Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
File:                     sglyH0VIwmzzYulEqBsazueyS1M.mft (raw, json)
Hash identifier:          pRHpubfIhSUwA9+yMZczWu9LFGHS1WuB1kQTF7UXDu4=
Subject key identifier:   E2:C5:71:87:4A:77:72:D9:5C:19:29:E3:75:CF:75:F5:94:0F:59:60
Authority key identifier: B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53
Certificate issuer:       /CN=b209721f4548c26cf362e944a81b1acee7b24b53
Certificate serial:       01A134EBEFEC13C466B04D415B069A0044A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
Manifest number:          1AA4
Signing time:             Tue 13 Oct 2026 11:00:39 +0000
Manifest this update:     Tue 13 Oct 2026 11:00:39 +0000
Manifest next update:     Wed 14 Oct 2026 11:00:39 +0000
Files and hashes:         1: DKBfBL9XpscAyTb6lcg_xLvLalk.roa (hash: 5NSHLTPIALI5PbSBvcpHj5DJzxIv6VgrTSWBYbfeE9M=)
                          2: FSwkeIpTkviwow4rp67ki1ll7vA.roa (hash: BiP8/RjkfCgTWSMXpx0VR4qahxKI7hYQ74iepcYZ9P8=)
                          3: LNUgrHeJH8_twF9tU9VX_RCIzvg.roa (hash: GLcXAgYTgm5r7GaYDlqmsk5yeyHe1dPhOHxa2XGFx2k=)
                          4: sglyH0VIwmzzYulEqBsazueyS1M.crl (hash: vGSmuj7rSuoN3PeGlHYiQ1UsJvAQwdkt32wzH48oerY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:eb:ef:ec:13:c4:66:b0:4d:41:5b:06:9a:00:44:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b209721f4548c26cf362e944a81b1acee7b24b53
        Validity
            Not Before: Oct 13 11:00:39 2026 GMT
            Not After : Oct 14 11:00:39 2026 GMT
        Subject: CN=e2c571874a7772d95c1929e375cf75f5940f5960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:13:92:79:28:71:ab:17:1c:c8:d5:1b:70:cb:
                    8c:18:dd:12:23:e3:ef:23:09:c2:6c:26:32:d8:29:
                    50:ba:c1:17:24:42:2f:a7:48:54:85:43:8e:95:b5:
                    e2:41:2c:9a:28:39:63:6e:23:89:2c:8b:75:b5:cf:
                    60:fa:f3:7f:96:34:91:d1:3b:83:aa:d7:90:27:69:
                    67:86:3c:f3:21:2a:4b:64:20:bd:b8:88:3e:ea:fc:
                    0d:b9:24:64:fb:b3:62:a8:46:dc:09:5d:0b:35:83:
                    8b:19:ab:f2:86:08:ac:a8:a8:ad:ae:0d:99:df:8d:
                    b1:92:be:86:5d:c6:f2:38:31:ad:81:9a:15:d0:bf:
                    ff:75:52:f8:54:19:33:69:91:3d:df:4c:c9:fa:31:
                    90:df:40:46:91:75:28:d2:79:ec:6c:90:73:b7:fa:
                    43:65:f3:bd:81:2e:a6:08:bf:be:df:5b:06:c7:90:
                    f7:29:44:1b:48:38:5c:82:f4:0e:5f:fc:7f:cc:2b:
                    ad:db:c6:ba:fd:8c:b9:14:b6:35:c4:c8:64:2f:da:
                    e1:3d:61:0b:c4:e7:65:ad:e7:9a:fe:85:dd:dc:93:
                    7b:ae:70:58:19:01:5a:e8:a8:a4:b6:99:46:bf:33:
                    47:c5:07:9b:52:d2:31:b2:b4:8d:c7:5e:00:68:8d:
                    9e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C5:71:87:4A:77:72:D9:5C:19:29:E3:75:CF:75:F5:94:0F:59:60
            X509v3 Authority Key Identifier:
                keyid:B2:09:72:1F:45:48:C2:6C:F3:62:E9:44:A8:1B:1A:CE:E7:B2:4B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sglyH0VIwmzzYulEqBsazueyS1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a67432-c067-4cdb-b5ad-dba5c1834601/1/sglyH0VIwmzzYulEqBsazueyS1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:42:db:df:db:01:6b:84:95:d4:a9:d7:7a:f0:4e:5f:86:c0:
         8e:ac:8b:61:b2:08:ef:ab:79:d9:02:8c:c3:4f:8d:0e:37:ee:
         bf:de:d2:f4:f7:17:e1:17:5d:5a:58:09:38:78:f7:c4:c7:5a:
         0e:af:42:66:e3:f1:49:d8:12:be:3f:e1:2d:e6:f1:e1:ae:f5:
         2a:a7:47:b8:48:00:14:76:2c:1a:47:a6:7d:71:75:05:e0:24:
         b6:ca:e4:12:24:95:60:2d:c1:8a:0b:48:91:4b:80:f2:e4:00:
         b0:cb:2a:57:65:3e:00:d1:52:71:2c:6b:c3:e7:9b:04:6f:14:
         0b:9c:1e:6d:da:1b:f1:4f:91:0c:98:6f:96:2a:0f:76:86:34:
         54:27:9f:4e:ad:2d:f4:d4:d1:bc:56:b9:3b:7b:3c:b2:18:f3:
         cf:e7:92:03:9b:83:f9:50:e4:ff:5f:fe:42:fc:d9:c1:c1:b2:
         04:db:94:82:43:5a:ae:08:07:92:0d:ec:a2:42:04:fa:c8:71:
         61:61:b2:dc:81:17:d9:6a:25:5c:68:e0:e1:dc:d1:75:0c:6e:
         1c:a1:6f:5b:f8:32:36:fa:a1:45:0d:29:76:a2:53:c9:10:1c:
         a6:c3:15:14:b7:ef:2e:6d:2b:ae:13:c8:13:91:08:26:9c:dd:
         e9:37:61:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:40:29 2026 by rpki-client