Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.mft
File:                     SlW-JEUcNjrtD78lsV-0XRjrhbs.mft (raw, json)
Hash identifier:          hzwqIGuxL6aaBch/9YAXxkVjD2s7ltfC7rQ1n5CGeME=
Subject key identifier:   C0:A4:C6:B0:D0:98:C2:D4:FF:0B:5C:9E:F7:EB:51:11:4C:B2:C3:FD
Authority key identifier: 4A:55:BE:24:45:1C:36:3A:ED:0F:BF:25:B1:5F:B4:5D:18:EB:85:BB
Certificate issuer:       /CN=4a55be24451c363aed0fbf25b15fb45d18eb85bb
Certificate serial:       01A0D7CC930D34874B07B0376F7949C1F991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SlW-JEUcNjrtD78lsV-0XRjrhbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.mft
Manifest number:          26
Signing time:             Fri 25 Sep 2026 09:01:43 +0000
Manifest this update:     Fri 25 Sep 2026 09:01:43 +0000
Manifest next update:     Sat 26 Sep 2026 09:01:43 +0000
Files and hashes:         1: 5zLKCLk5iYERmYqDGmtd8mEeKSQ.asa (hash: sx1+DgkP1FpQxqvdjvZ6S4CXbH1TZq5egsnoLK3GPBY=)
                          2: SlW-JEUcNjrtD78lsV-0XRjrhbs.crl (hash: b5XTlg+ErjIZ+rEsc3a/P97sNjiQZxPljVZ7qasX2pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SlW-JEUcNjrtD78lsV-0XRjrhbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:cc:93:0d:34:87:4b:07:b0:37:6f:79:49:c1:f9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a55be24451c363aed0fbf25b15fb45d18eb85bb
        Validity
            Not Before: Sep 25 09:01:43 2026 GMT
            Not After : Sep 26 09:01:43 2026 GMT
        Subject: CN=c0a4c6b0d098c2d4ff0b5c9ef7eb51114cb2c3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d8:62:0a:d0:ec:94:71:2b:2b:de:54:13:5e:
                    62:e9:04:6b:cd:3c:54:a6:08:00:11:eb:6f:bf:a8:
                    cd:cc:8d:8b:cc:17:24:a9:45:ae:b0:08:9d:33:17:
                    0c:dd:e6:6d:4b:8e:f5:f0:8a:dc:87:26:b3:b8:66:
                    c9:9f:28:92:1b:31:29:33:36:aa:97:eb:fd:42:26:
                    59:ed:78:65:07:78:bf:2d:96:92:84:1e:87:6d:2a:
                    b6:f8:df:93:75:43:5f:fb:b7:e9:36:34:1e:70:f6:
                    89:bd:7b:cc:c3:71:3c:fe:5d:f6:08:1b:e0:1f:04:
                    e5:0d:7a:2c:ec:a0:7f:1b:1a:4a:b7:eb:bb:c6:77:
                    25:93:cc:45:60:de:2d:fa:e6:e4:71:89:70:5b:5c:
                    e6:b6:68:94:e2:64:d5:86:53:23:bf:6a:9f:83:f0:
                    58:02:f5:40:2f:72:29:2a:29:ff:f1:2e:70:64:89:
                    6d:6a:66:b8:af:26:0d:66:da:c2:d0:2e:69:8f:1a:
                    4b:73:58:75:47:51:43:d4:e7:f1:77:64:2f:1d:9d:
                    b8:35:84:fc:9c:f8:2f:93:fc:23:1f:e5:1f:ff:ae:
                    97:39:f1:b5:33:f4:ba:b1:7b:d7:17:3f:6d:ea:48:
                    76:54:d7:e6:4d:05:db:bd:fc:e7:20:a6:8f:b8:d6:
                    be:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A4:C6:B0:D0:98:C2:D4:FF:0B:5C:9E:F7:EB:51:11:4C:B2:C3:FD
            X509v3 Authority Key Identifier:
                keyid:4A:55:BE:24:45:1C:36:3A:ED:0F:BF:25:B1:5F:B4:5D:18:EB:85:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlW-JEUcNjrtD78lsV-0XRjrhbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0c:e6:49:1e:a4:99:ca:51:e4:f8:b8:3c:8b:c5:55:aa:83:
         5a:94:92:d2:05:78:05:ce:1f:1e:dc:b3:46:dd:7b:f0:44:48:
         49:03:b1:fb:0c:e1:ff:6e:65:2d:fd:4e:c7:99:94:d0:68:18:
         af:1f:0a:b0:fb:41:06:b1:5b:b0:49:93:27:30:91:46:d6:1f:
         29:be:e9:39:88:9e:34:e0:9f:d8:5a:d9:9b:00:86:22:38:bd:
         88:74:d5:1d:d0:9b:d0:1b:3c:18:b9:12:6b:eb:10:9c:4c:42:
         7e:87:5f:d1:31:39:d6:85:c3:f8:ea:b3:bf:f6:24:2e:6f:30:
         5c:10:dd:b0:d0:2f:a1:8c:42:85:e4:cc:84:4f:16:48:13:78:
         0b:0a:a8:b7:8b:24:de:64:ae:20:4b:4c:aa:ea:a5:49:f4:77:
         75:3a:95:e6:85:d7:5e:a0:be:6d:4d:c6:75:10:a9:4b:c0:f1:
         e9:55:41:0c:e0:2a:7d:a5:93:88:3c:18:b8:a4:ac:c4:69:c6:
         de:0b:df:1c:e8:3e:29:d8:8b:48:43:b9:bd:ba:21:4f:5b:dc:
         31:4b:86:f7:1d:ae:cd:c2:b5:4c:5b:d6:fb:41:07:82:b0:c8:
         44:e9:47:32:18:08:75:b9:5d:14:bb:3f:8f:2c:5d:8d:db:6d:
         d4:b0:56:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:48:31 2026 by rpki-client