Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
File:                     SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json)
Hash identifier:          span1kSYneXi9CZWDoe7m5qstPC/JX/hxDYizOoV11w=
Subject key identifier:   12:E5:46:14:B5:BF:8D:3C:C8:40:31:32:02:47:E2:FE:08:3D:78:B3
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Certificate issuer:       /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial:       019FA975BEAF5CD32C63FF64D2BC44A46E76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
Manifest number:          1A6E
Signing time:             Tue 28 Jul 2026 16:01:33 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:33 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:33 +0000
Files and hashes:         1: 4VyO6tQEDMUP2tLzrE4kzWWMgq8.roa (hash: Ce7KWD1zwmOm3FwKp9C1Y5E8hGZ90tuB7cIXoSzRivQ=)
                          2: 57_pJKO7tOgXH0MplNvXkDg8tRA.roa (hash: LO7AwILSoQbsBv8ZylAG72hZh71ZbQO1+iDt4zC/BEA=)
                          3: B1VUBVxCvEU8qqs7rAJJmtdKLzE.roa (hash: UEfiOpqf/O8EypdEhRwQmImaHChHVEzYmDVlh0IbMfM=)
                          4: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: dmBYvIsjUCHJu1Q0STt0VPDN63VoVfuFsjECLT/7kvY=)
                          5: TMsha0GRszbL5uv24xLt-ZfZgKc.roa (hash: j5QxVvGBFLOVC7/0gok3R4odJR1SrmBkpeCDz/Tn8is=)
                          6: Y3783nUrRTFZBbngMY7aX-quJlo.roa (hash: 5p9sIZIS1RVqID7GzDJiyhaYF7TJdTLEzWd1pXiwNwY=)
                          7: YyS0FsjSPcRe5OVpS-bddQflhs0.roa (hash: BHCA82IrgZgjYdpNT21uf8Z5RHz1RwAUgryBUXbtYGs=)
                          8: aT_NF-3W3Lad21l-SRMcNJ4ndmA.roa (hash: /YnsUGWzI7HuX6dhQIDwbZFM15scYBxgtWzy8QmfJ0I=)
                          9: d8kiYzlEKQLdX-UflZDxlYGnmRo.roa (hash: pIWLP+nuBmaLwVa5s824iZjtnJtxSoE6FNL2XIkxyMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:be:af:5c:d3:2c:63:ff:64:d2:bc:44:a4:6e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
        Validity
            Not Before: Jul 28 16:01:33 2026 GMT
            Not After : Jul 29 16:01:33 2026 GMT
        Subject: CN=12e54614b5bf8d3cc84031320247e2fe083d78b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:55:8b:1d:ec:ea:28:2e:70:29:6e:26:1c:6b:
                    b7:e4:5e:0b:57:7f:af:0e:a4:1d:de:45:c5:f3:ba:
                    23:33:93:f8:93:c2:a0:98:b1:d3:59:96:4e:87:6c:
                    cb:61:f5:32:75:e1:b5:51:1a:40:e4:8e:60:b0:c5:
                    a2:06:7c:78:28:e1:a3:34:49:c7:4a:17:3a:88:ef:
                    10:12:f1:8d:d4:a4:df:08:8f:67:c9:6c:f2:78:42:
                    ef:eb:ee:cf:c2:92:f5:b8:41:fb:d2:ce:05:60:78:
                    1b:1c:fd:44:67:8e:85:0d:f3:61:a3:5b:cc:8b:14:
                    8e:cd:21:a0:22:11:29:db:0f:41:10:86:c5:71:6d:
                    7c:f9:ce:50:fe:5e:bd:a3:7f:f1:3d:91:90:e5:4a:
                    88:fd:dd:98:80:a0:46:fa:0e:40:aa:e6:ee:c2:8b:
                    2d:32:08:85:f3:a1:e2:26:56:37:d9:2d:07:b0:fb:
                    e8:b0:6b:f2:7f:10:27:de:dc:6b:0b:66:07:7b:8f:
                    6c:48:3f:66:4f:37:38:b2:cd:bf:7a:8e:10:0e:23:
                    36:64:32:f1:2a:72:82:2a:35:84:dc:3b:aa:6a:1e:
                    b5:57:0b:6f:21:59:8c:03:19:32:09:9a:24:07:8d:
                    39:11:e7:c8:d9:49:9f:8a:b1:13:14:43:51:14:c9:
                    db:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E5:46:14:B5:BF:8D:3C:C8:40:31:32:02:47:E2:FE:08:3D:78:B3
            X509v3 Authority Key Identifier:
                keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:2b:b0:82:86:db:36:7f:08:e2:ae:bc:bd:60:37:80:da:a4:
         df:65:ba:5a:52:1c:f4:e5:16:9d:de:69:bb:16:9c:bd:ee:9f:
         aa:f1:f8:c7:7c:33:9f:02:de:1c:e5:12:bb:19:4e:d8:f8:d5:
         0e:b7:b4:60:d9:63:bd:8b:17:c8:39:c5:e4:7a:7e:48:d1:d8:
         78:08:65:84:f3:eb:4b:69:d3:a3:5b:5b:3b:eb:af:10:b6:ad:
         13:47:00:87:fc:1a:ac:fa:66:a7:44:01:93:5c:05:d6:e6:24:
         b3:42:71:ad:c1:29:6e:7f:8d:b9:cb:ef:4c:73:1f:89:ba:9b:
         df:f1:7e:38:42:74:4c:86:4f:fc:c4:39:71:f0:0e:0f:dd:c0:
         96:d1:c7:d6:39:cf:dd:02:97:9d:3d:d0:66:a2:96:4a:32:49:
         d4:76:76:3e:97:9d:42:38:50:11:34:38:05:b1:3e:0e:62:22:
         eb:25:25:d6:bb:f4:70:77:85:3f:ea:00:c6:90:63:eb:05:25:
         e3:c5:08:75:be:e1:e0:4c:19:5a:1a:6a:79:f5:39:f1:5b:67:
         28:f9:67:06:c1:f2:b4:0b:99:a2:f5:95:3f:64:16:df:a2:75:
         4f:09:ff:89:92:1d:90:cd:4a:81:80:0c:77:91:fe:f8:43:20:
         4c:7e:46:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:50:23 2026 by rpki-client