Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
File:                     SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft (raw, json)
Hash identifier:          w6iw/xfoa4E/tlZKAnSlwATExn4Fm44ifk6mdUkkGKo=
Subject key identifier:   3E:C1:B0:53:B9:31:B8:31:00:3E:F9:46:0E:F5:CE:95:6D:C5:0C:30
Authority key identifier: 49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D
Certificate issuer:       /CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
Certificate serial:       01A1261DCF79BB991CFFDFB57DDFF159746D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
Manifest number:          08A8
Signing time:             Sat 10 Oct 2026 14:00:50 +0000
Manifest this update:     Sat 10 Oct 2026 14:00:50 +0000
Manifest next update:     Sun 11 Oct 2026 14:00:50 +0000
Files and hashes:         1: KgqOJvnjitpRt1U686ywPTayP5A.roa (hash: RoNo13qMkmhokM2MMXGnBD9uvJP9pS8UBZJLsr3FWfw=)
                          2: SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl (hash: IK3xmS/j5Ytuti7wz5vTNRnX+v4VLoAAO2yPQQGEYW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:26:1d:cf:79:bb:99:1c:ff:df:b5:7d:df:f1:59:74:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
        Validity
            Not Before: Oct 10 14:00:50 2026 GMT
            Not After : Oct 11 14:00:50 2026 GMT
        Subject: CN=3ec1b053b931b831003ef9460ef5ce956dc50c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:5d:73:ce:e3:5c:1c:02:9f:a3:3b:68:ec:
                    f0:a5:54:f6:5b:ad:08:e0:67:25:6f:65:49:ca:0d:
                    f2:8d:33:f0:3b:41:88:3b:e4:3b:72:8f:eb:6e:e0:
                    e5:28:56:02:91:51:d3:52:7b:e6:57:2e:21:a3:10:
                    2f:1b:f8:74:bf:6a:b8:16:ad:27:7a:39:09:76:7f:
                    90:06:19:ec:41:51:de:ea:f8:7f:31:fb:ab:33:82:
                    be:1d:e1:29:8d:74:7c:b4:69:8f:be:aa:ab:81:b6:
                    bd:c0:a3:11:d0:3e:33:2f:ad:6e:b7:2c:69:5a:b4:
                    46:16:22:9e:a1:ee:bf:f7:64:11:1f:15:5c:22:14:
                    c8:8a:f0:54:f9:cd:db:a0:3f:10:b4:c6:7b:b6:92:
                    e0:68:0d:28:85:17:16:98:89:94:7a:db:e9:8e:2e:
                    8a:3d:16:d8:bf:f1:2d:22:2b:37:c4:5f:01:96:45:
                    79:17:0e:50:c9:4c:93:0e:66:21:78:78:5b:cb:8d:
                    d1:06:82:5e:05:b0:92:b7:ef:95:f1:7b:46:70:59:
                    9e:4d:e6:72:8e:67:ce:b5:4c:9e:94:ec:89:83:20:
                    4b:7d:c9:23:72:13:06:8b:53:57:ff:c7:6e:3b:3a:
                    31:0f:1f:52:e5:e8:f6:95:e9:65:27:5b:9a:63:28:
                    4c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C1:B0:53:B9:31:B8:31:00:3E:F9:46:0E:F5:CE:95:6D:C5:0C:30
            X509v3 Authority Key Identifier:
                keyid:49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:af:eb:c5:2f:1d:b9:cd:bd:7b:4a:02:ac:4b:8f:7d:e4:ba:
         a4:32:00:a7:ca:1a:30:1a:fe:03:da:00:bb:e4:e0:3f:ae:f3:
         99:d2:14:07:a5:53:8c:4c:5f:5f:bb:b2:02:22:c8:db:86:8f:
         d1:90:26:b4:6f:8b:82:fd:b7:b3:95:e7:60:c3:73:d6:2b:15:
         5d:46:43:ce:0a:11:e6:52:03:0e:51:51:ce:80:9a:10:67:b6:
         1d:81:f2:f9:b7:5a:72:72:13:a4:41:1e:30:c8:80:e9:e4:e8:
         39:3e:2d:fa:67:d7:31:43:6f:0d:0f:cc:06:2c:7c:ca:c1:81:
         af:f9:57:37:5b:a4:05:95:d0:05:78:18:11:48:3b:d2:7e:3b:
         68:fa:0c:33:49:9b:ad:7e:98:d1:ae:ec:f2:f8:b4:29:3f:d3:
         04:d9:fb:f0:03:20:8e:89:df:e2:dc:36:cf:d2:c7:c2:48:2c:
         ca:0e:f7:72:45:1e:7d:cf:b8:fb:72:6a:b7:12:bc:e5:e3:6d:
         9e:d1:90:1c:6c:0d:ab:a7:31:e4:7f:97:3f:7c:ef:c8:99:df:
         b2:f2:49:32:a8:36:11:60:01:02:6f:8a:61:08:77:ac:95:fe:
         82:03:ba:92:1a:e1:8a:31:66:db:5a:a5:58:a8:50:4c:58:a3:
         41:41:fe:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEmHc95u5kc/9+1fd/xWXRtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODUwZjFiZmQ5OGQ4NDBhMmFhOGE4M2ZhNGYwODk0NDM5
ZDk5OGQwHhcNMjYxMDEwMTQwMDUwWhcNMjYxMDExMTQwMDUwWjAzMTEwLwYDVQQD
EygzZWMxYjA1M2I5MzFiODMxMDAzZWY5NDYwZWY1Y2U5NTZkYzUwYzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySxdc87jXBwCn6M7aOzwpVT2W60I
4Gclb2VJyg3yjTPwO0GIO+Q7co/rbuDlKFYCkVHTUnvmVy4hoxAvG/h0v2q4Fq0n
ejkJdn+QBhnsQVHe6vh/MfurM4K+HeEpjXR8tGmPvqqrgba9wKMR0D4zL61utyxp
WrRGFiKeoe6/92QRHxVcIhTIivBU+c3boD8QtMZ7tpLgaA0ohRcWmImUetvpji6K
PRbYv/EtIis3xF8BlkV5Fw5QyUyTDmYheHhby43RBoJeBbCSt++V8XtGcFmeTeZy
jmfOtUyelOyJgyBLfckjchMGi1NX/8duOzoxDx9S5ej2lellJ1uaYyhM8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7BsFO5MbgxAD75Rg71zpVtxQwwMB8GA1UdIwQY
MBaAFEmFDxv9mNhAoqqKg/pPCJRDnZmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lVUEdfMlkyRUNpcW9xRC1rOElsRU9kbVkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81MGVmMmUtN2ExYy00MDVhLTkxMTct
ZGUxNGUzNTMyZmQ4LzEvU1lVUEdfMlkyRUNpcW9xRC1rOElsRU9kbVkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81MGVmMmUtN2ExYy00MDVhLTkxMTctZGUxNGUzNTMyZmQ4
LzEvU1lVUEdfMlkyRUNpcW9xRC1rOElsRU9kbVkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6/rxS8d
uc29e0oCrEuPfeS6pDIAp8oaMBr+A9oAu+TgP67zmdIUB6VTjExfX7uyAiLI24aP
0ZAmtG+Lgv23s5XnYMNz1isVXUZDzgoR5lIDDlFRzoCaEGe2HYHy+bdacnITpEEe
MMiA6eToOT4t+mfXMUNvDQ/MBix8ysGBr/lXN1ukBZXQBXgYEUg70n47aPoMM0mb
rX6Y0a7s8vi0KT/TBNn78AMgjonf4tw2z9LHwkgsyg73ckUefc+4+3JqtxK85eNt
ntGQHGwNq6cx5H+XP3zvyJnfsvJJMqg2EWABAm+KYQh3rJX+ggO6khrhijFm21ql
WKhQTFijQUH+4Q==
-----END CERTIFICATE-----
Generated at Sat Oct 10 21:29:23 2026 by rpki-client