Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
File:                     SFldSlTtZEITxEYZXjb3jsGig5k.mft (raw, json)
Hash identifier:          gdz/9uZyxOS/1NgCr8oG6iMMslclleEizfj+6cHffUI=
Subject key identifier:   61:D3:6E:49:29:22:62:AC:4C:E2:01:D0:1F:82:E1:DB:D3:83:02:F4
Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
Certificate issuer:       /CN=48595d4a54ed644213c446195e36f78ec1a28399
Certificate serial:       01A0CB2290D8C764CB8AF8DD08CEDF8E996A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
Manifest number:          1A69
Signing time:             Tue 22 Sep 2026 22:00:35 +0000
Manifest this update:     Tue 22 Sep 2026 22:00:35 +0000
Manifest next update:     Wed 23 Sep 2026 22:00:35 +0000
Files and hashes:         1: SFldSlTtZEITxEYZXjb3jsGig5k.crl (hash: mOwN2MRT8CxzVYDKPVLSLnWHNGBnQrfx/Nmsiyyzb4U=)
                          2: hLXYn7_sE8_0uE-9APcSyfa3cKM.roa (hash: OnfUzd7ri0bA88lhkI8jx6ukwUTJ7Iy7tmQtDjoFSz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:22:90:d8:c7:64:cb:8a:f8:dd:08:ce:df:8e:99:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399
        Validity
            Not Before: Sep 22 22:00:35 2026 GMT
            Not After : Sep 23 22:00:35 2026 GMT
        Subject: CN=61d36e49292262ac4ce201d01f82e1dbd38302f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:d9:63:70:90:af:e9:b5:06:48:3f:47:3c:
                    a4:52:8f:59:18:19:8f:2c:c6:8e:f2:57:cb:e1:57:
                    53:c0:e2:ab:fd:c2:88:55:89:3b:a2:05:db:44:76:
                    61:11:4e:f1:30:98:ae:65:2a:f5:5e:db:02:37:89:
                    c1:eb:08:92:3d:a9:8e:d7:71:0f:07:7e:0b:b5:ff:
                    52:b3:c2:d7:37:18:21:48:0b:b4:98:9c:f7:3c:26:
                    d4:71:f9:c1:ba:76:eb:06:7b:c8:68:d3:31:c6:ff:
                    d9:da:1a:0a:6d:d2:39:44:9f:15:5f:9a:f2:c6:35:
                    e3:d7:05:60:5b:8f:ba:ba:8e:07:fd:87:a1:72:4f:
                    d3:b6:1c:75:dc:e5:c6:0e:1e:88:8a:88:31:86:ce:
                    b3:ba:3d:03:4f:4d:34:74:22:57:98:41:fb:24:4d:
                    57:ec:54:cb:ef:22:98:5b:14:79:94:44:ae:ac:dc:
                    e8:4c:05:00:d8:3b:8a:c7:d5:15:42:fb:75:07:73:
                    fb:31:2b:08:95:0c:4c:92:78:a7:eb:c2:f1:0e:4e:
                    23:a5:a6:2c:52:d0:6c:d6:84:89:bf:5d:7e:2b:57:
                    d5:3b:33:f9:cb:40:e0:ae:68:86:49:18:49:bd:8a:
                    3f:69:af:25:27:5f:3a:1f:1c:8c:2b:9c:de:3c:25:
                    66:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D3:6E:49:29:22:62:AC:4C:E2:01:D0:1F:82:E1:DB:D3:83:02:F4
            X509v3 Authority Key Identifier:
                keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ea:5c:79:85:2b:6c:8c:39:64:f9:cb:bf:15:fc:eb:3e:68:
         32:86:9b:d3:fd:1f:2b:ff:cf:96:5b:b7:1f:d0:e5:34:d6:70:
         3b:22:6c:ef:9f:8c:d3:4f:16:c0:46:8e:6f:8d:e8:54:15:74:
         14:3a:61:3a:d5:93:cd:58:bb:b2:37:f7:80:68:95:e6:8b:70:
         99:b2:8b:1a:83:60:36:ef:9d:5f:9b:24:ca:76:e2:83:c0:0e:
         8f:a1:8a:66:bf:92:c8:42:a1:e2:af:ed:af:9e:eb:a9:c3:6a:
         f9:a8:c8:aa:62:2e:00:de:07:dc:01:de:7e:b6:a0:d3:9a:ca:
         c7:c2:b6:36:15:29:de:c4:1e:44:c6:60:85:b6:98:a0:5d:f7:
         a9:7e:5b:0b:ac:c7:49:c6:38:c7:1d:4b:ff:7a:1a:0a:f3:99:
         e1:46:d1:78:da:72:9d:62:ad:19:40:25:2b:69:41:b0:e3:4d:
         80:ef:48:08:ea:21:5d:7a:92:8e:fe:f9:7d:a3:eb:23:74:3e:
         2a:2b:a4:6d:36:ae:b3:a2:24:28:e9:2b:a8:4d:0c:f0:df:33:
         93:94:af:22:c6:3a:e4:81:05:90:f0:e7:ac:96:99:5b:dd:ea:
         ee:3d:21:2b:34:4f:90:18:40:fe:2b:93:90:2c:7b:be:43:28:
         89:35:0c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:08:10 2026 by rpki-client