Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
File:                     sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft (raw, json)
Hash identifier:          J2oHcSdQekM14dRz0126QA+QQwjAVDlHE/vQsQRPIY0=
Subject key identifier:   45:1D:B6:4D:B8:36:AC:BE:42:F7:99:76:36:18:E9:22:31:A7:5B:67
Authority key identifier: B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4
Certificate issuer:       /CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4
Certificate serial:       01A0C9A1A58676100C3C609DE48A87D8528E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
Manifest number:          19AE
Signing time:             Tue 22 Sep 2026 15:00:09 +0000
Manifest this update:     Tue 22 Sep 2026 15:00:09 +0000
Manifest next update:     Wed 23 Sep 2026 15:00:09 +0000
Files and hashes:         1: 5KOoriFpYDWNQa_aIXxLJE8pBHY.roa (hash: 9iEGmIKb7O59KI7QS/sDIkqkU0kq2Alr+CCrXsTWZJ4=)
                          2: sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl (hash: 91e2w2w6Xsx0o23CrcYe6Ju0A2SlKVdGEzd3o9xlLGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:a1:a5:86:76:10:0c:3c:60:9d:e4:8a:87:d8:52:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4
        Validity
            Not Before: Sep 22 15:00:09 2026 GMT
            Not After : Sep 23 15:00:09 2026 GMT
        Subject: CN=451db64db836acbe42f799763618e92231a75b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:87:c2:81:8c:d5:d6:e8:4b:fa:22:d2:23:ab:
                    82:6e:27:3b:1d:e9:89:ac:4c:0e:40:f8:5d:b7:10:
                    68:0e:65:dc:77:bb:1c:b2:64:a0:cb:a0:8c:84:48:
                    6b:e2:cb:98:a0:02:38:36:46:11:7c:26:ff:4c:e7:
                    38:60:88:3a:70:80:fa:ad:bb:62:e4:c2:20:64:04:
                    95:09:ed:42:34:4c:0f:99:b1:f7:95:0b:02:63:cd:
                    d6:88:61:e0:bc:d4:5f:71:a9:2f:e2:f5:1e:76:92:
                    01:d8:ae:19:94:7a:19:75:b2:45:59:a7:fd:4a:4b:
                    d1:97:ed:df:68:75:98:44:28:3d:2c:a3:03:4b:32:
                    75:cd:3f:2f:65:f6:c7:8f:87:61:c0:11:b9:20:65:
                    0f:a9:69:e5:24:10:82:4b:3c:be:72:ed:f1:bc:ee:
                    2b:e5:40:dc:55:08:4d:fa:aa:e4:f0:72:8c:20:2e:
                    8d:30:0c:ae:12:4c:32:f5:4b:b6:e2:e5:c3:e7:24:
                    19:c4:a7:0f:4c:41:4c:fc:59:3c:37:48:e8:e0:3d:
                    35:1d:a8:6f:8f:20:e5:88:60:51:4d:31:b2:75:bf:
                    6c:70:4d:c8:33:fc:cb:f5:7a:38:1a:ab:99:d8:f9:
                    68:d3:94:c8:cd:3b:44:79:0b:8b:8d:41:35:f8:ff:
                    2e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1D:B6:4D:B8:36:AC:BE:42:F7:99:76:36:18:E9:22:31:A7:5B:67
            X509v3 Authority Key Identifier:
                keyid:B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:10:f3:1d:e3:46:65:d2:11:96:79:80:3e:51:51:d3:0c:cf:
         40:81:21:5c:88:68:a5:01:98:44:9f:a7:ae:ae:0d:a8:4b:c2:
         3b:86:78:bc:8f:dd:31:a2:2a:cb:1a:d3:c5:de:b7:c7:dc:96:
         d5:71:0e:21:07:e8:cc:1e:c8:8b:7d:c8:f5:77:22:d0:c3:c3:
         75:7d:f5:3d:37:67:02:c8:8f:c7:ca:28:d2:24:ea:5b:d2:c8:
         34:ef:da:df:b9:42:94:b0:d3:0f:db:67:0b:89:f1:65:3c:86:
         09:a5:bd:76:91:0f:50:fc:6d:8b:b0:17:38:98:b5:cf:37:39:
         13:d1:95:70:8d:ee:8f:20:d2:7f:ef:d3:c4:2d:53:2d:4d:f2:
         1a:2f:ab:5e:67:44:ec:e8:4e:7a:39:36:d8:5a:b1:4f:7d:a9:
         f8:b4:5b:06:36:1c:2a:eb:9f:7a:97:19:1a:75:d7:27:78:cf:
         68:ad:e5:01:74:00:6b:e2:46:6f:d2:49:0b:f8:84:fe:26:33:
         7b:fe:47:54:76:ed:8e:32:13:bd:33:a7:d9:ed:0f:8f:4d:5b:
         93:7a:ed:1d:a8:cd:75:67:1e:69:68:a2:9a:bb:2a:46:63:53:
         29:87:d9:26:8d:72:95:99:d4:57:e1:98:78:c4:c8:6d:7a:70:
         02:41:90:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:30 2026 by rpki-client