Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft
File:                     Szx5xlXI4rA6V-A78tED6BdUy-I.mft (raw, json)
Hash identifier:          BswUGhWfs4DXjuxxSWkZn+5DDnHWDVebhoJQTDhyHTg=
Subject key identifier:   48:91:80:1D:08:DE:39:0C:70:73:AA:75:73:9A:12:CF:CD:F1:69:91
Authority key identifier: 4B:3C:79:C6:55:C8:E2:B0:3A:57:E0:3B:F2:D1:03:E8:17:54:CB:E2
Certificate issuer:       /CN=4b3c79c655c8e2b03a57e03bf2d103e81754cbe2
Certificate serial:       01A122411E7142EE1126B0545D1D3611C6B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Szx5xlXI4rA6V-A78tED6BdUy-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft
Manifest number:          016B
Signing time:             Fri 09 Oct 2026 20:00:55 +0000
Manifest this update:     Fri 09 Oct 2026 20:00:55 +0000
Manifest next update:     Sat 10 Oct 2026 20:00:55 +0000
Files and hashes:         1: PI0F8x9CPayW399Vvg4Zxhy5Mzo.asa (hash: HDptImqZldK6ZOWVfpx8UrKAynGnTippOHJQCxKk/aY=)
                          2: Szx5xlXI4rA6V-A78tED6BdUy-I.crl (hash: rIp7BQLpW2E8CX4sjIzN2cRyktl6NpdbIlLbQLcJX+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Szx5xlXI4rA6V-A78tED6BdUy-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:22:41:1e:71:42:ee:11:26:b0:54:5d:1d:36:11:c6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3c79c655c8e2b03a57e03bf2d103e81754cbe2
        Validity
            Not Before: Oct  9 20:00:55 2026 GMT
            Not After : Oct 10 20:00:55 2026 GMT
        Subject: CN=4891801d08de390c7073aa75739a12cfcdf16991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b2:0e:67:ab:f1:bc:4d:6f:3f:e1:bb:04:4a:
                    8e:2c:05:df:cb:39:7c:2e:e0:13:86:93:99:af:e9:
                    0e:c8:4f:76:8a:ca:28:dc:46:9b:0e:5a:70:9e:7d:
                    9c:fa:bb:9a:eb:9e:7c:73:9b:86:7a:ae:49:63:bc:
                    51:f1:99:f5:8f:dd:8a:1f:79:b0:7d:6a:84:b1:55:
                    d6:44:cf:7f:f5:79:7d:49:ee:43:cb:b4:47:f4:67:
                    65:fb:f2:83:d4:05:c0:d1:ba:17:60:1e:18:de:9e:
                    fb:59:6e:49:f5:a1:1d:4b:ad:f5:70:ac:9e:5b:dc:
                    38:1e:71:31:17:bf:74:c8:10:23:49:4c:d0:60:2e:
                    93:a8:15:2d:1d:80:e0:a8:ad:49:46:64:44:66:6e:
                    51:c2:ab:fc:fd:0a:37:ae:f3:80:ec:c6:05:97:ce:
                    d6:d5:d5:2d:dd:91:03:be:20:6a:cb:b2:cb:8f:6b:
                    b9:d5:ef:ed:98:f7:3d:f9:e4:38:f9:3c:a8:fc:15:
                    ec:07:3e:9a:40:12:70:e9:72:fd:88:df:db:80:8d:
                    14:6c:ef:a1:86:c7:ed:47:30:38:49:b6:14:50:33:
                    5f:d9:b6:24:e2:98:49:34:83:87:14:ba:f4:49:e9:
                    e7:ec:2f:be:b5:3b:42:25:a1:fb:07:56:55:ea:4e:
                    ea:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:91:80:1D:08:DE:39:0C:70:73:AA:75:73:9A:12:CF:CD:F1:69:91
            X509v3 Authority Key Identifier:
                keyid:4B:3C:79:C6:55:C8:E2:B0:3A:57:E0:3B:F2:D1:03:E8:17:54:CB:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Szx5xlXI4rA6V-A78tED6BdUy-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:96:6c:ec:81:e1:96:5b:a5:76:32:0e:c3:ee:e9:1f:7f:93:
         2a:81:26:2a:2e:71:38:82:fb:54:97:df:0a:04:04:b6:3a:b0:
         4c:0e:5c:99:04:2f:8a:c1:ff:5a:85:36:0f:a7:e8:fb:74:3b:
         b2:eb:ee:ea:07:11:fd:94:1f:99:db:6c:e0:2f:69:21:ca:69:
         0e:49:62:e9:db:25:43:51:6c:e8:d0:f7:cd:f1:89:9f:e2:3e:
         7e:61:72:a9:6d:57:3f:90:13:ac:fc:70:49:9e:05:b2:ea:00:
         3b:9f:a4:ae:7c:bc:0c:39:58:b6:72:21:c1:97:6a:3d:66:54:
         36:85:13:18:c2:e7:75:7a:e1:2a:4f:3f:20:e6:3d:de:40:a0:
         da:7f:bd:9b:b7:db:f2:6e:4a:20:2a:fd:20:b7:9a:56:02:7f:
         c0:96:96:c2:5a:b7:4a:ec:db:3a:a8:1c:94:02:30:90:b8:aa:
         f3:82:65:07:ef:14:24:10:e0:73:24:72:69:16:50:67:1f:b3:
         e9:c9:df:35:da:5a:de:e2:7a:33:77:52:20:87:59:0e:0c:55:
         7b:6c:59:fc:64:92:38:df:16:a3:cb:55:1e:69:e7:1e:e1:3b:
         99:12:3a:48:c3:75:f3:f2:79:c1:d2:84:a9:53:56:d2:a7:99:
         37:ba:b6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:06:25 2026 by rpki-client