Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
File:                     sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft (raw, json)
Hash identifier:          n6iwSS4PhBrHbKutreMqiYJXwPCPh4UresG5mmWP50c=
Subject key identifier:   02:5D:0A:73:B5:74:BF:C1:76:35:BA:E4:D3:13:7F:CE:63:BB:B5:47
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Certificate issuer:       /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial:       01A0DF8569915502413E2F1DDC6BE2D83A62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
Manifest number:          137E
Signing time:             Sat 26 Sep 2026 21:00:57 +0000
Manifest this update:     Sat 26 Sep 2026 21:00:57 +0000
Manifest next update:     Sun 27 Sep 2026 21:00:57 +0000
Files and hashes:         1: 1ZD-5sWPvLvF_F5r7aK4sjXeBa8.roa (hash: 9g3E8L94O35utFKdVj/OF7X+jv2TAGMuo7bfCk2FBWk=)
                          2: Jgh8TRgca-Yzk4zbDo1y-y8oAjA.roa (hash: 1YiIe3dsEVG85vOw2eS5VT5pNrhUblvJwxJsfNgGFh8=)
                          3: kpO4RG28fYYVmBuJSIXGaHvSxU0.roa (hash: i8inyU2Y1UbsH+wXnBk66d0sVuBHQPuFEaJpwKKuPzA=)
                          4: sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl (hash: OdSagK7u06lYktoaK+x/WiEQe7TEdq/YQ0DPquTO2IQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:85:69:91:55:02:41:3e:2f:1d:dc:6b:e2:d8:3a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
        Validity
            Not Before: Sep 26 21:00:57 2026 GMT
            Not After : Sep 27 21:00:57 2026 GMT
        Subject: CN=025d0a73b574bfc17635bae4d3137fce63bbb547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:da:f8:cb:0e:29:fd:ee:5c:70:27:b5:6b:a3:
                    fe:34:fa:67:f1:60:84:fd:53:47:aa:9d:34:ae:68:
                    11:46:37:87:1c:d7:25:3d:50:85:41:7e:5b:4f:7d:
                    a5:0c:0b:8d:36:f3:2e:91:98:61:5b:16:03:51:29:
                    0f:1d:38:c3:61:42:fb:f3:4a:a6:85:9f:47:2b:4f:
                    d7:6b:0b:8a:1a:7b:0d:60:f1:60:cb:82:ac:98:60:
                    ff:37:bb:10:4e:7a:27:ce:d7:78:68:65:d1:fc:ff:
                    8a:a1:80:9b:b9:31:fc:69:85:bb:1d:6a:7e:3b:9f:
                    03:16:07:aa:e2:42:50:14:9e:91:52:17:f1:e7:bc:
                    72:d7:07:4e:ac:8c:c1:cb:10:c4:71:01:14:a4:d6:
                    f9:b5:82:b4:b3:23:3c:5e:bc:1c:00:86:27:07:79:
                    d5:5b:fc:c3:63:08:86:e8:93:11:e4:0a:a4:42:7b:
                    e6:c1:9d:7c:5a:cc:9c:ff:25:8e:2c:0e:dd:5f:a1:
                    46:9f:0d:10:f7:73:01:95:15:13:9d:83:1e:8c:65:
                    4d:9c:05:cf:78:30:0b:24:e1:19:7a:21:22:05:45:
                    80:d5:0e:69:a3:84:3f:01:2a:06:68:be:db:02:b4:
                    bb:c0:67:70:ff:96:75:0d:95:fd:51:82:d9:46:cc:
                    6c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5D:0A:73:B5:74:BF:C1:76:35:BA:E4:D3:13:7F:CE:63:BB:B5:47
            X509v3 Authority Key Identifier:
                keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e2:eb:ce:74:a2:8b:ee:aa:8a:03:c0:c5:5c:61:c0:43:96:
         86:71:f8:82:fb:0a:dc:91:41:16:95:f5:b2:76:2a:bf:46:af:
         65:de:44:c9:aa:2f:f7:58:f2:70:55:dc:2e:55:e5:52:74:ce:
         b4:aa:f7:53:ce:1a:6b:02:7b:75:b6:71:16:e7:08:46:7d:ff:
         0e:35:3d:f7:e8:af:5e:2d:dd:46:83:6d:c5:a0:06:2c:b8:2c:
         08:66:4e:29:c0:b0:79:bc:2a:0c:8b:b0:b3:2b:a4:41:16:af:
         a4:1a:75:9f:e6:91:27:ec:60:9c:98:5c:bd:e6:2d:c3:0f:ef:
         a3:2e:21:ad:65:34:4d:9a:1d:1c:56:08:ca:f3:72:ef:d1:e7:
         82:20:7c:a2:bb:1b:a2:a9:c3:35:45:21:b9:4f:c8:20:60:36:
         7c:70:04:4b:75:68:55:32:c0:50:5a:60:f0:f3:c1:c4:95:57:
         58:a3:15:9f:59:9a:16:da:00:ff:15:1f:27:19:4c:ae:03:d4:
         f2:ce:40:ed:2e:2b:75:57:8f:16:e5:09:5a:9d:cc:2d:c8:b0:
         39:6f:69:50:8b:10:3b:f9:7e:2b:23:94:83:ea:ab:d1:3a:52:
         7c:4f:8b:4c:94:28:55:25:17:0b:f5:76:ba:2e:3d:7c:63:b6:
         83:a2:c0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:48:07 2026 by rpki-client