Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
File:                     9efoeENmtHGmpODICA-PENrmalA.mft (raw, json)
Hash identifier:          IV1OpZt2b/WGW7dZ/tS6jjGlx1wXw2Mms0CM9RslfGo=
Subject key identifier:   FD:C7:6C:AC:78:E9:99:AF:72:48:FD:48:F0:0E:F3:23:55:47:6E:60
Authority key identifier: F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
Certificate issuer:       /CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Certificate serial:       01A13E94F07579A6C452DD57F4CA210C9DDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
Manifest number:          12A9
Signing time:             Thu 15 Oct 2026 08:01:50 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:50 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:50 +0000
Files and hashes:         1: 9efoeENmtHGmpODICA-PENrmalA.crl (hash: OMvh3JUwZLcrdOGHRTDceFbdPJ/Bv9w3EmQD3FUnLWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:f0:75:79:a6:c4:52:dd:57:f4:ca:21:0c:9d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
        Validity
            Not Before: Oct 15 08:01:50 2026 GMT
            Not After : Oct 16 08:01:50 2026 GMT
        Subject: CN=fdc76cac78e999af7248fd48f00ef32355476e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:03:97:56:b9:e3:16:9d:00:f6:ca:d7:65:
                    a5:7f:5c:78:e6:77:77:14:f0:45:82:d5:6f:59:8e:
                    38:f2:70:c7:87:f8:c9:12:d6:84:98:f2:43:5d:d8:
                    ea:94:6c:10:19:ae:5f:6e:8b:17:9b:3c:8f:c6:7e:
                    fd:d9:d3:e6:27:0d:35:1c:f7:d7:ac:2c:02:f5:c6:
                    f4:6c:a0:a0:f2:82:56:24:86:e4:5e:67:df:29:d5:
                    86:d8:86:c7:93:3a:a4:8c:2a:e6:91:e0:10:d6:21:
                    a3:bc:c8:15:ca:6c:52:ae:a2:e4:8f:1f:b3:30:61:
                    60:bf:9b:07:4d:de:21:19:6f:a0:87:ff:f3:9b:47:
                    d2:03:cb:c1:f0:7e:96:36:1a:e6:77:d1:a7:7d:c8:
                    a9:e8:9e:11:89:8a:35:0b:b0:7a:1d:4d:15:62:f9:
                    10:ef:8c:5f:e5:79:3e:5d:44:f5:27:33:e4:6a:d6:
                    9e:f1:c3:70:15:da:31:16:b5:02:60:5f:d2:73:a2:
                    ff:f1:d8:1d:4e:df:7d:65:7b:fc:29:84:cd:2f:7a:
                    1b:f1:01:8f:a6:89:da:76:dc:1d:41:8c:07:72:fe:
                    45:3b:87:c3:c4:56:22:c7:ad:42:17:7d:69:e5:bd:
                    01:fe:b7:f3:be:f8:f8:4d:36:8f:9e:74:61:51:cf:
                    18:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C7:6C:AC:78:E9:99:AF:72:48:FD:48:F0:0E:F3:23:55:47:6E:60
            X509v3 Authority Key Identifier:
                keyid:F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:3d:d3:4d:f1:40:9e:1c:b2:b3:ec:a0:16:d7:d8:cc:c6:54:
         4c:49:ae:06:56:2e:cd:e5:6a:28:43:f8:78:08:18:5e:b0:06:
         e5:46:47:45:40:9f:9d:b1:1b:7c:e0:95:d7:d7:7e:e7:ee:2c:
         8a:be:8f:67:98:56:37:8e:d5:5f:a2:8d:56:28:02:64:df:49:
         d4:7d:b9:d3:e5:f2:15:45:ff:e1:43:4c:51:74:e9:2c:c4:5d:
         4c:7f:90:61:82:03:79:ae:9d:1f:bf:4a:66:37:bd:a9:d6:31:
         c3:29:68:57:a4:da:c8:33:24:ff:68:65:de:a0:53:6c:ae:a0:
         d3:72:f5:ad:71:4d:25:f3:c9:51:a6:78:bc:70:fb:e3:b2:d7:
         ed:d5:67:40:80:d2:22:3a:24:a7:99:6f:5a:9e:ce:d5:5b:48:
         11:b3:15:d2:83:bd:39:55:de:92:b6:50:f7:54:35:22:bc:fa:
         fc:b3:b3:2f:20:71:ea:b9:39:fd:72:f1:20:12:13:70:62:de:
         91:4a:79:7f:0b:e8:a1:d4:d5:8c:12:73:0a:40:c6:47:7f:8e:
         1c:94:1b:79:62:af:4e:0b:09:4a:07:0a:69:79:86:6b:89:42:
         3a:8f:9c:fd:e0:9f:cb:4d:7c:08:3e:04:c3:dc:91:4e:80:61:
         60:58:84:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:22:00 2026 by rpki-client