Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
File:                     sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json)
Hash identifier:          yKfqLQdJhac31Rw21yWmNlsbdXMLR69hRg4355uYgvs=
Subject key identifier:   43:40:E1:71:7D:2F:FD:A6:E4:2E:5A:69:45:40:A6:11:6E:97:D5:8D
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Certificate issuer:       /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial:       01A0C067D68DA914229CE585A14932140897
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
Manifest number:          078B
Signing time:             Sun 20 Sep 2026 20:00:25 +0000
Manifest this update:     Sun 20 Sep 2026 20:00:25 +0000
Manifest next update:     Mon 21 Sep 2026 20:00:25 +0000
Files and hashes:         1: NDmhXzZ8uEuR9tjCtcKsEKDgyyw.roa (hash: 5IZVF4mjF20orEhDUu/WVZB3xhzdmh0JCOjJNcS3hA4=)
                          2: P1pi-fzHu11nz54MgyJAbBSwILI.roa (hash: UTJfTUyPTVBn82h248K6mdRAAGmP9nekxHQ3ON0RaUA=)
                          3: oiH1aC3hd-YG_5l_iFQf6YzX1ZI.roa (hash: /ZDMc+U53FKEQ3a7RMNSx6X/as7T1UTJjmNtNBktR18=)
                          4: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: RJpt/eLDk9dQEV+gm8xc98hVQfNgPedZRTOPH9I8NWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:19:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:67:d6:8d:a9:14:22:9c:e5:85:a1:49:32:14:08:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
        Validity
            Not Before: Sep 20 20:00:25 2026 GMT
            Not After : Sep 21 20:00:25 2026 GMT
        Subject: CN=4340e1717d2ffda6e42e5a694540a6116e97d58d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:de:4a:60:85:5a:3d:db:9e:ff:b4:3e:cb:50:
                    26:31:8d:da:d8:2f:82:c7:95:ee:2c:42:45:d6:03:
                    a1:31:2d:02:96:69:b6:8d:cc:11:da:40:b0:e4:65:
                    55:4b:06:37:ae:ea:4e:ef:7b:bd:59:df:62:aa:ba:
                    9f:8d:4b:85:a3:22:10:74:f4:35:7d:a8:fc:0e:be:
                    86:3f:36:95:d1:c1:6c:1e:0e:5f:37:a8:38:4f:03:
                    d9:77:1b:57:15:e0:5d:55:9f:c2:66:96:84:2e:ca:
                    37:47:74:d8:ca:80:97:3f:a7:4c:84:ca:b5:f9:78:
                    77:a1:1f:a6:2e:11:ef:6e:0f:16:ef:07:d9:14:7a:
                    e5:b5:9c:03:a6:a1:61:03:2e:d1:aa:f2:33:33:43:
                    72:ca:99:a2:04:ee:bb:e4:4b:da:47:92:b5:56:36:
                    c5:eb:b1:35:d2:e1:54:9e:ce:c0:54:c3:65:8b:85:
                    97:b5:7e:be:f6:42:41:f0:42:34:ca:c2:a8:2d:2d:
                    de:44:c5:39:c9:7c:e3:ec:95:19:28:d2:91:c6:93:
                    f6:f4:7e:44:d5:34:a3:e5:9f:b1:4f:3d:79:96:ec:
                    52:3e:71:7e:17:76:34:36:5b:c7:23:3f:84:1a:49:
                    79:42:e1:41:7e:54:96:b4:1d:38:5a:54:75:77:c2:
                    df:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:40:E1:71:7D:2F:FD:A6:E4:2E:5A:69:45:40:A6:11:6E:97:D5:8D
            X509v3 Authority Key Identifier:
                keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:94:32:f3:23:14:a0:d3:cb:a4:53:a6:eb:b5:ec:28:3b:f4:
         11:ff:cf:7e:df:a8:73:52:ac:13:66:32:af:26:b3:34:d3:d7:
         60:e6:91:fc:e5:78:d2:44:28:28:49:45:ee:60:3a:76:30:1d:
         b5:8f:b5:4f:86:ef:7d:3a:27:b3:c4:ee:13:aa:41:e2:30:6d:
         82:c4:ca:9b:e5:d6:bd:5e:34:a3:8e:21:8a:0f:ba:c6:04:13:
         d1:21:42:01:d9:ef:b1:b7:5e:ac:fd:9a:3a:20:e4:66:61:58:
         ff:cf:77:11:38:0e:ff:43:af:15:4c:f5:18:03:6e:38:61:8e:
         2e:04:59:af:2f:90:5f:1c:44:d5:d0:72:ba:20:7e:4a:b0:e9:
         2f:5d:3b:36:05:f3:1f:a4:86:ca:0d:ca:98:b1:93:60:98:85:
         52:19:f8:c8:d6:f8:b8:47:2e:bf:d4:0c:ef:41:16:73:58:c9:
         df:41:d6:45:40:2e:c4:25:de:7c:df:9d:5d:1b:a0:f8:75:c4:
         df:c5:1f:02:af:f4:e9:67:03:b5:f7:90:e9:7f:28:06:67:15:
         30:c9:8c:33:36:23:8e:b8:24:2f:89:94:20:14:6a:66:56:58:
         61:ab:7b:e9:39:67:79:80:cd:27:89:df:36:18:94:4e:bb:18:
         0c:73:08:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:21:14 2026 by rpki-client