Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
File:                     EKWYXLoyqHfTIVu8IoywfQQAkXs.mft (raw, json)
Hash identifier:          K8geuryPJs9yuSffAgVB7TSDoocv5Qt6zGHP1xNRPXQ=
Subject key identifier:   4A:5F:9A:32:D6:46:69:03:80:49:45:47:6F:D7:3D:5A:91:CF:68:B7
Authority key identifier: 10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B
Certificate issuer:       /CN=10a5985cba32a877d3215bbc228cb07d0400917b
Certificate serial:       01A13CA5D5E529041BCB45098D35A2B97FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
Manifest number:          15A3
Signing time:             Wed 14 Oct 2026 23:01:03 +0000
Manifest this update:     Wed 14 Oct 2026 23:01:03 +0000
Manifest next update:     Thu 15 Oct 2026 23:01:03 +0000
Files and hashes:         1: EKWYXLoyqHfTIVu8IoywfQQAkXs.crl (hash: OTE9GDLD8RGzBZKYbmq7MxZVuEOOUSFXB2Yp5PCKdjg=)
                          2: m-bkRVX187dEm5VhlRV9oFQafr4.roa (hash: Ume0d4Lf2OgydCDBWe/3ep3v3knwVOmKBIUnuc3Xd9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:a5:d5:e5:29:04:1b:cb:45:09:8d:35:a2:b9:7f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a5985cba32a877d3215bbc228cb07d0400917b
        Validity
            Not Before: Oct 14 23:01:03 2026 GMT
            Not After : Oct 15 23:01:03 2026 GMT
        Subject: CN=4a5f9a32d6466903804945476fd73d5a91cf68b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:b0:b8:24:62:9d:a1:fb:d5:47:9a:cd:c8:
                    a2:20:dd:09:41:09:7b:33:c3:77:9a:9c:d1:60:16:
                    96:7c:58:64:61:9d:30:80:57:f0:4b:ed:4c:64:fe:
                    40:dc:02:42:3b:da:29:7d:b5:a8:10:e8:a1:75:fb:
                    3f:78:e1:17:3b:6f:f1:cd:ea:65:39:9c:d2:4e:45:
                    31:53:c8:b0:d3:6f:95:10:41:5a:bf:b5:e5:d7:58:
                    b4:f5:f0:e1:65:cb:67:98:2a:30:ea:02:c1:65:8f:
                    95:52:f8:c7:95:7e:31:07:27:ea:fb:c0:84:b2:69:
                    2c:97:b7:c2:62:37:8e:5b:c8:79:e8:3e:f9:ca:f9:
                    68:ee:e2:6b:4b:56:67:5f:18:5c:be:87:1c:b2:7e:
                    f2:62:f2:84:bd:0d:b2:ce:f5:d8:d5:0a:bd:81:a7:
                    0b:03:a8:ed:13:58:02:34:d1:a3:90:3e:ee:e9:d7:
                    83:ed:c3:58:75:3e:25:73:80:04:59:b6:87:57:1d:
                    91:97:89:94:98:94:ae:e8:27:64:6d:ef:4a:ae:f8:
                    e5:22:4c:73:86:67:b8:fd:1b:fc:dc:01:f9:1c:5b:
                    fa:e6:d2:1b:f6:a6:a4:3b:56:3d:b9:4d:54:9e:84:
                    bf:d4:bd:ad:cd:4a:9b:67:5d:a9:ef:0f:31:73:7b:
                    9f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5F:9A:32:D6:46:69:03:80:49:45:47:6F:D7:3D:5A:91:CF:68:B7
            X509v3 Authority Key Identifier:
                keyid:10:A5:98:5C:BA:32:A8:77:D3:21:5B:BC:22:8C:B0:7D:04:00:91:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKWYXLoyqHfTIVu8IoywfQQAkXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/041d0f-be8d-4148-bcba-d70f28515fbd/1/EKWYXLoyqHfTIVu8IoywfQQAkXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:23:44:1f:35:6f:0e:aa:1a:5b:ba:d2:6e:0e:10:bf:9e:4a:
         21:cb:4c:dc:00:c8:42:d5:8a:38:49:31:4e:e8:a3:ba:b8:c5:
         53:d6:39:ad:84:87:d3:09:fa:4e:ac:cf:bd:77:a1:cc:64:40:
         4c:42:ca:09:31:4e:ec:05:8d:c3:57:cd:2a:0f:87:b4:32:fd:
         69:dc:82:be:67:88:c0:c0:0f:f7:13:8d:d3:a6:c3:b5:c2:71:
         2b:a3:48:0b:77:d9:0f:b8:95:90:9a:8d:a3:12:94:3a:d7:4d:
         e3:60:16:e3:76:03:de:73:0e:97:8b:f7:09:57:32:66:a0:62:
         30:0d:03:bb:af:30:cf:3c:9a:a9:6c:42:d5:e9:10:33:33:b0:
         5e:ac:ff:28:4c:48:36:7e:0b:7d:f9:e9:77:6f:b7:c0:4f:98:
         f6:95:d1:9b:bb:a6:12:74:ed:0e:87:76:cf:19:07:64:dc:2b:
         6f:f9:98:ff:6e:ad:a5:9e:7a:fe:4a:fe:4b:13:74:81:1b:50:
         32:c7:e3:fb:24:a3:8d:b2:c8:b1:09:0e:2b:3d:2f:84:11:75:
         29:b8:ce:74:c5:01:97:26:f0:68:67:be:e3:51:b4:83:40:1d:
         52:b3:e5:b0:c0:ac:f1:f3:03:55:33:ca:bb:7a:62:6d:f0:c8:
         e7:9d:ad:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:36 2026 by rpki-client