Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
File:                     SbJERkTEM0jXxQ9OUOdDVumJbb8.mft (raw, json)
Hash identifier:          Rhzy80gWdCS7xeZsKFCmhueAj9WwuG00dEdnD0dDNcw=
Subject key identifier:   71:86:0F:8C:39:21:9A:10:AA:B0:F8:04:9C:50:DF:02:DE:42:D4:B9
Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
Certificate issuer:       /CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Certificate serial:       01A0C10CF1E047FC4640074630ABE6422B70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
Manifest number:          17BA
Signing time:             Sun 20 Sep 2026 23:00:46 +0000
Manifest this update:     Sun 20 Sep 2026 23:00:46 +0000
Manifest next update:     Mon 21 Sep 2026 23:00:46 +0000
Files and hashes:         1: 1y38PR10Vv3q34i9joY2RmqK9ws.roa (hash: WeX7D0CbRCituwqc2ZHAm4HR95Ee3JW1/xIonHquU3w=)
                          2: Py-y3i4hM_niS2FAlbK-g-CG53U.roa (hash: XmwAKXCN1UVsid2Ow64xLKVGJOuuu5RfqZ+9WMGZctw=)
                          3: SbJERkTEM0jXxQ9OUOdDVumJbb8.crl (hash: cs7vFgEAs7RwKdGSXizggQ3ADFKlYj4PNIIFC9Ss46Q=)
                          4: yXa8XbTaH683GFEjkOW8VCRIjpE.roa (hash: l5nJIcq0a2VDJfhrhqSb9wFUsKAsvOaRuHeId15ZhA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:0c:f1:e0:47:fc:46:40:07:46:30:ab:e6:42:2b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf
        Validity
            Not Before: Sep 20 23:00:46 2026 GMT
            Not After : Sep 21 23:00:46 2026 GMT
        Subject: CN=71860f8c39219a10aab0f8049c50df02de42d4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:44:39:42:e2:d2:55:21:f4:20:bf:40:81:
                    7c:a0:fc:15:ea:2f:77:f6:b1:29:aa:ab:e2:5f:bd:
                    93:33:08:37:5e:66:11:e5:90:a0:1a:09:07:be:ea:
                    75:6c:f3:b9:d0:3e:8e:ba:4a:77:14:0e:0b:7c:ca:
                    fb:ff:3f:b7:e8:39:ec:65:b1:4d:10:67:ff:5c:b0:
                    bd:12:03:a3:6e:19:e9:ff:b1:ec:a8:40:3b:9e:2e:
                    42:f0:2b:31:c0:f6:3c:3e:c3:40:2a:d7:2e:2c:ad:
                    91:3e:a2:c0:2e:ca:c1:f1:52:33:05:e0:eb:d9:5d:
                    0c:ab:4b:ae:ba:94:d2:22:bb:2d:80:a3:dd:07:30:
                    c4:15:8c:ec:3d:46:51:60:70:08:ff:84:71:28:c7:
                    27:d5:d5:81:6c:a7:6e:2b:83:aa:fb:0c:62:5a:4f:
                    0e:62:b4:46:0f:6d:7b:78:9d:c3:67:aa:fb:fa:5a:
                    ad:98:07:11:ea:26:f6:14:87:da:e7:d5:be:a8:f1:
                    d6:cf:fb:0f:28:98:d7:43:5f:08:cb:f3:a9:9e:bc:
                    9e:39:da:07:c8:a3:1a:0f:c7:e8:d3:f5:ef:ec:6f:
                    84:fc:90:39:8e:62:e2:23:83:fa:3d:25:8a:f8:39:
                    25:54:8b:ea:e1:10:a8:71:fc:47:c7:eb:80:d6:06:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:86:0F:8C:39:21:9A:10:AA:B0:F8:04:9C:50:DF:02:DE:42:D4:B9
            X509v3 Authority Key Identifier:
                keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:c6:67:66:25:0b:09:22:1a:73:40:29:08:2a:35:8a:99:db:
         69:5a:5f:13:9f:a0:f7:e1:6a:ce:16:75:69:f4:8d:57:8a:a3:
         d1:ab:59:c3:27:6b:ea:da:a2:51:0e:62:cd:9b:f9:77:f5:32:
         a4:de:72:14:d4:19:01:d3:bd:91:4a:46:af:fb:66:70:fd:57:
         4d:c2:2e:a1:cd:ea:56:bb:80:d8:c0:e6:41:53:b3:e7:2f:2f:
         2f:49:26:5f:1a:05:1a:8c:59:d7:bf:15:f5:2c:c6:0a:3c:7b:
         1e:fb:f1:fd:e8:69:0e:14:23:dc:05:cb:d9:1a:99:52:76:38:
         d7:03:3a:fa:be:5d:9d:07:55:4f:c8:83:c2:4b:82:53:a5:09:
         b4:49:9b:cf:1b:fd:15:76:0b:2b:f9:73:d9:72:bf:8c:f2:63:
         d1:82:46:05:c0:f5:eb:7b:92:1c:9a:cf:24:da:47:55:d5:57:
         47:26:ef:33:8f:c9:b5:81:fa:d1:4e:ca:80:d0:f6:1b:aa:db:
         4d:bb:57:e5:7e:fd:97:65:70:2a:cb:31:58:cf:de:dc:8e:c9:
         ca:4f:ff:68:23:12:f9:8e:c7:63:4d:2a:d3:e0:08:de:78:51:
         d3:21:88:bd:24:e1:bf:c7:bc:f9:db:bb:76:2e:f5:23:0f:fa:
         18:d1:2f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:20:19 2026 by rpki-client