Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
File:                     sxk4vHICgkRLq9OyazSStFats5c.mft (raw, json)
Hash identifier:          cfde4I1+93sjygOCDfh+wyiZTT14q4SlPeScp5ZtLTA=
Subject key identifier:   5F:FA:83:7F:63:47:DE:77:9F:A1:52:DA:DA:6E:D8:AE:EA:59:99:14
Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
Certificate issuer:       /CN=b31938bc720282444babd3b26b3492b456adb397
Certificate serial:       01A0D539115F8779B832AFE53D19A241CF02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
Manifest number:          0D8D
Signing time:             Thu 24 Sep 2026 21:01:21 +0000
Manifest this update:     Thu 24 Sep 2026 21:01:21 +0000
Manifest next update:     Fri 25 Sep 2026 21:01:21 +0000
Files and hashes:         1: eaw_KDLii_O0OZBia4ceyJvvRgg.roa (hash: 785x1F9Iz8gQQoHICXoHX9Lh+Vh5PnxM3BQ0Ya5+hPc=)
                          2: sxk4vHICgkRLq9OyazSStFats5c.crl (hash: wfa9zeLG+8kMJkSNZes9BAKxT5jz7y7T53+NYsxbFrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:39:11:5f:87:79:b8:32:af:e5:3d:19:a2:41:cf:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31938bc720282444babd3b26b3492b456adb397
        Validity
            Not Before: Sep 24 21:01:21 2026 GMT
            Not After : Sep 25 21:01:21 2026 GMT
        Subject: CN=5ffa837f6347de779fa152dada6ed8aeea599914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5f:59:af:58:dc:f7:b5:65:d9:b1:0b:0c:b1:
                    78:63:51:1d:d2:ae:7b:b9:26:2b:db:dc:8a:33:99:
                    43:d9:6b:42:26:e0:21:ee:9d:db:d1:a6:19:4f:aa:
                    99:66:11:21:f3:73:39:3d:ee:1d:60:bc:e5:4b:52:
                    54:b2:0b:ac:b3:44:44:8b:c2:31:6c:03:d6:62:8e:
                    1f:24:53:7e:ea:1b:22:17:58:0b:51:32:7b:99:e4:
                    23:8a:27:f0:f7:c0:9e:4a:09:47:06:52:e1:c2:34:
                    dd:c3:8c:45:8d:e9:21:b0:e2:86:cc:1c:5c:68:62:
                    c7:a1:13:08:36:df:9e:74:a3:16:28:da:a6:89:82:
                    75:47:c1:4c:0b:1b:ea:f9:3c:7c:9d:2f:da:c7:47:
                    06:8b:3c:48:b4:b4:d4:05:89:8a:14:95:48:e5:73:
                    a0:64:ab:c7:6d:25:c2:04:ca:75:eb:c0:81:47:aa:
                    8b:ca:04:44:98:5d:2c:94:c7:7f:4b:cc:f1:39:a6:
                    49:56:4b:80:4b:73:9d:10:27:87:09:e8:9e:bb:23:
                    f4:08:4d:e5:e8:4e:32:af:5d:d5:b3:ce:e9:a9:49:
                    37:0d:d3:ea:10:da:89:be:c4:d5:1f:85:f9:f6:50:
                    7f:13:36:6e:32:3a:1a:b6:c7:10:00:f8:a5:3c:f0:
                    49:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FA:83:7F:63:47:DE:77:9F:A1:52:DA:DA:6E:D8:AE:EA:59:99:14
            X509v3 Authority Key Identifier:
                keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:67:db:98:1e:4e:89:b1:be:0a:de:81:af:fd:fe:f6:57:75:
         26:cf:64:4a:e7:b8:47:3f:de:3c:1e:8f:e6:f1:a7:87:fa:db:
         f8:55:3d:4e:ce:46:0f:99:c4:99:dd:02:c9:cb:7c:bb:e1:2c:
         aa:50:79:ec:67:86:46:2a:dd:91:2b:f1:0c:e6:49:12:ef:44:
         1c:c7:95:c9:e8:bf:10:1a:bc:65:d3:89:98:3a:09:68:86:83:
         58:90:f6:2a:3a:c7:25:b6:e0:84:09:79:7a:ce:77:29:30:e5:
         a6:9c:ea:49:8b:68:fa:46:8a:81:b0:0d:6c:b2:90:4d:49:ca:
         43:46:2a:9a:de:8a:ea:8c:05:8b:5f:8b:04:5f:53:2d:9c:f8:
         dd:d3:f8:41:be:2a:5c:8a:a5:14:ee:0f:cc:6f:6f:ca:01:b0:
         36:2c:32:69:e1:8a:de:94:44:59:33:5d:d7:17:86:e3:ec:e3:
         7d:ff:ac:da:69:1d:a8:38:c9:d9:17:09:db:bd:c9:cf:33:88:
         25:d5:de:71:04:93:c4:47:af:12:20:62:99:e4:ac:28:ee:64:
         83:66:a4:e7:7e:91:ec:8f:62:8d:ae:a9:2a:bb:b3:b0:4c:d2:
         7f:cb:a2:20:23:22:85:8f:ef:b6:0e:3a:1f:01:09:bc:4e:c7:
         40:3e:fd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:31:25 2026 by rpki-client