Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File:                     SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier:          o7MXr56Xres0aozoE/JKYx9ukdRhWdlalosmFFhlZqY=
Subject key identifier:   4E:DD:9F:08:17:32:1B:37:6B:51:19:BB:10:53:70:04:7A:09:1B:9F
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer:       /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial:       01A0D872479F55D07E7D51ECFB9304477775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number:          1157
Signing time:             Fri 25 Sep 2026 12:02:43 +0000
Manifest this update:     Fri 25 Sep 2026 12:02:43 +0000
Manifest next update:     Sat 26 Sep 2026 12:02:43 +0000
Files and hashes:         1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: KJZwOp0rOdc7wal3iw5eJ1i7AApFUBrcQhn/7BgvaYg=)
                          2: nle7H145kWARm3i3WSQ0jxUoyxQ.roa (hash: zhsBwF/9ucNK3MWhQYCLkOEtb7B4dCQtxNnhlmW24Jc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:47:9f:55:d0:7e:7d:51:ec:fb:93:04:47:77:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
        Validity
            Not Before: Sep 25 12:02:43 2026 GMT
            Not After : Sep 26 12:02:43 2026 GMT
        Subject: CN=4edd9f0817321b376b5119bb105370047a091b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:7b:0f:77:a8:a2:32:48:69:f2:2d:7f:7b:
                    77:7b:39:7f:20:c5:69:d8:ad:d6:0b:e1:72:8b:e9:
                    87:32:dc:9f:e4:4b:66:de:98:d2:4c:96:86:0f:54:
                    7d:64:1f:50:6b:06:0f:ad:39:5f:6a:27:1d:fc:ff:
                    21:77:4d:d5:50:0e:df:46:f6:17:47:60:15:d4:ca:
                    af:f7:54:2f:c7:45:1a:c6:f0:5c:28:fa:27:8b:69:
                    c7:e7:94:23:ea:13:da:72:61:4e:b3:9e:f2:de:a5:
                    6c:5e:45:dc:74:99:e2:45:9c:3e:94:bf:ad:3c:d7:
                    bb:88:0c:01:4b:32:a0:a0:f5:4a:16:83:c2:47:0c:
                    89:77:8c:e3:86:3e:84:ce:5d:95:e7:f8:96:fa:ef:
                    9f:8e:09:d7:28:f4:3d:54:f5:7b:2b:18:8b:de:09:
                    f6:e3:fd:3e:a2:2c:38:14:7b:9a:1c:ee:d2:92:34:
                    7c:57:40:5d:9d:6c:a4:8a:bc:46:64:9d:d1:e9:f5:
                    27:ea:8c:11:ac:08:83:6f:be:14:47:b5:b6:4d:55:
                    a8:6d:a9:2c:ec:97:48:2d:07:e4:1d:ba:90:7a:3a:
                    eb:bf:c0:f1:b1:09:d7:06:d4:ab:65:65:b3:c3:18:
                    17:ec:0b:87:88:5c:8f:2b:83:9d:c0:3a:53:04:bd:
                    79:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DD:9F:08:17:32:1B:37:6B:51:19:BB:10:53:70:04:7A:09:1B:9F
            X509v3 Authority Key Identifier:
                keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:81:2c:93:95:9f:f7:f7:1f:af:b3:f2:6b:0c:59:09:85:2f:
         40:5a:a6:46:8f:d0:49:12:d2:9e:e6:94:a8:6a:2e:bf:84:39:
         7b:1a:1d:92:72:21:cf:1e:69:06:43:70:79:ca:98:0f:e5:7e:
         e6:f6:15:5a:56:56:b3:a6:fa:4e:4b:6c:c2:79:52:90:bf:aa:
         b0:ca:b2:f8:63:d8:bb:8f:ca:b4:46:54:18:06:17:d4:bf:2c:
         b2:4b:1c:5b:bd:f0:cf:ce:8a:19:15:dc:52:e9:4b:eb:71:1b:
         04:5e:18:df:cd:44:92:e4:5f:bb:e8:76:97:75:cd:a7:2c:a3:
         a3:f5:3e:77:e1:d9:56:13:be:81:ad:66:21:d9:c2:52:8d:78:
         28:a4:05:73:d8:c6:1f:6c:8e:a9:0b:dd:d0:4a:7b:fd:27:fb:
         2d:e5:c7:1c:4a:99:6a:55:92:a5:12:b7:82:0f:c6:03:2c:bb:
         98:e5:a2:53:7a:eb:22:4a:41:75:bf:a0:6f:db:c6:3a:60:c6:
         c4:56:35:61:69:cc:51:12:5c:ab:a9:84:fa:25:50:23:fd:72:
         d6:6c:21:82:c1:6b:0e:b2:f0:30:4f:33:8a:1c:fd:0c:81:a2:
         be:c1:6a:fe:0e:25:b6:e3:9f:f0:93:73:18:7a:92:0f:ea:fb:
         1a:6c:72:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:00:11 2026 by rpki-client