Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft
File:                     SyUQgOllg93f08tXQu9eQmWBFLA.mft (raw, json)
Hash identifier:          hBfHKynC1Z6rhfWT5mcttyQLu5W/d5ReVD2zLf2K/6Y=
Subject key identifier:   73:2D:AD:03:07:14:35:37:4C:8E:1D:45:6D:F4:08:CF:1E:66:14:CA
Authority key identifier: 4B:25:10:80:E9:65:83:DD:DF:D3:CB:57:42:EF:5E:42:65:81:14:B0
Certificate issuer:       /CN=4b251080e96583dddfd3cb5742ef5e42658114b0
Certificate serial:       01A0FF473D1A6F3014CD313C0839E9F289A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SyUQgOllg93f08tXQu9eQmWBFLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft
Manifest number:          01C7
Signing time:             Sat 03 Oct 2026 01:00:53 +0000
Manifest this update:     Sat 03 Oct 2026 01:00:53 +0000
Manifest next update:     Sun 04 Oct 2026 01:00:53 +0000
Files and hashes:         1: SyUQgOllg93f08tXQu9eQmWBFLA.crl (hash: 0zcKjrOzEaGxlJky0k17yKGv1DUX2K82WdiFDfLTBhg=)
                          2: en2MbnssfxDmdQApF9BpXZafTB4.roa (hash: ER4VRDsyb1U6Mhi3DkYQHSd9SIwplFdtiKrG0UkksVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SyUQgOllg93f08tXQu9eQmWBFLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ff:47:3d:1a:6f:30:14:cd:31:3c:08:39:e9:f2:89:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b251080e96583dddfd3cb5742ef5e42658114b0
        Validity
            Not Before: Oct  3 01:00:53 2026 GMT
            Not After : Oct  4 01:00:53 2026 GMT
        Subject: CN=732dad03071435374c8e1d456df408cf1e6614ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:01:36:40:7c:65:0b:9a:95:25:d7:d4:1e:fc:
                    7d:79:5c:41:23:53:df:49:5d:e6:9b:e9:40:45:e6:
                    59:e8:f4:f4:62:fb:3d:56:e4:51:2e:ed:c7:6d:fa:
                    4d:11:58:84:a4:24:f9:ef:b6:ac:59:62:a4:67:12:
                    45:12:12:55:64:28:65:be:8e:d0:a6:72:81:0c:71:
                    76:37:ab:5a:57:50:cf:6c:4f:7e:ea:e1:c6:b9:7f:
                    e2:d0:c1:a5:c0:5a:29:58:d5:c6:e9:77:66:7f:e9:
                    e0:ef:12:67:44:7f:ad:d5:c5:85:96:ea:14:2e:2c:
                    0a:8e:8b:29:62:1d:15:68:4b:22:97:96:b3:d0:77:
                    25:dd:82:7e:06:36:80:5d:b2:93:14:a3:da:92:43:
                    1c:3f:30:cf:84:b6:17:b8:93:c6:b8:c7:a9:5f:8e:
                    94:f9:e4:18:26:af:e1:e7:74:86:8b:01:c2:dd:5e:
                    43:d6:c5:69:50:7f:69:72:3d:79:13:bf:51:17:5d:
                    5c:04:0c:52:97:bb:72:4f:a0:2e:da:4e:95:57:13:
                    b1:e2:a7:75:84:02:0a:15:4d:69:61:85:dc:c0:78:
                    99:fe:05:00:8a:52:36:81:c2:44:35:68:ec:12:e7:
                    09:11:46:01:af:21:b5:be:f0:dd:10:90:3b:a2:0d:
                    97:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2D:AD:03:07:14:35:37:4C:8E:1D:45:6D:F4:08:CF:1E:66:14:CA
            X509v3 Authority Key Identifier:
                keyid:4B:25:10:80:E9:65:83:DD:DF:D3:CB:57:42:EF:5E:42:65:81:14:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyUQgOllg93f08tXQu9eQmWBFLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:36:e7:c7:7a:5b:58:9a:3c:cf:c1:58:30:a1:63:ee:9b:d6:
         a0:6e:97:aa:44:19:2a:21:2e:b1:22:9d:05:a1:af:9e:cb:4c:
         8d:16:81:24:dd:63:29:38:12:b1:d7:95:b5:5b:c6:5b:76:84:
         77:8a:03:79:ef:4a:52:72:e8:71:3f:24:0b:a4:a8:64:e3:4b:
         82:98:5a:2f:b5:15:d9:a5:59:11:c7:b6:b6:05:ee:2b:8d:72:
         88:f0:0a:35:8a:b7:68:5f:2a:de:4d:30:87:c9:f8:6d:f9:12:
         6f:2d:50:ef:74:4c:d2:c0:d2:0b:1c:6a:60:11:c9:06:b5:e7:
         de:7e:bb:f6:63:25:d6:44:9a:5f:21:5a:c2:88:0d:19:db:f3:
         0f:13:47:ce:81:8e:91:2f:be:a3:48:b1:89:23:1b:c5:23:6b:
         6a:8d:b2:f3:ec:73:ab:da:20:06:f1:e2:cb:a7:9b:eb:6f:5c:
         7d:36:91:79:c3:9b:d1:b2:d1:c1:94:5d:ff:24:ae:95:58:90:
         1e:36:7e:e3:95:02:2c:e1:3b:13:68:85:70:e0:e7:6c:d5:65:
         54:c3:78:88:c2:74:77:c4:aa:a1:8b:ab:85:d2:62:27:19:b7:
         f9:98:8e:a3:4d:bb:7f:bf:6e:39:6e:68:14:15:b1:2d:fb:c4:
         e3:57:53:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:23:02 2026 by rpki-client