Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.mft
File:                     SlW-JEUcNjrtD78lsV-0XRjrhbs.mft (raw, json)
Hash identifier:          1PUmrZtsRv4b3bqr4Pgyk8O31nN0VmY32Gvhs/ldzxs=
Subject key identifier:   B7:AB:00:A0:08:4E:0C:AB:13:2F:D8:5E:A8:F1:48:D3:67:B4:47:9C
Authority key identifier: 4A:55:BE:24:45:1C:36:3A:ED:0F:BF:25:B1:5F:B4:5D:18:EB:85:BB
Certificate issuer:       /CN=4a55be24451c363aed0fbf25b15fb45d18eb85bb
Certificate serial:       01A0C28E492E9C32403C42304365E1C04A2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SlW-JEUcNjrtD78lsV-0XRjrhbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.mft
Manifest number:          1B
Signing time:             Mon 21 Sep 2026 06:01:39 +0000
Manifest this update:     Mon 21 Sep 2026 06:01:39 +0000
Manifest next update:     Tue 22 Sep 2026 06:01:39 +0000
Files and hashes:         1: 5zLKCLk5iYERmYqDGmtd8mEeKSQ.asa (hash: sx1+DgkP1FpQxqvdjvZ6S4CXbH1TZq5egsnoLK3GPBY=)
                          2: SlW-JEUcNjrtD78lsV-0XRjrhbs.crl (hash: AkEUSPrY32JSm8gikUxsvNh4l8LNLp/gnyjJ7inICVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SlW-JEUcNjrtD78lsV-0XRjrhbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8e:49:2e:9c:32:40:3c:42:30:43:65:e1:c0:4a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a55be24451c363aed0fbf25b15fb45d18eb85bb
        Validity
            Not Before: Sep 21 06:01:39 2026 GMT
            Not After : Sep 22 06:01:39 2026 GMT
        Subject: CN=b7ab00a0084e0cab132fd85ea8f148d367b4479c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a7:e4:fb:0a:4b:89:22:90:db:c1:52:72:77:
                    e5:33:06:40:01:ae:76:82:e8:36:1d:57:c3:73:3d:
                    f4:45:65:70:74:c1:25:b9:d0:3d:2d:d9:15:de:1e:
                    74:a3:99:1f:4a:fa:40:37:36:b9:3c:1e:4f:7d:11:
                    e3:12:7b:fc:23:0e:36:28:f6:67:73:03:8d:18:00:
                    f7:ba:04:9a:3a:ff:6d:5b:09:f0:3e:1a:0f:83:d4:
                    c9:0e:6c:f6:4b:1c:24:68:b5:a4:18:9a:2b:5c:f9:
                    83:88:7f:59:a3:d6:68:e2:06:f8:a1:b9:4e:b3:fd:
                    2d:2a:bd:d3:91:00:82:5c:da:5b:47:25:a8:05:98:
                    84:67:18:df:f2:c8:40:9e:22:a4:87:f9:a5:65:8b:
                    65:81:a6:9e:ab:73:5d:6c:c7:59:e7:b9:41:02:3f:
                    ee:97:30:c5:94:5b:7a:bf:ca:e8:a3:dd:09:7b:90:
                    97:d4:33:bb:45:42:7c:a1:c2:cf:dd:a2:fa:7d:a5:
                    9c:55:16:aa:22:66:45:f3:8f:8f:48:99:68:1a:e3:
                    9e:70:7d:1d:f5:96:ff:7b:d4:68:94:96:8c:3d:34:
                    90:2d:9f:07:c5:a5:62:34:5e:9d:72:5d:08:42:6d:
                    ff:ef:87:14:e0:08:e1:83:5a:47:cb:bc:28:62:71:
                    2b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AB:00:A0:08:4E:0C:AB:13:2F:D8:5E:A8:F1:48:D3:67:B4:47:9C
            X509v3 Authority Key Identifier:
                keyid:4A:55:BE:24:45:1C:36:3A:ED:0F:BF:25:B1:5F:B4:5D:18:EB:85:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlW-JEUcNjrtD78lsV-0XRjrhbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b0:3c:07:97:b5:a1:ea:70:b2:de:a8:f7:9a:2d:6d:73:68:
         d2:ff:6a:7a:64:f6:4b:6b:da:f5:68:73:8a:0d:25:37:d8:ff:
         f4:be:96:10:34:68:ad:a6:1e:f2:16:f7:d3:b5:7f:62:aa:c5:
         49:7f:28:da:3c:a8:15:4c:fd:04:61:77:ef:35:db:f9:05:c0:
         ca:af:d0:f3:32:4d:e9:a9:dc:0f:3f:bb:af:24:cc:6d:5e:a5:
         40:92:79:a5:f4:4d:7b:dc:c8:e8:dc:77:ee:57:71:0c:f5:92:
         8d:f5:c9:d8:a1:51:79:19:71:6b:45:58:80:7e:5f:2b:a1:56:
         fa:0e:a5:52:4e:05:d5:cc:48:1f:2c:19:64:b8:77:20:ff:1e:
         19:e4:4b:5a:7e:d4:8e:f4:ff:2a:44:cd:13:dc:02:46:df:ac:
         c5:91:07:cf:28:89:8f:89:87:9d:69:c4:c3:b4:bb:03:6f:bd:
         09:8b:ac:36:40:ef:63:f7:69:01:ba:15:8e:26:17:ab:fc:fd:
         d0:58:27:31:fe:76:a8:fe:84:f0:46:79:3d:7a:69:c5:da:fa:
         10:ed:f1:b1:80:ed:7a:3a:52:9e:c0:e4:e5:f4:7d:3b:85:92:
         12:f2:76:44:f7:7d:f8:84:34:1b:cf:09:ee:96:d8:ea:63:11:
         b2:1d:c0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:34 2026 by rpki-client