Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File:                     sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier:          9BNKfJZ2HU3O0DKLWM4Swl2+9keoHawgRYu6o6U00Jw=
Subject key identifier:   5F:D4:DB:F6:2A:94:7F:44:D5:D7:5F:9E:B0:43:80:0D:84:71:36:61
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer:       /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial:       01A0DBA92749463834CE082AC46E273763D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number:          1A74
Signing time:             Sat 26 Sep 2026 03:01:30 +0000
Manifest this update:     Sat 26 Sep 2026 03:01:30 +0000
Manifest next update:     Sun 27 Sep 2026 03:01:30 +0000
Files and hashes:         1: 6Ie5sPRwouKDZ63tHw4hyjJqq10.roa (hash: XieQfcrAZvNQQrTrpSeqvq6G/q8IwApTZ6vvc3HLXb0=)
                          2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: +gXffzACH1o1RY9SP444RPbptIMqHTGVWaVPOQ59GWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:27:49:46:38:34:ce:08:2a:c4:6e:27:37:63:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
        Validity
            Not Before: Sep 26 03:01:30 2026 GMT
            Not After : Sep 27 03:01:30 2026 GMT
        Subject: CN=5fd4dbf62a947f44d5d75f9eb043800d84713661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:52:0d:2f:6c:3b:42:06:e4:e6:4e:48:34:4d:
                    04:62:77:c5:1a:ac:e4:fd:7b:e7:7a:f3:2a:f1:ca:
                    ac:56:8e:9f:33:77:0b:f7:16:b7:53:cc:18:2d:2c:
                    f3:82:3e:9d:7c:ed:3d:fc:68:f5:da:28:54:50:74:
                    90:d9:ae:07:b8:a4:9f:2b:6b:df:69:06:37:34:9c:
                    a9:78:da:34:e7:b0:77:d8:6e:d2:ed:12:93:8d:4f:
                    44:81:52:37:fb:2f:af:b1:3f:f8:03:f1:7d:a4:b6:
                    9f:62:9e:67:c5:7d:2d:55:33:63:fb:61:4b:3d:ab:
                    85:78:d6:32:55:55:30:ef:04:15:0f:3e:89:0e:65:
                    01:c2:19:46:e3:8a:f6:24:cf:04:cb:e7:99:4d:22:
                    6d:34:1d:b3:82:49:8e:05:8c:89:1e:6f:e6:3a:2c:
                    4f:69:92:28:78:df:a4:83:35:93:24:7f:53:95:e9:
                    b8:e5:b2:66:a0:a1:e1:7d:0d:91:83:6e:08:2b:c6:
                    a1:21:9d:92:a7:fe:be:51:1b:32:e7:d4:6c:85:d6:
                    39:84:c4:d7:7e:78:d6:91:22:de:bb:4d:2e:ed:20:
                    58:7a:4f:34:06:c7:f8:be:08:44:82:cc:82:fb:e8:
                    43:4a:84:e9:18:1c:4d:55:ca:5b:03:58:36:c9:9f:
                    b0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D4:DB:F6:2A:94:7F:44:D5:D7:5F:9E:B0:43:80:0D:84:71:36:61
            X509v3 Authority Key Identifier:
                keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9a:f5:d9:1d:f3:bb:c9:c5:37:2f:6c:97:ab:c4:61:65:bf:
         51:56:eb:86:d8:5e:46:36:a4:c2:5b:2f:1f:91:a1:e3:94:fe:
         c6:e2:e1:c2:c2:89:ae:73:bf:98:3e:a9:13:5d:fe:9a:38:00:
         c2:85:52:a4:66:af:f8:9e:6b:23:04:9b:f8:70:69:5c:d0:38:
         94:53:35:bf:64:48:50:f0:8a:87:74:0a:7f:1d:46:a7:8d:ce:
         99:6c:44:9b:e1:20:32:a1:be:31:5f:b6:29:1e:a0:61:8e:5c:
         c9:af:4d:3b:77:af:30:bb:d8:7a:20:e8:82:c6:29:6e:93:97:
         26:5a:59:39:47:80:d8:99:8f:72:3c:0a:26:2d:8d:06:f4:67:
         a9:c1:d6:6a:25:40:42:c1:99:fd:de:35:40:01:e1:c8:1e:de:
         d3:b0:07:b7:9b:8a:0b:d7:de:d6:17:0a:e2:8d:44:ba:38:7a:
         db:46:3d:f9:71:af:85:e8:64:92:23:58:c6:0c:78:39:67:57:
         1e:9c:1a:7e:37:4f:9b:39:74:ee:22:05:76:8f:da:3f:9e:c4:
         a3:8f:02:33:3d:62:18:82:bc:56:a8:bb:cd:51:55:67:dc:4c:
         76:50:12:83:7b:27:f4:67:49:06:d3:c5:a6:d7:55:7a:99:dc:
         ab:6f:6f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:43:08 2026 by rpki-client