Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
File:                     scIHU2wjS4vDrJgwEUMbp3Q51jc.mft (raw, json)
Hash identifier:          drS00+VRs0Dyc2vbVSxFH0JCzRZvrIr8gwTh6Y0eX5o=
Subject key identifier:   7C:74:BC:1A:A6:20:57:CB:4B:63:79:41:6F:75:99:A1:8D:E6:13:BA
Authority key identifier: B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37
Certificate issuer:       /CN=b1c207536c234b8bc3ac983011431ba77439d637
Certificate serial:       01A0BDD475AA92FC3E2F4582FF39A2ADCA2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
Manifest number:          04F5
Signing time:             Sun 20 Sep 2026 08:00:12 +0000
Manifest this update:     Sun 20 Sep 2026 08:00:12 +0000
Manifest next update:     Mon 21 Sep 2026 08:00:12 +0000
Files and hashes:         1: 6dmQqOmiLuvsuXnjOJu92trEdrA.asa (hash: JGwW9fJV5axb1wgNyKCQxtbGSmC9R5T5h3NTuwPN6As=)
                          2: scIHU2wjS4vDrJgwEUMbp3Q51jc.crl (hash: 5MmGblFoVDYGkbcv048jUOdxlpH7jTZkuUuAkDinlBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:d4:75:aa:92:fc:3e:2f:45:82:ff:39:a2:ad:ca:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c207536c234b8bc3ac983011431ba77439d637
        Validity
            Not Before: Sep 20 08:00:12 2026 GMT
            Not After : Sep 21 08:00:12 2026 GMT
        Subject: CN=7c74bc1aa62057cb4b6379416f7599a18de613ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:75:e3:aa:bc:ab:6a:28:d0:39:eb:cc:a5:23:
                    1e:7e:e5:4d:f7:cd:35:a0:5f:40:14:d2:e4:e8:c9:
                    94:50:0e:a4:91:9c:7b:8b:68:62:98:cc:38:43:de:
                    ab:a9:36:4f:e5:17:d9:e4:65:be:2e:d0:96:d7:51:
                    2c:e1:8f:51:ce:97:10:3a:cd:09:20:95:5f:c8:03:
                    0f:f0:98:eb:cb:43:d2:f8:36:fd:bb:bd:42:46:bc:
                    10:0b:61:76:3a:64:02:6d:42:fe:fd:11:7d:59:71:
                    f2:13:6b:30:62:66:69:a2:91:7b:36:72:93:73:ef:
                    52:36:95:57:84:33:24:5a:f9:75:7a:71:5e:b8:bc:
                    d0:50:b3:11:e0:eb:75:bb:8f:4e:0d:37:cd:3f:52:
                    27:25:f7:5a:7d:e7:e2:0f:a0:2b:8e:17:d8:28:c3:
                    1f:29:97:05:b2:9c:34:33:ee:db:2f:80:a3:bf:20:
                    e7:a8:d8:bf:2e:e7:99:92:f4:21:0c:84:96:34:03:
                    32:11:61:a2:38:61:6f:82:62:ba:79:e9:66:1b:c3:
                    35:f2:bd:c2:0e:35:1b:23:3b:2f:54:ed:45:d9:7a:
                    1d:3b:39:9b:9f:28:8f:48:38:2e:42:b5:60:d2:b4:
                    89:0b:ca:e7:5c:7d:d0:2e:c3:7e:2d:d5:09:bc:5f:
                    14:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:74:BC:1A:A6:20:57:CB:4B:63:79:41:6F:75:99:A1:8D:E6:13:BA
            X509v3 Authority Key Identifier:
                keyid:B1:C2:07:53:6C:23:4B:8B:C3:AC:98:30:11:43:1B:A7:74:39:D6:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIHU2wjS4vDrJgwEUMbp3Q51jc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/456af1-4340-4729-b342-5ed75e424468/1/scIHU2wjS4vDrJgwEUMbp3Q51jc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:fe:03:12:7a:07:1d:ad:64:0d:05:3d:99:0c:1f:57:06:f5:
         68:8a:a2:0e:95:3b:0c:a1:e2:fb:fc:1a:74:f8:de:fc:ba:0e:
         02:75:8f:3f:0d:b8:07:82:6a:5e:b6:14:12:35:70:66:b4:5d:
         37:ac:bc:df:ea:d8:36:7b:88:fd:51:9e:21:9c:46:8b:7b:00:
         1a:ce:19:59:37:5d:ee:45:c5:6b:7e:25:b0:f4:8d:8a:ff:e6:
         7b:84:d5:27:78:c7:ac:09:5c:d7:16:26:fc:45:68:6a:d9:aa:
         4c:65:df:0c:32:80:fb:a1:e7:8d:26:21:61:e3:15:d2:e9:66:
         df:e7:dc:02:d7:db:af:b5:65:b5:a9:96:21:b1:2c:b9:42:63:
         d2:88:20:7f:a8:49:90:38:61:c5:3b:3d:18:bc:1c:8b:77:bf:
         4f:94:60:00:93:e8:7c:33:1c:fc:ba:82:65:06:24:77:59:46:
         87:45:8e:48:8e:28:d6:1c:b7:f0:16:d7:23:6d:be:a4:a4:f3:
         dd:e0:3c:e5:78:3a:e3:a1:55:a3:7a:58:e1:28:6d:79:93:75:
         87:b8:aa:8a:12:0f:35:5e:63:26:7b:be:f7:e9:62:25:fc:31:
         e5:cb:61:68:bf:e6:11:21:88:36:d6:31:34:00:f7:c5:78:38:
         0c:a9:c7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:11:26 2026 by rpki-client