Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File:                     Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier:          JiZs9j+UH1Wv77SL0dHonT2MHYFTG0jKyEJZ6W+ZbuY=
Subject key identifier:   E8:04:C8:FD:B3:5B:5B:FD:92:60:69:83:B2:57:08:5E:65:C7:8C:33
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer:       /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial:       01A0C558174E2AC141993E35D7DA94C69E0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number:          1A69
Signing time:             Mon 21 Sep 2026 19:01:19 +0000
Manifest this update:     Mon 21 Sep 2026 19:01:19 +0000
Manifest next update:     Tue 22 Sep 2026 19:01:19 +0000
Files and hashes:         1: C7qqIpTwYf7YNOtV5OPXaeMTQAI.roa (hash: KjPNPOXZwVjnuKWDEKGdvD1QS5oO9ubnZY9SVeLWd9M=)
                          2: LQ8BLEzCZY3QowxDFOGsxJ9uOAU.roa (hash: k5Vr4nHqfxcqa1n3ZsAMJk6uHu5H4HSOAsJXgQNi+cQ=)
                          3: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: ZCXjT5CBkjeaZXntJ85AbsJXNt4BX2ehtgSeyR14urg=)
                          4: eu9ae3eLYSM_cPxuWpcvPn92OU8.roa (hash: HOeGxAKohjtOD7Ke0LKRStGG+xTv10n59udd9QSjFEw=)
                          5: v52ZTcdolNoppoOrn38Ym0qTh6M.roa (hash: qxbDlAOHfwm8HgM041yuk5h+Fnz9xMLxo2BwLuu0zHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:58:17:4e:2a:c1:41:99:3e:35:d7:da:94:c6:9e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
        Validity
            Not Before: Sep 21 19:01:19 2026 GMT
            Not After : Sep 22 19:01:19 2026 GMT
        Subject: CN=e804c8fdb35b5bfd92606983b257085e65c78c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:11:95:77:3a:ee:ff:00:4c:2c:7a:33:f3:a0:
                    ec:4c:f9:29:89:cb:b0:7a:26:ec:a9:09:a2:2e:04:
                    35:2c:77:ca:26:b7:16:5a:90:d9:7d:4f:8d:83:6d:
                    e1:d1:ae:d2:d1:09:ca:82:11:43:e3:24:f4:59:0e:
                    dc:a6:45:2b:64:92:d8:28:59:a2:b6:96:13:77:c8:
                    2e:4a:41:9b:fc:65:bb:17:71:ea:e3:c8:3b:d1:d4:
                    12:ae:14:22:63:69:72:97:92:c2:1b:a4:44:2f:2f:
                    4b:c2:16:ef:0e:30:1b:c6:7e:6c:a4:4e:79:fa:2a:
                    79:7d:74:6e:c0:46:fa:cc:83:53:da:79:22:c0:69:
                    ff:fe:cd:78:8c:56:18:57:0f:04:a3:a1:ef:e8:92:
                    ed:a9:ff:9d:0d:ff:6e:16:d6:f0:68:fb:49:e1:0b:
                    f3:78:c3:92:a1:52:ae:cc:3d:88:43:a5:be:61:43:
                    56:15:11:d7:f8:62:03:01:0a:5a:01:4b:ec:64:23:
                    63:03:bd:21:59:86:14:14:2d:93:2d:d0:26:e9:99:
                    22:db:7f:8b:b9:3a:99:06:f6:45:bb:f4:fe:cb:7d:
                    4f:5c:57:91:5a:25:72:db:9a:d8:96:39:0d:17:43:
                    f5:18:15:20:00:c7:b2:b4:79:a3:cc:d7:4e:aa:9a:
                    61:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:04:C8:FD:B3:5B:5B:FD:92:60:69:83:B2:57:08:5E:65:C7:8C:33
            X509v3 Authority Key Identifier:
                keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c8:ee:f9:94:a8:a8:5d:cd:ec:50:2e:67:b6:54:d4:43:a2:
         68:67:1b:70:a3:7f:d1:47:df:ec:4f:63:93:4a:01:70:bd:20:
         22:34:2a:47:d0:a7:b2:23:42:6e:59:00:89:75:ef:04:88:19:
         38:a0:15:10:46:0a:00:15:9d:0c:d6:34:f1:b2:31:cf:94:46:
         3d:66:26:a8:6b:2b:ce:81:ed:7c:07:9b:ea:68:da:1a:9e:b6:
         d4:dd:82:b6:c7:9e:a5:22:e7:3a:90:0c:f7:67:cc:7d:65:3a:
         11:05:55:a7:01:39:44:66:d6:f6:b7:58:32:fa:af:5a:4d:0b:
         bb:bc:67:22:53:03:0a:a0:ba:3b:7f:8f:4a:11:e1:55:7b:87:
         ca:34:81:99:7c:56:01:ef:20:46:8f:da:25:fc:24:c0:0b:70:
         7c:0a:d7:28:13:2d:cb:26:33:ea:4e:e8:a0:c5:04:9c:7b:81:
         da:bc:11:0b:e6:07:50:83:4f:6c:e0:be:fc:1f:36:8b:fe:5c:
         bb:68:13:be:89:a2:6e:b3:b1:a4:67:7b:3b:c7:25:2d:49:eb:
         a7:84:28:77:c5:2e:4c:1d:04:2b:6a:7d:4b:04:45:f6:48:84:
         fa:83:95:e7:52:2d:28:28:fa:7f:50:1b:e3:26:93:e8:cd:ab:
         e8:26:04:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:08:53 2026 by rpki-client