Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
File:                     sYxKQwCDfE6hetHjghoJrVN2QIc.mft (raw, json)
Hash identifier:          XSlLxAT4TxvAckDUwopzd15nKJol+gBOIhyv1R7eZiM=
Subject key identifier:   3F:0D:BC:5D:3F:F9:4D:DC:0A:D3:37:FA:EC:A7:7E:ED:22:06:19:59
Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
Certificate issuer:       /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Certificate serial:       01A0D2A5E7C0240B1DB284AAD88D9ECFCEE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
Manifest number:          1305
Signing time:             Thu 24 Sep 2026 09:01:23 +0000
Manifest this update:     Thu 24 Sep 2026 09:01:23 +0000
Manifest next update:     Fri 25 Sep 2026 09:01:23 +0000
Files and hashes:         1: OztHm958aRJRxZODVtzftmoIutM.roa (hash: LyCjNgF1WRtdSw3T7qrOJsi3Hm2+foAc8JYBqHMHMdE=)
                          2: sYxKQwCDfE6hetHjghoJrVN2QIc.crl (hash: 1hN9KyP/ODfO8/F0l76ryVPSbRxLVnaKsdnufaxVgUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 09:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:a5:e7:c0:24:0b:1d:b2:84:aa:d8:8d:9e:cf:ce:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
        Validity
            Not Before: Sep 24 09:01:23 2026 GMT
            Not After : Sep 25 09:01:23 2026 GMT
        Subject: CN=3f0dbc5d3ff94ddc0ad337faeca77eed22061959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:1c:b5:99:0c:f3:e5:fb:91:4d:6f:47:1f:
                    fd:92:69:6e:d0:af:22:fa:f0:fe:7b:6a:b4:27:ff:
                    00:07:06:84:b0:08:35:18:99:1a:fa:8c:97:e4:75:
                    f1:43:67:3b:ef:50:ed:f8:9c:9b:8c:5d:05:1f:5f:
                    ff:f2:aa:d1:fb:3e:db:53:1a:21:eb:3d:5d:ea:9f:
                    47:0a:7a:32:d0:62:ce:b4:79:25:fd:92:65:9f:d2:
                    03:af:99:21:27:64:78:a7:c1:12:00:03:bd:dc:9e:
                    1b:3b:97:c4:b6:04:59:e3:23:0e:88:69:5e:3b:33:
                    d0:c0:92:d2:7c:64:3e:97:5a:53:ef:ba:30:69:ce:
                    c7:fa:d6:8a:f0:c9:1f:c4:3d:7e:84:34:3d:06:40:
                    7e:fe:47:54:02:46:ee:b6:cd:d5:fa:81:b5:fc:d4:
                    f3:7e:91:49:66:ff:60:12:0b:d6:d5:93:51:b9:4b:
                    85:ee:4f:08:e8:00:41:f9:54:f2:32:ff:8c:b1:da:
                    ee:45:3b:84:c1:47:2e:6c:e7:3b:e7:21:e2:a9:dc:
                    e0:75:0f:40:32:dc:ca:91:ab:5d:7a:9a:20:ea:d7:
                    51:ef:f0:84:5f:44:b5:a4:ff:74:28:67:c0:8d:e3:
                    38:89:c5:52:21:4b:20:ee:eb:62:dd:49:15:05:02:
                    4a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0D:BC:5D:3F:F9:4D:DC:0A:D3:37:FA:EC:A7:7E:ED:22:06:19:59
            X509v3 Authority Key Identifier:
                keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:49:ad:c5:cd:34:ff:f1:4e:63:a5:f3:dc:96:a9:eb:f9:60:
         cb:a1:b9:7a:4b:49:a6:ed:fe:04:2c:6c:8e:e7:de:de:1f:89:
         63:89:33:4b:e7:1a:55:db:e3:75:d3:ef:84:05:3e:32:95:34:
         98:60:4b:b9:af:5d:56:04:bc:bf:63:41:31:55:b5:0a:9c:1f:
         84:08:48:9a:42:70:35:18:6e:b3:c9:39:74:37:0f:ba:70:b8:
         3c:dc:d2:6d:31:86:99:82:30:8a:5a:3b:9e:b6:73:a3:3b:d1:
         d8:90:ea:22:02:37:69:0f:29:28:da:6c:59:f3:db:04:75:1b:
         c5:04:72:aa:5a:e1:e8:8d:09:1c:4f:35:58:5f:b1:e6:7e:70:
         76:07:33:f1:a8:2a:5c:45:5d:b3:59:30:e2:f6:33:d5:87:c8:
         eb:68:34:4b:e1:6c:7e:f3:58:27:1d:86:1b:09:c8:5c:fe:44:
         c7:39:fb:d7:e7:d3:48:c1:95:86:2c:ea:6d:7f:1e:a2:49:ae:
         5d:1b:8e:1a:d8:2c:f3:fd:ec:e5:f7:68:e7:f8:bb:32:57:2e:
         40:48:ef:c8:6c:73:d8:3d:1d:c4:52:00:c7:09:92:c0:1a:1e:
         08:82:9c:1e:e5:29:6b:b5:f1:58:84:ac:ac:2a:c6:07:ce:1e:
         16:26:42:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:46:53 2026 by rpki-client