Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
File:                     sMnhFmeJWbipR4_Op8o8BgMQIWI.mft (raw, json)
Hash identifier:          EUE6LXt3dnxdjMuWn8i4N3ePy7hGy3Sw4CrN2vqb8R4=
Subject key identifier:   9F:2E:7E:66:80:C7:9D:F2:66:A9:79:A0:AA:68:04:AF:04:77:24:1F
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Certificate issuer:       /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial:       01A0BE82545BD8572DC95BB38861B631BC05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
Manifest number:          1951
Signing time:             Sun 20 Sep 2026 11:10:07 +0000
Manifest this update:     Sun 20 Sep 2026 11:10:07 +0000
Manifest next update:     Mon 21 Sep 2026 11:10:07 +0000
Files and hashes:         1: SOiERy2FzpjBOJscmjZUT2oXCyo.asa (hash: I8iKKxNhfuhsMLpyqDcsPliv9eTPu4ZuRNf7dFDTu3k=)
                          2: XUGY9TbOMBX49Z8u90RGUe-ExLs.roa (hash: qtTspg26ND5GYRKyrYjwXIvA6gCRcdmehMVXE9EcA5s=)
                          3: jltkxv-W3EJYRqlAiyUHsai-NGg.roa (hash: N+0PF7dju+bGSsP5B72Z/TEHcq9DPMPEa0i7l8aIbuk=)
                          4: sMnhFmeJWbipR4_Op8o8BgMQIWI.crl (hash: /aF8Y1WWDqsj8B1jYR6QJzMftb0eHWZi2OWqHP2fyC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:82:54:5b:d8:57:2d:c9:5b:b3:88:61:b6:31:bc:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
        Validity
            Not Before: Sep 20 11:10:07 2026 GMT
            Not After : Sep 21 11:10:07 2026 GMT
        Subject: CN=9f2e7e6680c79df266a979a0aa6804af0477241f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:53:68:95:90:2f:ba:24:26:95:20:7c:71:2d:
                    2e:6e:0c:43:35:88:63:52:3f:4b:9b:af:8e:77:17:
                    c5:1a:4d:bd:c6:be:8d:ab:5e:76:66:01:bc:21:f0:
                    c4:e1:52:a2:05:08:93:e8:d9:95:ff:26:9a:2e:c5:
                    88:6a:29:05:58:ba:35:aa:c3:d2:5a:a1:a1:df:8a:
                    f6:c5:5b:37:fa:d8:1e:92:7a:be:a8:ba:e6:d7:2c:
                    5c:1c:dc:ac:ed:a9:e3:bf:5d:15:42:1e:af:01:17:
                    c5:8f:ba:da:4a:76:f8:f6:37:25:04:b3:bc:df:54:
                    8e:07:ef:c1:05:fd:c0:77:2a:d5:82:f1:48:ef:4b:
                    95:8f:82:fc:6f:e9:3b:24:e3:bb:e5:b9:f0:ee:b6:
                    e1:ff:1e:48:27:2e:1a:3f:90:5b:92:56:44:81:e4:
                    b7:a1:b5:4e:d4:b3:df:2a:12:63:9e:5d:9b:4e:57:
                    44:80:4f:cf:fe:b6:3e:a0:97:fa:9e:7d:f0:35:6e:
                    8b:7a:09:03:18:16:7c:d5:a7:3c:3b:fd:34:d5:1a:
                    1c:a1:cd:4d:0a:97:e6:eb:75:84:8c:e1:64:f0:30:
                    c9:ac:e0:26:c8:64:a1:28:99:b6:ca:75:53:36:a5:
                    eb:d0:95:6e:fb:4c:24:c3:e8:e8:69:be:99:5f:3c:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2E:7E:66:80:C7:9D:F2:66:A9:79:A0:AA:68:04:AF:04:77:24:1F
            X509v3 Authority Key Identifier:
                keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a2:45:c0:10:31:33:13:fb:82:4a:95:2d:7c:45:30:2f:ec:
         4e:7b:d6:e8:f6:8f:a1:18:80:6c:61:47:2b:79:08:05:02:bc:
         04:4a:7b:24:68:6f:8c:67:af:0b:b3:5d:7e:d3:79:44:ad:7d:
         74:0c:1c:e4:7d:b8:b9:bc:e3:c8:68:e5:6e:d4:26:ba:85:3c:
         9b:aa:c2:f9:1e:5e:49:a7:76:90:39:8b:ce:ad:a5:bd:89:a1:
         f1:d0:30:10:d6:18:62:f0:da:b4:58:d3:14:53:c4:fb:36:9a:
         a4:0b:4f:24:ca:2d:81:9a:6b:79:c4:f7:4e:e8:8f:8b:73:b0:
         ac:c6:68:9b:69:23:77:34:0a:19:6d:ea:62:5c:4d:44:14:35:
         e4:b5:af:2f:9b:19:a8:df:96:9f:0b:a9:d5:67:3e:bf:05:58:
         e9:0c:80:31:ff:e6:b1:d4:eb:b0:94:d7:af:16:27:92:49:39:
         dc:d1:a6:87:36:57:8d:58:4c:a8:76:bd:f1:69:55:de:b2:8e:
         96:8b:cc:37:0b:c8:f6:60:3b:6c:0d:4e:a3:18:97:52:2b:49:
         eb:4f:29:2b:60:a6:26:fb:ca:36:90:92:c8:8f:19:ab:b4:56:
         d8:a8:02:3d:5a:6b:d2:46:d0:57:83:33:bc:1d:d9:3c:e2:fc:
         71:a2:1a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:52:30 2026 by rpki-client