Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
File:                     SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json)
Hash identifier:          QSGmaiCMGkvcQK8GfbS3vCMiti9fyXvbEhgfzkkDELw=
Subject key identifier:   26:8A:C6:FF:04:BF:A5:E8:AD:8A:B6:05:30:D5:12:3A:BB:08:51:32
Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
Certificate issuer:       /CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Certificate serial:       01A0C88FEC0C27385B6519FA509E3912E547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
Manifest number:          0EC5
Signing time:             Tue 22 Sep 2026 10:01:09 +0000
Manifest this update:     Tue 22 Sep 2026 10:01:09 +0000
Manifest next update:     Wed 23 Sep 2026 10:01:09 +0000
Files and hashes:         1: 2gRf7iiTdlk7BWzjnH0vNLkZWnM.roa (hash: yip4EzAVv8q4u5/gAmnGeaN3GxWOVD6s/OQWmx+Z/JE=)
                          2: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: TGbMLYFbD0fIOMuTWwwUCbIdGQKM9F+vNZsIVZUuAQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 10:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:8f:ec:0c:27:38:5b:65:19:fa:50:9e:39:12:e5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e
        Validity
            Not Before: Sep 22 10:01:09 2026 GMT
            Not After : Sep 23 10:01:09 2026 GMT
        Subject: CN=268ac6ff04bfa5e8ad8ab60530d5123abb085132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:bf:01:8e:75:25:96:5c:75:a4:cf:2b:fd:
                    91:12:83:05:46:ad:69:39:24:6f:17:bd:a2:ff:73:
                    3e:45:2b:1e:3e:40:e5:c9:fb:d5:15:27:25:0d:45:
                    44:1c:62:ef:1c:d5:a4:56:39:6b:cb:91:62:5c:02:
                    5f:95:92:45:10:21:c2:15:4f:63:23:86:ca:29:99:
                    99:0d:0e:d6:15:dd:bb:44:86:66:c2:b3:82:dc:bf:
                    36:e1:ec:e6:f6:ed:5e:47:c8:02:56:8b:79:ed:c2:
                    b1:09:1f:3b:86:cd:e2:1c:a1:96:a1:ac:4a:9b:03:
                    cc:82:1a:6d:3b:df:02:49:f4:c8:70:28:ce:61:8d:
                    77:d8:10:51:7c:07:cc:5d:22:d8:2a:cb:a4:c4:6e:
                    c3:ff:2f:cf:36:8d:da:89:b6:d8:ee:b8:32:a5:e4:
                    09:d5:10:de:b5:cc:ba:a8:74:48:7d:84:a2:d1:b1:
                    d3:c2:26:f2:21:a2:31:f6:68:20:7b:79:fc:38:d0:
                    85:9d:c4:00:81:04:bf:57:c7:ef:ca:08:e5:a8:36:
                    44:cc:76:90:76:e6:a7:d1:99:87:ef:62:0a:67:a7:
                    96:e9:1d:6e:5c:42:61:ea:3f:3f:a1:f2:06:44:dc:
                    17:46:3d:6c:9f:23:a5:11:82:f9:c6:54:36:08:ef:
                    7f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8A:C6:FF:04:BF:A5:E8:AD:8A:B6:05:30:D5:12:3A:BB:08:51:32
            X509v3 Authority Key Identifier:
                keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:01:43:80:70:5c:c9:75:d7:af:8f:3d:94:04:8c:0b:56:57:
         4e:46:7d:b1:a5:f6:b6:48:07:96:93:a3:8b:cb:44:19:97:94:
         84:3c:15:a0:98:49:fd:b3:d1:98:4a:e9:27:bc:18:70:ea:b4:
         be:0e:20:34:79:36:f7:b2:9c:87:00:41:f0:6e:11:1b:27:fb:
         09:02:97:13:99:4e:b2:b1:bf:a1:1c:10:6e:ef:18:d6:78:02:
         49:8e:8c:19:39:d8:81:1a:f4:df:b9:a9:4c:e2:a3:af:f1:20:
         ac:af:19:46:6e:2d:03:cf:28:a2:10:86:dc:5c:84:89:0b:f1:
         99:4c:f9:06:9a:28:19:bb:0d:9e:ae:6b:af:20:37:ab:82:3d:
         af:57:14:01:57:be:58:ec:7f:9c:78:91:07:a4:4c:66:ea:b1:
         a8:03:75:62:a7:f5:fd:bb:dc:65:52:df:13:5a:72:2f:f6:41:
         21:a2:73:5f:b4:57:55:f4:93:78:2c:a0:44:41:70:3f:87:32:
         7c:c0:3c:05:ff:44:ed:25:46:57:54:9e:5d:5c:ec:c4:29:f7:
         71:c1:ce:84:60:7f:98:c0:fc:b9:36:6c:12:c5:f7:b1:34:da:
         e7:56:9a:d7:a6:7e:50:21:c9:1e:52:e7:66:ce:ff:b3:5d:d3:
         43:00:26:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:57:28 2026 by rpki-client