Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
File:                     SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft (raw, json)
Hash identifier:          ztmZgAiRfHRwbG/+8Poe74I2mRLTCEQxutUukMS3nQY=
Subject key identifier:   8C:B8:DA:F2:49:10:87:01:71:36:44:B5:75:94:94:7E:00:00:7A:9B
Authority key identifier: 49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
Certificate issuer:       /CN=4983e96ff270f4eca9701258081bb5cf818966c8
Certificate serial:       01A11B99D850742103EC436A56129BA69E58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
Manifest number:          0670
Signing time:             Thu 08 Oct 2026 13:00:29 +0000
Manifest this update:     Thu 08 Oct 2026 13:00:29 +0000
Manifest next update:     Fri 09 Oct 2026 13:00:29 +0000
Files and hashes:         1: SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl (hash: TKwLTRhZCguvrVnafvEFQeRtgS1YVmCkSvi0nqa0bMA=)
                          2: zqYVRlTgvHpJDmnzblzgqUd1qtQ.roa (hash: e8da42eEgoMlNnpHHSa7Q7x96Sq3pNxhBs6tD28L410=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:99:d8:50:74:21:03:ec:43:6a:56:12:9b:a6:9e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4983e96ff270f4eca9701258081bb5cf818966c8
        Validity
            Not Before: Oct  8 13:00:29 2026 GMT
            Not After : Oct  9 13:00:29 2026 GMT
        Subject: CN=8cb8daf249108701713644b57594947e00007a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:1a:b0:20:49:38:f0:3f:1b:f8:9c:b8:cc:
                    5e:19:97:2d:60:82:2b:1f:76:0b:3c:6e:28:55:b2:
                    60:cb:12:38:9f:9d:e8:f5:b5:29:20:02:4b:b0:dc:
                    c9:aa:4f:86:bc:6c:75:30:03:36:3b:24:05:a3:fd:
                    82:d2:31:24:fb:1d:a4:65:fa:14:cf:d9:27:cb:2d:
                    64:f0:d3:7c:a9:09:0f:a0:f7:b0:88:66:fb:1a:d9:
                    d6:1e:96:fd:87:61:c8:65:a1:ed:c5:e5:22:52:eb:
                    d6:52:9c:6a:8b:63:9d:f1:80:3b:1f:55:3f:bc:8f:
                    e1:80:19:85:5d:1e:f6:82:1c:2f:9f:3d:33:ef:64:
                    f0:72:2c:4b:bb:ce:4b:ca:b9:65:60:50:23:28:6a:
                    66:2b:09:95:ea:63:8e:df:05:01:76:1b:af:96:0e:
                    66:6b:1f:72:86:c5:51:9e:bd:02:18:4d:be:55:81:
                    f6:79:5a:33:48:d3:f5:ac:44:cc:6a:1a:81:c1:8c:
                    30:1f:b2:f9:85:29:e9:a3:91:d2:fb:86:d3:40:9c:
                    09:2d:5f:c9:c5:0c:67:71:6a:b7:56:dd:ca:9c:6d:
                    63:4e:a5:b0:c5:39:a4:9b:d8:1a:c5:10:1f:24:89:
                    9e:3e:dc:eb:aa:79:a8:03:df:3c:a3:28:3a:0f:3d:
                    82:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B8:DA:F2:49:10:87:01:71:36:44:B5:75:94:94:7E:00:00:7A:9B
            X509v3 Authority Key Identifier:
                keyid:49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:dc:0e:35:7b:a5:63:db:b3:db:ec:ce:87:f9:ee:ff:de:f6:
         32:0f:c0:69:9f:cb:2c:99:12:b0:f6:fa:c9:24:99:9a:1f:2d:
         94:89:7d:81:77:92:61:ba:fc:39:63:7b:be:20:ef:0f:4d:f5:
         91:5b:21:2e:93:f7:1d:dc:40:8a:27:fa:56:9d:99:98:69:90:
         37:c6:62:3b:34:45:c4:11:46:bf:65:30:18:21:13:f6:b9:0e:
         d4:dc:52:28:15:e5:c3:0d:55:b8:d6:5e:e3:80:a3:10:87:a9:
         88:ba:8b:f8:69:0d:49:dc:f3:b7:05:a7:b4:bc:10:93:78:98:
         50:de:dc:a0:11:41:55:37:0a:ae:69:97:d8:97:dd:39:b5:af:
         9e:2f:28:86:47:77:23:1f:fc:3c:48:d7:9c:23:11:b0:fe:9e:
         3e:72:fc:d3:bb:53:87:55:9d:9d:82:c5:fd:a9:f6:8c:f6:aa:
         82:1d:a0:e7:9b:a2:c6:e0:54:75:0b:92:a9:25:39:89:40:67:
         42:96:cc:39:10:68:2c:7a:f9:24:66:13:ec:77:0c:f4:c6:04:
         11:88:e8:fc:35:a2:4b:18:66:89:87:76:4c:58:84:56:c5:74:
         49:ab:c1:3a:cb:bd:3e:8f:c8:bf:39:c2:c3:11:eb:84:5b:7d:
         90:80:a2:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEbmdhQdCED7ENqVhKbpp5YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODNlOTZmZjI3MGY0ZWNhOTcwMTI1ODA4MWJiNWNmODE4
OTY2YzgwHhcNMjYxMDA4MTMwMDI5WhcNMjYxMDA5MTMwMDI5WjAzMTEwLwYDVQQD
Eyg4Y2I4ZGFmMjQ5MTA4NzAxNzEzNjQ0YjU3NTk0OTQ3ZTAwMDA3YTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMcasCBJOPA/G/icuMxeGZctYIIr
H3YLPG4oVbJgyxI4n53o9bUpIAJLsNzJqk+GvGx1MAM2OyQFo/2C0jEk+x2kZfoU
z9knyy1k8NN8qQkPoPewiGb7GtnWHpb9h2HIZaHtxeUiUuvWUpxqi2Od8YA7H1U/
vI/hgBmFXR72ghwvnz0z72TwcixLu85LyrllYFAjKGpmKwmV6mOO3wUBdhuvlg5m
ax9yhsVRnr0CGE2+VYH2eVozSNP1rETMahqBwYwwH7L5hSnpo5HS+4bTQJwJLV/J
xQxncWq3Vt3KnG1jTqWwxTmkm9gaxRAfJImePtzrqnmoA988oyg6Dz2CnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIy42vJJEIcBcTZEtXWUlH4AAHqbMB8GA1UdIwQY
MBaAFEmD6W/ycPTsqXASWAgbtc+BiWbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lQcGJfSnc5T3lwY0JKWUNCdTF6NEdKWnNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZTBhNjctMGQ0NC00MjllLTlmOTct
NmNmNjgyYTE4NWQ0LzEvU1lQcGJfSnc5T3lwY0JKWUNCdTF6NEdKWnNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85ZTBhNjctMGQ0NC00MjllLTlmOTctNmNmNjgyYTE4NWQ0
LzEvU1lQcGJfSnc5T3lwY0JKWUNCdTF6NEdKWnNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9wONXul
Y9uz2+zOh/nu/972Mg/AaZ/LLJkSsPb6ySSZmh8tlIl9gXeSYbr8OWN7viDvD031
kVshLpP3HdxAiif6Vp2ZmGmQN8ZiOzRFxBFGv2UwGCET9rkO1NxSKBXlww1VuNZe
44CjEIepiLqL+GkNSdzztwWntLwQk3iYUN7coBFBVTcKrmmX2JfdObWvni8ohkd3
Ix/8PEjXnCMRsP6ePnL807tTh1WdnYLF/an2jPaqgh2g55uixuBUdQuSqSU5iUBn
QpbMORBoLHr5JGYT7HcM9MYEEYjo/DWiSxhmiYd2TFiEVsV0SavBOsu9Po/IvznC
wxHrhFt9kICicg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:53:52 2026 by rpki-client