f6:46:7a:dc:fc:47:f9:77:c6:0e:df:b3:d5:29:0b:62:64:
         6b:f3:70:71:b0:79:0a:d0:1a:62:52:b4:30:36:96:1e:c9:71:
         98:78:c2:70:84:f6:39:2d:1f:20:00:1a:94:5b:f1:11:2f:cc:
         3e:71:97:ea:64:33:e8:e1:62:b7:dc:d5:54:05:e4:e6:7d:22:
         96:be:83:68:26:79:6a:4e:45:1e:65:db:ba:b2:17:97:2e:46:
         c8:3f:35:20:1c:ec:df:24:80:d3:db:bc:47:27:48:f4:c3:05:
         6e:6d:31:bb:c1:bf:43:36:45:fa:b9:97:42:c6:98:06:55:92:
         0a:dc:b0:63:23:f3:52:a1:cf:10:27:73:44:81:c3:3c:80:07:
         97:d8:ff:85:cd:87:af:b1:f7:bd:4d:8d:f1:73:d5:08:2d:45:
         43:6a:b5:86:ba:dc:61:92:ea:1e:28:a0:76:83:35:95:b5:77:
         1c:50:15:45:72:dc:1a:81:6b:40:50:be:bb:45:2a:cb:c3:e3:
         1b:b5:c2:7b:a2:27:24:eb:0c:d6:36:70:6d:c8:4b:c0:a0:a8:
         5a:d6:45:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:33:11 2026 by rpki-client