Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft
File:                     SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft (raw, json)
Hash identifier:          ALFQhIkPwZlCk+biyHQmdEQ46hhKmVsMYPO0XAfIfwk=
Subject key identifier:   AF:1F:4C:04:CB:92:F4:B5:FF:F1:E0:14:9D:AB:00:53:96:34:07:12
Authority key identifier: 4A:54:EF:E0:2A:BE:70:FC:83:22:06:D4:EB:F9:9D:72:4E:8B:1F:5A
Certificate issuer:       /CN=4a54efe02abe70fc832206d4ebf99d724e8b1f5a
Certificate serial:       01A0C2C47645B42413169C48F4D211867395
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft
Manifest number:          0204
Signing time:             Mon 21 Sep 2026 07:00:50 +0000
Manifest this update:     Mon 21 Sep 2026 07:00:50 +0000
Manifest next update:     Tue 22 Sep 2026 07:00:50 +0000
Files and hashes:         1: SlTv4Cq-cPyDIgbU6_mdck6LH1o.crl (hash: /pMKtWPp1R7vCnACLTGKO6och4NTtK4RR+0uoz2QRE4=)
                          2: XqMaYvhCHSlYHuAgcBJ3D1XcKOw.roa (hash: sJ5W26p1BLswbXARJ6bN/ijwMZCfu7E6N/+XnCa8Kg8=)
                          3: mSLcPcPlbCaKloucUE197Adzr1c.roa (hash: gW1hk3WhDt/+PalHQ3CRB51/zaP5eafiQ6SCna2I/+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 07:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:c4:76:45:b4:24:13:16:9c:48:f4:d2:11:86:73:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a54efe02abe70fc832206d4ebf99d724e8b1f5a
        Validity
            Not Before: Sep 21 07:00:50 2026 GMT
            Not After : Sep 22 07:00:50 2026 GMT
        Subject: CN=af1f4c04cb92f4b5fff1e0149dab005396340712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:86:df:a4:d7:a7:cc:ed:4b:d4:be:04:30:39:
                    3a:8a:72:f2:7c:2a:e3:6a:32:7b:5b:20:df:f5:bf:
                    f3:75:c3:2c:f6:cb:39:49:bc:b0:86:4c:59:22:22:
                    65:99:45:a7:69:18:ec:d7:bc:39:b1:91:82:27:49:
                    eb:1a:e7:03:69:a9:80:8c:b7:33:0a:7a:bf:fc:d6:
                    f1:4f:79:b7:12:7e:54:06:91:77:f7:a5:f1:c9:bc:
                    8c:ae:04:3f:fe:31:97:df:6f:59:5e:8c:78:a3:dd:
                    13:45:62:9f:0d:a6:52:fb:c1:9c:71:ac:dc:5b:47:
                    3e:71:b2:85:23:4b:0c:d2:eb:33:b1:1c:59:3f:da:
                    94:e5:bd:e2:26:4e:fc:3d:ec:e4:ff:ac:92:ce:02:
                    da:ea:d7:b5:23:49:c0:7b:42:f1:3e:7b:d3:5d:85:
                    4f:1e:9b:f7:eb:03:30:a3:47:e8:0c:ac:5d:f5:ff:
                    f8:53:a7:ef:46:75:ff:46:2c:89:81:d6:c3:44:79:
                    83:79:13:2b:b6:5b:e6:bb:00:1e:aa:75:2c:fd:90:
                    ff:83:92:94:55:8c:61:ab:9f:46:7e:de:89:27:94:
                    04:39:a3:37:2f:ad:a4:d5:48:4d:b5:f1:e8:03:07:
                    de:99:09:1c:d6:b9:75:bf:53:93:92:65:88:4e:a3:
                    d5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1F:4C:04:CB:92:F4:B5:FF:F1:E0:14:9D:AB:00:53:96:34:07:12
            X509v3 Authority Key Identifier:
                keyid:4A:54:EF:E0:2A:BE:70:FC:83:22:06:D4:EB:F9:9D:72:4E:8B:1F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlTv4Cq-cPyDIgbU6_mdck6LH1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/de219b-9600-4eb8-ac4d-d6a8e3e98a9e/1/SlTv4Cq-cPyDIgbU6_mdck6LH1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d7:03:48:ac:2e:24:2a:f6:29:a4:73:eb:5b:d1:5e:4e:16:
         71:0d:24:d1:d1:b4:bd:1e:89:67:ff:b3:d1:f8:48:07:ce:e2:
         a5:7a:6e:5c:78:94:38:f0:0c:1e:5f:45:6c:f2:fb:b1:3b:6f:
         21:10:95:28:2e:ce:40:73:9a:07:ce:bd:d7:c9:ae:33:15:d8:
         88:4d:1c:98:27:92:44:1b:50:43:56:a9:f2:68:f5:0e:1e:f0:
         03:7c:5a:1e:a4:58:90:8e:6f:b7:32:12:df:94:8f:ce:6b:06:
         1e:3c:68:e6:2a:55:c4:18:a6:11:a2:dd:39:07:b7:52:33:50:
         99:3b:72:0e:39:43:84:c9:3b:89:8f:05:e9:b5:e6:e0:85:dd:
         e7:40:5a:85:f7:74:94:c5:7b:7d:5b:ff:36:95:66:eb:b0:f1:
         a1:48:a8:7f:d8:a5:ec:d7:0b:36:7e:64:d3:84:27:63:c9:36:
         9e:d5:bf:64:4b:c8:23:91:29:34:f8:77:88:e4:47:73:ac:e6:
         32:16:12:53:01:45:fd:93:40:b7:ba:3e:25:75:d6:bc:e4:dd:
         99:a3:10:52:27:67:58:f6:10:03:a0:77:cd:89:04:1d:36:be:
         3f:2d:04:8c:6e:2c:84:59:d3:d5:ca:39:27:4d:b5:3f:05:51:
         49:a2:a6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:25:21 2026 by rpki-client