Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File:                     SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier:          P5Scx3XtvECpl2eROpKD+bBh39SKwKYn/xip1wvnmoY=
Subject key identifier:   48:BE:EF:C6:09:00:FC:F7:D0:FE:63:3E:C8:C5:6E:9B:D4:38:2E:B8
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer:       /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial:       019D9A3EC07A61FBE9C3542C84C42D1B3638
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number:          0BEA
Signing time:             Fri 17 Apr 2026 07:01:36 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:36 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:36 +0000
Files and hashes:         1: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: vtOqCFGq33TVrjWeousEi/KWw6C3Y1E56u3JqjVKAFk=)
                          2: k6dlQXV0CNNHoojLjuToM3RWJts.roa (hash: r/95kr/PA/IvIi+wnWxWmGRUKtlOA3OqudcUD32MdDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:c0:7a:61:fb:e9:c3:54:2c:84:c4:2d:1b:36:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
        Validity
            Not Before: Apr 17 07:01:36 2026 GMT
            Not After : Apr 18 07:01:36 2026 GMT
        Subject: CN=48beefc60900fcf7d0fe633ec8c56e9bd4382eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:98:64:47:5a:2f:29:05:02:6f:fa:c7:8e:4e:
                    8b:34:86:90:15:60:5e:af:f8:30:db:4a:93:93:05:
                    01:d7:3a:e2:d1:05:26:41:ba:77:83:8d:f6:3a:bc:
                    7f:c9:48:a6:a8:14:fe:9a:c7:a7:49:b9:7c:40:00:
                    a6:9e:c4:c8:ab:24:74:96:92:52:75:c9:45:18:bc:
                    ce:4a:6e:3b:72:a1:39:36:c4:02:05:28:ca:b9:ee:
                    46:3a:87:67:04:1c:c7:8c:c9:e1:c9:9f:12:0c:d8:
                    e3:d8:8e:9b:5c:dc:42:6a:ae:4c:e3:86:c2:fa:92:
                    55:fe:fb:c4:32:4d:92:cc:81:c4:81:63:de:7f:82:
                    bc:e3:41:a9:25:49:41:25:e2:c4:7b:e7:96:9b:7f:
                    f4:94:b7:0f:5b:c4:02:f2:fe:72:1a:ed:54:12:ee:
                    98:69:db:b0:cc:12:76:72:66:b5:66:67:df:95:b6:
                    7a:01:a0:07:a6:89:e0:07:35:9f:6a:85:26:b0:5d:
                    cd:da:e3:bb:6f:70:fb:90:d0:68:f8:5d:3a:00:78:
                    b7:89:9c:20:70:2e:07:ec:43:20:33:62:ec:fc:9c:
                    3e:54:21:47:a4:c1:f4:8f:03:80:98:dc:77:db:21:
                    bd:4b:8f:03:53:81:2f:31:9d:4b:ce:8c:42:92:58:
                    63:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BE:EF:C6:09:00:FC:F7:D0:FE:63:3E:C8:C5:6E:9B:D4:38:2E:B8
            X509v3 Authority Key Identifier:
                keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:aa:c8:1f:dd:62:81:c5:4a:a3:6e:c5:f6:29:70:27:08:81:
         da:14:ff:15:09:50:2f:58:d2:66:e0:7e:0f:6f:23:96:c8:33:
         5f:a8:8c:9a:e4:5a:df:e2:ec:6f:31:e7:68:7d:5e:d3:09:36:
         df:87:00:f3:40:58:36:0b:2a:09:82:f6:08:12:94:45:9e:f2:
         3e:02:0f:99:3a:3f:24:56:a5:71:4f:ee:db:1f:c0:7d:8a:d3:
         f3:9c:69:7d:bd:7c:3a:77:4d:81:f0:bc:a4:4b:c5:bc:54:cf:
         4e:77:35:b2:01:45:0b:bc:e1:fc:dd:99:63:45:dc:e4:5a:3b:
         14:a2:09:6c:aa:56:85:18:c3:a0:83:1e:e9:e0:20:1d:26:5e:
         8a:14:27:82:fa:99:76:8a:d2:a9:15:b3:13:94:75:8a:97:72:
         50:dc:5c:34:d6:01:d3:bf:fb:d8:a6:82:45:83:18:6d:7e:91:
         c7:99:9c:c5:27:be:8b:60:34:31:37:82:e6:5a:5b:9e:70:20:
         2c:70:48:05:c9:a9:1f:3d:d8:f0:7f:af:0b:61:4b:84:c3:ed:
         90:13:9f:bf:16:f3:07:6e:36:9a:39:c0:5b:3b:82:67:f6:5f:
         45:d2:5b:a6:5a:95:a0:ba:04:13:6d:31:44:ab:d2:fe:96:cf:
         7e:eb:bc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:32 2026 by rpki-client