Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
File:                     SgvIUgmAGVIMeOmoC22EyzyrcEI.mft (raw, json)
Hash identifier:          o2NHA3DxScwi05d3GKHkMtFBaHyklKvjm+cFztc9rY4=
Subject key identifier:   7A:E4:34:E2:43:13:83:43:FE:C6:6C:78:D9:93:F7:5B:77:83:26:B1
Authority key identifier: 4A:0B:C8:52:09:80:19:52:0C:78:E9:A8:0B:6D:84:CB:3C:AB:70:42
Certificate issuer:       /CN=4a0bc852098019520c78e9a80b6d84cb3cab7042
Certificate serial:       01A0C09EE1434786FF3E66AA7E29B238CDB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
Manifest number:          029B
Signing time:             Sun 20 Sep 2026 21:00:32 +0000
Manifest this update:     Sun 20 Sep 2026 21:00:32 +0000
Manifest next update:     Mon 21 Sep 2026 21:00:32 +0000
Files and hashes:         1: DZUI_bEIrP-yvThfRpjcY2JDgZ8.asa (hash: RghHL1DuN+HQMkw8GbUaQPmzZB8C45TxXFTAWg1Ry2g=)
                          2: SgvIUgmAGVIMeOmoC22EyzyrcEI.crl (hash: QqTU7z1N/17RzpZ+mTr2IjZ0tTkL2nIBcKKToHICTCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:9e:e1:43:47:86:ff:3e:66:aa:7e:29:b2:38:cd:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a0bc852098019520c78e9a80b6d84cb3cab7042
        Validity
            Not Before: Sep 20 21:00:32 2026 GMT
            Not After : Sep 21 21:00:32 2026 GMT
        Subject: CN=7ae434e243138343fec66c78d993f75b778326b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b4:8a:1b:ff:89:55:9d:aa:d8:74:28:df:c9:
                    c5:d2:75:8a:2c:ee:74:2f:14:5b:1a:84:d0:35:4e:
                    f5:67:ec:67:f9:87:3f:80:fc:51:ac:70:02:fd:21:
                    c7:28:8a:91:e1:31:0a:ad:4c:50:a6:bd:08:a5:08:
                    b5:80:96:9a:8e:b4:5a:4f:91:73:2e:8b:b8:f1:8c:
                    b7:df:a5:38:0c:07:b3:aa:f2:5c:64:29:85:f1:7d:
                    ef:75:4e:6c:a4:37:db:f4:94:f2:c4:39:4b:33:b5:
                    ad:7a:5f:05:b5:8d:df:5c:a7:66:7e:0e:8b:55:bc:
                    23:86:66:eb:81:b7:64:b9:26:60:bd:5b:b0:a2:70:
                    2a:81:d4:93:52:a9:ab:40:70:9c:66:cc:52:50:e4:
                    30:a8:06:2d:9b:b2:5e:50:06:15:b3:74:ff:a8:39:
                    76:8b:c4:32:46:a2:82:c4:35:dc:40:1c:85:dc:12:
                    44:ed:91:f0:96:3f:dd:14:b7:69:4f:a9:2f:8c:ef:
                    92:07:7d:bb:62:b4:1b:f2:a0:5f:dd:02:a2:a0:ad:
                    7e:d7:50:7b:ab:dc:af:da:94:a7:f6:a8:73:4f:c1:
                    ef:2d:31:09:e7:39:89:7a:8d:59:8b:b2:dc:26:ec:
                    f7:04:6a:63:d3:0f:19:a3:ae:05:2c:63:b6:2a:cd:
                    ad:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E4:34:E2:43:13:83:43:FE:C6:6C:78:D9:93:F7:5B:77:83:26:B1
            X509v3 Authority Key Identifier:
                keyid:4A:0B:C8:52:09:80:19:52:0C:78:E9:A8:0B:6D:84:CB:3C:AB:70:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgvIUgmAGVIMeOmoC22EyzyrcEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c08c09-93d0-4ad8-a809-daac82d27f60/1/SgvIUgmAGVIMeOmoC22EyzyrcEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:7f:a4:5e:33:7c:12:26:c1:c4:c4:08:52:7e:28:68:f8:d3:
         ab:8d:ed:76:80:0e:68:55:e1:3a:f4:b9:ed:16:80:43:2a:6f:
         ac:eb:92:e0:a7:8a:73:ca:4c:f7:a3:63:50:5c:0f:b5:37:5b:
         c1:5b:e9:87:18:02:03:37:57:41:0f:14:f0:cd:34:d7:ae:ff:
         2b:fc:44:29:20:00:3c:78:5c:e8:e6:37:7e:32:ef:25:77:98:
         37:62:41:b2:a9:f9:a7:05:3e:14:58:38:ff:34:d5:d5:8b:a9:
         6c:f1:1a:67:c8:d8:ea:91:8a:f7:22:cc:23:7f:71:0f:40:c1:
         6d:b4:ca:a6:57:e3:f0:8e:8a:bf:d3:af:44:1e:0c:fa:0d:b8:
         2c:f2:02:40:97:69:a1:39:69:15:92:08:3c:8e:7d:c8:4a:b1:
         06:c9:49:73:d0:4b:53:a5:9c:3b:3b:54:a1:29:8c:20:0b:22:
         fe:b4:9c:35:b0:aa:22:af:3d:28:58:0d:b5:c3:9e:de:e8:a0:
         b1:b2:15:b4:3d:8e:6a:c3:01:fd:99:45:10:15:ba:27:ab:8f:
         ea:34:71:9a:1f:dc:c5:54:f4:f8:8b:f4:43:f8:3b:ac:ea:70:
         b3:9d:6c:d6:d5:6e:d4:69:f3:83:32:d7:b8:ad:ff:e6:8a:5b:
         e0:c0:be:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:29:33 2026 by rpki-client