Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
File:                     SFldSlTtZEITxEYZXjb3jsGig5k.mft (raw, json)
Hash identifier:          a+hP02wTRraSB+l3X3ePQCIMRvnXMb1JOU7fuEZGJe8=
Subject key identifier:   C5:EE:AF:B8:6A:15:B9:F7:CB:C7:04:99:B7:7A:6E:D5:B2:8C:AD:D1
Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
Certificate issuer:       /CN=48595d4a54ed644213c446195e36f78ec1a28399
Certificate serial:       01A0EBF8E878C64CD58C6591E084455AF3E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
Manifest number:          1A7A
Signing time:             Tue 29 Sep 2026 07:02:33 +0000
Manifest this update:     Tue 29 Sep 2026 07:02:33 +0000
Manifest next update:     Wed 30 Sep 2026 07:02:33 +0000
Files and hashes:         1: SFldSlTtZEITxEYZXjb3jsGig5k.crl (hash: l5pBfg4UsWCwaaRhJnerKEzwO8r/AwjLkkNpvwfSXLw=)
                          2: hLXYn7_sE8_0uE-9APcSyfa3cKM.roa (hash: OnfUzd7ri0bA88lhkI8jx6ukwUTJ7Iy7tmQtDjoFSz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 07:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:f8:e8:78:c6:4c:d5:8c:65:91:e0:84:45:5a:f3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399
        Validity
            Not Before: Sep 29 07:02:33 2026 GMT
            Not After : Sep 30 07:02:33 2026 GMT
        Subject: CN=c5eeafb86a15b9f7cbc70499b77a6ed5b28cadd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:e1:26:32:a4:46:21:88:52:cc:c8:b2:96:
                    c6:00:1b:5c:ae:1c:54:01:57:af:24:3c:0e:b7:f3:
                    a1:3d:f2:cd:f6:9c:6e:40:0d:78:cc:39:63:8a:5f:
                    d6:47:68:38:a5:95:de:0c:5f:f7:25:0f:da:af:24:
                    44:f8:86:c1:2b:c4:af:94:23:89:b7:8f:37:20:4f:
                    24:9a:ff:d7:10:18:36:69:b9:6d:dd:43:e0:05:17:
                    02:ae:3a:a3:02:66:a3:e2:08:f8:61:5e:2b:16:8d:
                    49:29:0c:0d:97:73:10:1f:ab:04:90:fd:c3:a6:c3:
                    3d:f2:5e:1f:2c:9d:16:d0:95:a1:ee:61:2e:ce:4f:
                    b0:14:96:fc:c6:cd:7e:63:85:22:2d:ef:63:1c:43:
                    ea:c5:da:7c:2c:60:c8:18:6a:cd:16:1c:8e:c1:16:
                    d9:59:4d:3d:e3:bb:2e:f3:49:85:72:a9:61:95:e5:
                    e6:fb:57:0d:55:20:af:ba:cb:00:76:a3:b1:15:5b:
                    10:76:9e:77:f1:31:30:2e:96:30:26:15:48:9b:43:
                    ae:56:2c:b2:1e:b1:6c:6d:b4:3f:47:6b:6f:de:2b:
                    15:66:9c:93:47:e7:d7:9f:d1:0b:9a:45:2d:f6:68:
                    5f:5c:42:60:7a:d5:78:8d:4c:6f:01:23:e5:a7:0b:
                    0e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EE:AF:B8:6A:15:B9:F7:CB:C7:04:99:B7:7A:6E:D5:B2:8C:AD:D1
            X509v3 Authority Key Identifier:
                keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:52:7b:27:79:ab:a2:02:c9:b2:5b:88:02:f5:87:60:8f:2e:
         e2:f5:67:eb:96:ff:e2:2c:64:ed:50:fe:c4:d6:7c:b2:fc:8f:
         e9:f8:b6:80:ee:48:e8:05:83:43:57:3b:68:b5:3c:b9:66:8d:
         08:6a:a6:c0:ad:8d:12:04:61:7b:12:5b:08:2a:02:d5:04:e2:
         d6:1b:8c:ec:21:3e:06:01:c4:9e:ff:b6:0f:79:80:d4:a1:7c:
         86:86:29:c3:82:39:53:04:91:1b:91:a7:04:ae:db:24:39:a8:
         94:20:28:23:6f:59:1d:83:03:24:61:12:1c:93:f6:2c:bc:cc:
         7d:ea:98:cb:66:c1:75:1e:b0:66:09:45:76:0e:59:84:e0:48:
         a5:5e:ec:95:10:93:2b:d3:59:af:bc:8b:92:c7:ce:7e:d7:3e:
         64:c4:69:42:b2:fe:23:19:95:3a:dc:27:47:de:94:46:6a:ba:
         49:93:75:e4:ec:b4:4f:40:70:74:4a:2a:35:ce:7b:52:64:b7:
         72:89:df:91:90:16:fb:fb:5e:a7:a6:9a:92:c1:68:8e:76:61:
         7c:e9:83:d8:5b:27:d9:28:da:93:86:06:07:90:c1:ab:8b:3a:
         98:17:7d:d8:fe:b8:a3:0d:07:7a:50:0b:96:95:51:19:76:18:
         52:bc:38:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:27:39 2026 by rpki-client