Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
File:                     sgWR5euUhCdKdKyC_muRDivLE5k.mft (raw, json)
Hash identifier:          OHzDPLmfVyPQl1bFcNxeHWIo3tbcl32i0jdjej0NyCs=
Subject key identifier:   DA:43:11:F6:55:25:E1:CE:2A:B4:BA:5F:A1:0D:6A:15:F9:48:33:17
Authority key identifier: B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99
Certificate issuer:       /CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
Certificate serial:       01A0C74686E6AF01B9DD14CCA344FC4126A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
Manifest number:          01C4
Signing time:             Tue 22 Sep 2026 04:01:22 +0000
Manifest this update:     Tue 22 Sep 2026 04:01:22 +0000
Manifest next update:     Wed 23 Sep 2026 04:01:22 +0000
Files and hashes:         1: YNiESc72RDLIiWhCHsXSi1o9cLE.asa (hash: l71vJ2s8lHSefHy7yMSFsWXnMilHTDdYBPtW2A9TX3g=)
                          2: sgWR5euUhCdKdKyC_muRDivLE5k.crl (hash: h9/elSS80xSNy6oc2P5qNsN6AQrPHY8d0muTTY0Tq2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 04:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:46:86:e6:af:01:b9:dd:14:cc:a3:44:fc:41:26:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b20591e5eb9484274a74ac82fe6b910e2bcb1399
        Validity
            Not Before: Sep 22 04:01:22 2026 GMT
            Not After : Sep 23 04:01:22 2026 GMT
        Subject: CN=da4311f65525e1ce2ab4ba5fa10d6a15f9483317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:71:e4:17:ee:ab:08:3b:fb:45:7f:83:17:a5:
                    9c:7b:d6:0a:4d:95:3c:14:0c:c8:0b:b5:3f:70:8f:
                    f5:c6:f4:12:e7:14:17:80:33:83:da:87:76:c3:f7:
                    ec:b8:f0:c3:6c:3b:9b:99:3e:b4:99:87:85:b0:9b:
                    63:97:a9:47:3e:12:ac:be:67:2a:6d:8e:70:b9:07:
                    fc:3f:d8:48:a6:fd:38:46:04:05:1b:0d:29:30:fd:
                    f5:b4:6d:e8:33:d8:13:dc:cb:3d:dd:bc:24:37:ba:
                    1d:46:8e:13:ae:78:fe:11:41:4f:d1:f8:40:74:eb:
                    1a:11:07:0a:8b:56:02:0e:ef:58:d1:7a:bd:7e:b2:
                    fa:79:0d:ce:28:c3:5e:71:f2:4b:ae:05:b9:f5:7f:
                    dd:58:e3:0a:d7:3a:1a:2a:75:ee:ce:84:a5:28:bc:
                    ca:cc:38:64:78:08:98:98:2f:31:07:21:db:c0:ee:
                    87:c4:25:f1:60:78:3c:16:34:63:a1:44:26:f8:87:
                    8a:f3:46:2d:9b:66:a0:2a:69:b0:c0:b0:cf:ed:1e:
                    19:7c:b0:c6:37:d4:1f:6d:36:c1:26:a9:9e:a8:b5:
                    2c:33:56:00:22:7c:2a:bc:73:38:2d:be:c6:b3:f3:
                    fd:21:38:3a:80:11:6a:18:d8:8c:ba:7c:33:b1:d5:
                    f4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:43:11:F6:55:25:E1:CE:2A:B4:BA:5F:A1:0D:6A:15:F9:48:33:17
            X509v3 Authority Key Identifier:
                keyid:B2:05:91:E5:EB:94:84:27:4A:74:AC:82:FE:6B:91:0E:2B:CB:13:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgWR5euUhCdKdKyC_muRDivLE5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/79bef1-cd56-4e8b-9749-95838c7c84f5/1/sgWR5euUhCdKdKyC_muRDivLE5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:05:8c:3e:94:51:b4:7c:be:b0:3a:17:e0:8b:49:b2:db:bb:
         8d:0c:31:6e:ae:56:7a:d1:e0:f0:9f:6b:68:44:f7:0f:7d:0c:
         fb:7f:1f:a9:29:fa:fd:93:fd:7a:87:9e:5b:a0:3f:8f:a0:57:
         ec:9f:3f:b3:9a:ac:df:4b:6a:4e:40:2c:83:c0:f6:02:95:90:
         7b:05:b8:47:8f:17:4c:4b:51:46:35:3f:50:6f:68:d6:5f:0d:
         f7:54:ef:91:39:be:91:ea:9b:24:3f:b7:49:4c:93:09:36:5e:
         56:3c:2f:5c:de:31:59:86:64:5f:98:11:c7:cf:7c:f7:ba:98:
         54:c0:df:89:1e:14:2d:f4:33:25:c6:b3:64:e9:70:59:23:4a:
         23:b0:89:40:0e:f9:2c:b7:9f:e4:91:02:80:13:b5:80:27:98:
         b5:f4:e1:c7:45:fb:1b:d0:cb:2c:76:8b:a7:e3:82:a2:c1:47:
         56:0a:70:09:7a:6a:35:07:ff:fc:9f:c0:8e:bf:79:e6:df:93:
         67:a1:a1:a5:c2:70:c0:19:a9:0b:80:ee:b7:51:c0:14:99:f5:
         bd:82:ee:64:44:6c:4d:11:ee:60:fb:a4:e6:a9:74:39:6a:fc:
         f7:b7:cc:55:2c:32:68:8d:75:7f:d8:5a:16:ba:ed:70:47:c0:
         49:3a:a7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:17:51 2026 by rpki-client