Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
File:                     SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json)
Hash identifier:          YRqFV1OjDd5vKLttdVDBdmbE/zzUszxCED1O/Vsp1h4=
Subject key identifier:   0D:A9:E4:53:3B:6E:0D:B9:3A:79:9A:49:F4:5E:69:F3:6D:A0:87:03
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Certificate issuer:       /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial:       01A0D9177D4E9E4F0ECC4757D9AE9EAF01DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
Manifest number:          1756
Signing time:             Fri 25 Sep 2026 15:03:10 +0000
Manifest this update:     Fri 25 Sep 2026 15:03:10 +0000
Manifest next update:     Sat 26 Sep 2026 15:03:10 +0000
Files and hashes:         1: Ep5ktzb7jazkCqqKIA1eaooWA3A.roa (hash: V0HuBh1yvdXINaO+p6RF/CkRfffpWDmrMD6p3MKWJhs=)
                          2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: ErweeZG0TzRxl7yfg02IscGKBFaOdSynb2kx+3g9IM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:17:7d:4e:9e:4f:0e:cc:47:57:d9:ae:9e:af:01:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
        Validity
            Not Before: Sep 25 15:03:10 2026 GMT
            Not After : Sep 26 15:03:10 2026 GMT
        Subject: CN=0da9e4533b6e0db93a799a49f45e69f36da08703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3d:48:f0:fb:94:00:a6:2e:13:d4:e1:29:e5:
                    25:6d:69:19:c3:d5:71:b8:c8:3b:0d:bb:48:51:31:
                    17:32:87:c0:ab:e0:fc:b3:0d:9c:33:b4:ba:51:73:
                    2d:b8:19:a5:7e:fe:fb:24:4f:7c:6d:f6:23:7e:48:
                    ac:05:cf:ff:d2:2a:c1:ac:9e:8b:61:5c:61:d6:3a:
                    2a:83:8a:44:2a:aa:8b:45:8f:4f:d6:8c:73:b3:d9:
                    90:65:31:2a:c4:d0:54:18:b0:9d:08:78:39:dd:68:
                    04:2e:6a:59:52:50:49:63:5a:b4:19:66:be:95:02:
                    83:73:64:f8:5b:59:e5:3a:d8:c1:2e:96:e4:5a:4e:
                    ca:ee:22:76:54:f4:a6:64:c7:1c:0a:49:a1:01:21:
                    70:ac:71:67:68:27:22:e9:e3:2e:12:e6:68:09:79:
                    b0:16:38:e9:ca:4b:d7:06:22:38:78:35:16:d2:ec:
                    47:22:8f:d4:2d:4b:99:63:16:62:34:3e:01:8c:4d:
                    b9:34:49:92:1c:08:3c:42:72:5d:20:10:d4:ef:29:
                    c9:d4:50:fe:70:89:a5:46:62:2a:a6:de:a3:e6:dd:
                    7a:18:af:35:12:a5:30:18:57:cb:ff:79:c1:de:33:
                    8e:40:55:3d:ee:f6:4b:8e:79:e1:71:73:a8:26:96:
                    74:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A9:E4:53:3B:6E:0D:B9:3A:79:9A:49:F4:5E:69:F3:6D:A0:87:03
            X509v3 Authority Key Identifier:
                keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:84:c1:8a:5a:1d:ae:8f:c4:5c:4f:80:1b:7f:ee:78:11:a2:
         0e:b7:b9:cc:5c:ff:ad:a6:83:9e:c4:e2:cc:26:e7:37:fb:68:
         46:1d:d4:91:e3:58:69:97:d3:25:a3:bf:ce:d4:35:1b:8b:15:
         4c:50:ef:b0:d5:d3:84:92:b1:45:de:9e:98:a8:86:43:77:3b:
         2d:55:4a:0d:e7:87:36:7a:f9:36:32:51:99:42:9c:34:e8:77:
         c3:5e:91:30:c8:90:5f:33:d2:46:eb:0f:02:2f:01:59:e5:b9:
         db:57:02:cb:90:ad:5e:7d:5d:3d:de:be:e4:ba:d9:ad:8d:c8:
         01:dd:52:65:54:4c:60:de:d4:a5:ec:dd:ca:1d:ab:92:6d:2f:
         49:14:22:11:4e:3b:69:62:0a:b2:fc:55:84:2d:9d:3d:12:0d:
         2c:91:80:9b:e4:69:11:a2:16:bc:f1:a2:99:d8:78:78:6e:49:
         47:87:11:c7:ca:bd:22:1a:46:cb:cc:74:57:e1:46:09:0c:a5:
         47:a0:56:77:73:e5:6a:fb:ed:a6:25:9f:07:de:ad:e9:2d:9f:
         d3:f4:df:cd:7a:38:65:09:64:98:4f:db:53:79:ce:da:db:74:
         e6:26:52:e3:5c:41:72:98:27:92:03:1e:2d:94:2b:9e:38:ee:
         57:4e:67:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:29:35 2026 by rpki-client