Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
File:                     SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json)
Hash identifier:          T9i8tT0/EF+t6MlTFhQWnrZ39ssoiAk8ykanWqRE6CU=
Subject key identifier:   51:75:2C:96:9E:4C:DE:BF:93:F7:D8:8C:E1:72:25:47:E7:38:37:65
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Certificate issuer:       /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial:       01A0BF556EC06D78BBCAD3827EB422040CE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
Manifest number:          1B0A
Signing time:             Sun 20 Sep 2026 15:00:42 +0000
Manifest this update:     Sun 20 Sep 2026 15:00:42 +0000
Manifest next update:     Mon 21 Sep 2026 15:00:42 +0000
Files and hashes:         1: 4VyO6tQEDMUP2tLzrE4kzWWMgq8.roa (hash: Ce7KWD1zwmOm3FwKp9C1Y5E8hGZ90tuB7cIXoSzRivQ=)
                          2: 57_pJKO7tOgXH0MplNvXkDg8tRA.roa (hash: LO7AwILSoQbsBv8ZylAG72hZh71ZbQO1+iDt4zC/BEA=)
                          3: B1VUBVxCvEU8qqs7rAJJmtdKLzE.roa (hash: UEfiOpqf/O8EypdEhRwQmImaHChHVEzYmDVlh0IbMfM=)
                          4: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: T1hzZ/3NzI2cPIKRYSjR68vtubG7E+ZNiOtNjherR5E=)
                          5: T811gJjy7XiJUFo4KQMv1DP4J0c.roa (hash: YHQ8mEYBcVSe6HvlouVuQRjPYXMMsDbydlGVeyEjDb0=)
                          6: YyS0FsjSPcRe5OVpS-bddQflhs0.roa (hash: BHCA82IrgZgjYdpNT21uf8Z5RHz1RwAUgryBUXbtYGs=)
                          7: d8kiYzlEKQLdX-UflZDxlYGnmRo.roa (hash: pIWLP+nuBmaLwVa5s824iZjtnJtxSoE6FNL2XIkxyMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:55:6e:c0:6d:78:bb:ca:d3:82:7e:b4:22:04:0c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
        Validity
            Not Before: Sep 20 15:00:42 2026 GMT
            Not After : Sep 21 15:00:42 2026 GMT
        Subject: CN=51752c969e4cdebf93f7d88ce1722547e7383765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4e:ca:9a:05:45:55:52:3f:65:b7:bb:ab:17:
                    20:65:60:8c:98:1a:16:12:2b:72:6e:1a:e9:77:aa:
                    69:fd:23:42:62:8c:86:16:c2:78:9f:35:02:1f:e2:
                    06:9f:75:8e:eb:47:e0:aa:1c:14:26:f3:d5:38:2d:
                    3f:06:c3:c5:4d:43:1d:43:60:ce:c6:59:d7:d1:e0:
                    30:56:a7:fd:29:6c:54:6f:0a:85:d7:c9:f2:b9:b3:
                    8e:a5:e1:ca:8d:13:bd:69:86:e6:e1:c4:f2:20:18:
                    95:80:c8:77:3d:7b:e0:a5:f0:30:60:85:6e:98:84:
                    a7:44:e9:46:81:6c:bf:9f:99:2f:eb:b8:84:99:96:
                    d3:78:2e:1d:dc:43:89:77:b0:af:79:ef:ef:8d:ea:
                    3f:9e:9f:aa:09:e4:f2:94:77:1e:02:99:04:dc:a6:
                    15:bd:13:15:67:30:95:fd:50:1a:a9:ca:41:9b:92:
                    99:aa:e3:fd:90:2d:d5:88:3f:26:60:b7:da:61:1c:
                    30:0c:13:e9:f8:f3:a6:d2:7d:36:4f:f5:d8:6a:4d:
                    58:5e:76:0b:dd:0a:59:04:41:4e:0e:c4:76:5b:1a:
                    29:29:52:0e:30:bf:ab:0f:56:05:a7:72:32:f0:dc:
                    99:20:8e:1f:f6:7c:1d:b5:b6:d0:30:e0:3f:ff:b9:
                    75:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:75:2C:96:9E:4C:DE:BF:93:F7:D8:8C:E1:72:25:47:E7:38:37:65
            X509v3 Authority Key Identifier:
                keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:38:fd:a0:b9:35:1c:35:a9:04:c0:cc:ff:37:5b:19:88:29:
         b6:e9:e1:f8:70:a4:31:75:01:77:bb:47:f6:74:fe:f8:93:ca:
         46:41:1d:27:2d:a3:cb:7e:18:00:06:e3:57:ef:07:24:72:ed:
         3a:5f:d6:b1:cf:b7:2d:03:d1:48:44:e9:17:fe:d2:70:a7:f3:
         24:7b:54:c6:f2:d5:7d:22:87:4d:2d:ad:08:27:67:b0:1f:b8:
         2b:63:6b:43:8e:0d:ad:c5:3b:77:fb:8e:a7:28:b4:65:66:ca:
         08:c1:0b:a1:e5:d8:46:d2:5d:f9:d9:07:ae:82:84:26:6f:c8:
         70:6f:fc:86:e2:c0:d8:b0:a1:f9:4b:c3:3e:f6:d0:e3:96:e8:
         65:09:67:ab:10:98:3d:25:f2:0f:e7:1b:9f:cb:0b:9d:8a:bd:
         84:29:7c:30:5b:bb:f9:11:46:a3:32:f3:b1:4b:82:3b:8d:55:
         f5:5c:c7:91:43:cb:f1:1b:ff:ff:93:54:f2:3d:18:1d:f1:33:
         00:ca:e0:82:77:a3:bd:2e:f4:da:f9:71:06:52:a8:17:6e:c7:
         a9:b9:ce:3d:f1:b7:a6:fc:0d:5f:e3:88:d8:dc:ba:8f:60:cd:
         53:12:d5:83:e5:77:32:73:d4:36:a1:de:fa:83:9c:0d:4c:6e:
         a0:18:69:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:13:25 2026 by rpki-client