Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
File:                     S-8wYkIQwA06ht_WyAEGErsbEqA.mft (raw, json)
Hash identifier:          lMQrqcStho4m+UU9XZtXXSaduCGmAJNYRIgaraiRbAI=
Subject key identifier:   37:92:DE:B2:8D:7F:1E:47:C4:97:DF:32:E2:09:98:AF:D1:B6:C0:FA
Authority key identifier: 4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0
Certificate issuer:       /CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
Certificate serial:       01A102B65C8D7ABF886E0D7837AC76559424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
Manifest number:          0A21
Signing time:             Sat 03 Oct 2026 17:01:07 +0000
Manifest this update:     Sat 03 Oct 2026 17:01:07 +0000
Manifest next update:     Sun 04 Oct 2026 17:01:07 +0000
Files and hashes:         1: Qg5YVX-ArwviT-5zEMtdK0QZQ3k.roa (hash: N2GUp/A12YuOzgdEUjTB8syXYjaMrKhtAtS9ZwORjp0=)
                          2: S-8wYkIQwA06ht_WyAEGErsbEqA.crl (hash: pjYVqJSI7w5oVZUxdQhvGPRmEkCIrNaCiwqx9UNrAGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:b6:5c:8d:7a:bf:88:6e:0d:78:37:ac:76:55:94:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bef30624210c00d3a86dfd6c8010612bb1b12a0
        Validity
            Not Before: Oct  3 17:01:07 2026 GMT
            Not After : Oct  4 17:01:07 2026 GMT
        Subject: CN=3792deb28d7f1e47c497df32e20998afd1b6c0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:73:a7:f2:23:d8:07:5f:e8:b3:88:1f:83:
                    3d:54:fe:63:1e:af:d0:de:20:83:a3:f7:ea:b7:ff:
                    6d:ac:dd:36:cc:1a:54:24:0b:51:bb:8a:c3:77:e4:
                    85:c1:94:9e:70:52:cb:41:66:a9:92:5f:14:44:35:
                    8d:e5:ff:d0:6d:3b:21:5a:8b:a1:48:fd:4c:f3:ac:
                    a0:87:7d:83:62:f5:04:80:f5:fc:19:16:0f:85:f8:
                    a3:03:36:2d:58:d5:f9:dc:86:b3:fc:0f:fe:29:6f:
                    c6:b1:93:56:fe:91:40:3d:b2:a7:26:74:ad:5a:dc:
                    39:8a:36:56:3c:c7:0a:33:a0:09:58:3f:ff:27:aa:
                    1e:0b:46:07:73:8d:33:0a:78:8a:ee:20:ae:cb:3b:
                    8d:b6:23:b3:2e:66:92:22:2f:87:23:f9:86:14:85:
                    4f:ff:41:e3:79:16:ae:4f:d9:ab:00:bf:61:ce:ca:
                    5d:7d:8a:66:53:77:f6:db:14:5e:26:a5:87:35:dc:
                    18:fc:1b:51:94:1e:03:79:f9:a6:9b:b9:38:d6:78:
                    04:d9:4e:87:4d:05:e9:e1:75:8a:3c:d5:d1:46:78:
                    51:d1:a2:22:52:f9:16:45:94:36:47:72:55:29:6b:
                    63:ed:1e:46:ab:65:f7:21:a3:74:f1:21:16:41:21:
                    a7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:92:DE:B2:8D:7F:1E:47:C4:97:DF:32:E2:09:98:AF:D1:B6:C0:FA
            X509v3 Authority Key Identifier:
                keyid:4B:EF:30:62:42:10:C0:0D:3A:86:DF:D6:C8:01:06:12:BB:1B:12:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-8wYkIQwA06ht_WyAEGErsbEqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/383f43-84ea-4623-b77d-78927fc78e7d/1/S-8wYkIQwA06ht_WyAEGErsbEqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a3:d5:d5:70:6d:30:fd:da:cb:9b:3c:6a:99:e7:0d:73:9a:
         43:00:4d:ff:41:c7:c1:3e:a3:ff:47:a2:65:7a:d5:e4:e0:64:
         53:8b:40:a2:ba:12:6e:7d:31:c3:28:50:7d:f7:81:f5:63:4f:
         9c:55:fc:0f:17:52:b9:ef:21:e9:41:5e:69:85:7c:d1:e5:a6:
         56:e7:8e:38:45:9a:e3:b3:1d:d3:d5:96:75:83:03:13:e9:6c:
         06:fe:4c:8d:40:4e:63:95:02:8d:21:72:53:e9:8b:22:c5:6d:
         81:8c:9c:36:a1:5f:f1:d8:b9:ec:9f:d8:9e:38:bf:a7:ff:da:
         f4:d7:22:a4:11:6f:e5:f6:2f:e7:e3:f1:b1:75:ff:9c:23:47:
         24:ec:0c:97:77:71:d3:7d:ad:9d:e2:f7:4a:0e:b7:e4:28:36:
         55:1e:a1:54:58:44:4e:f6:99:c2:88:63:5d:4b:2d:4a:48:87:
         ad:3f:18:e2:d4:04:af:c9:6e:03:47:36:38:2e:a9:6f:bf:e0:
         34:0c:a4:5d:99:e0:18:42:b7:ae:57:8b:9e:a1:3d:77:14:0a:
         40:ad:86:63:0f:a4:a0:3a:f8:4b:53:76:1b:e8:be:18:a2:85:
         a3:c7:83:e6:2a:bb:74:d7:6e:d7:8e:ad:4e:ac:ca:55:a3:3e:
         c1:57:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 21:08:04 2026 by rpki-client