Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
File:                     SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json)
Hash identifier:          AN0ZtMJaXuZxW6Haq0o6JfSjDkqK0MJGr8VdWL7hlWY=
Subject key identifier:   61:B1:9E:25:C0:16:9C:05:BF:2F:DA:95:94:BE:6F:E2:7F:3A:93:64
Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
Certificate issuer:       /CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Certificate serial:       01A1027FF116E62B98FA4C2E1C3A90F02092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
Manifest number:          0EE3
Signing time:             Sat 03 Oct 2026 16:01:41 +0000
Manifest this update:     Sat 03 Oct 2026 16:01:41 +0000
Manifest next update:     Sun 04 Oct 2026 16:01:41 +0000
Files and hashes:         1: 2gRf7iiTdlk7BWzjnH0vNLkZWnM.roa (hash: yip4EzAVv8q4u5/gAmnGeaN3GxWOVD6s/OQWmx+Z/JE=)
                          2: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: eDU8cjP6iH9zNEWWYItHyJ3hiL8nvk0OyVY6PB+9U+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 16:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:7f:f1:16:e6:2b:98:fa:4c:2e:1c:3a:90:f0:20:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e
        Validity
            Not Before: Oct  3 16:01:41 2026 GMT
            Not After : Oct  4 16:01:41 2026 GMT
        Subject: CN=61b19e25c0169c05bf2fda9594be6fe27f3a9364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:7f:f5:a1:1b:3f:4d:23:5b:c9:d1:eb:f0:
                    00:66:96:ef:2c:77:11:05:96:1f:2c:53:64:85:d2:
                    5a:0d:66:cf:98:26:4c:fb:8a:a3:b9:25:09:97:b3:
                    ea:59:ca:f7:84:79:58:6c:aa:2b:41:f0:9a:56:e6:
                    97:60:be:c5:52:3e:ee:45:07:99:23:01:9f:11:06:
                    63:8f:d7:10:f8:b4:e6:e6:ad:59:1b:75:ab:c3:a4:
                    a1:1e:6e:19:3b:f7:a3:85:14:8d:84:e7:12:c1:14:
                    b1:e7:68:b8:ee:9b:43:f1:8a:47:24:53:b6:20:5e:
                    1c:59:3e:dd:b5:60:68:a8:e6:57:45:90:05:dc:de:
                    d4:c4:12:e5:ac:38:75:53:da:82:5a:21:94:45:62:
                    65:d1:86:5d:c2:ad:c7:3f:1d:7d:79:38:ee:52:a4:
                    e9:d3:04:2e:70:7a:4c:a6:36:b3:86:32:51:de:e9:
                    61:13:9b:ba:a2:18:92:43:5f:82:98:16:fe:b5:a5:
                    92:66:fc:57:de:7d:f8:7c:e8:24:ab:85:a7:b7:42:
                    01:e6:f4:42:6a:60:1a:57:f8:6a:1f:63:b2:d4:8b:
                    ef:f5:90:00:34:87:e4:cd:a2:b9:d6:53:4b:9c:9f:
                    f9:f3:be:a1:98:ee:0e:a7:61:35:39:dc:99:aa:f3:
                    26:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B1:9E:25:C0:16:9C:05:BF:2F:DA:95:94:BE:6F:E2:7F:3A:93:64
            X509v3 Authority Key Identifier:
                keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:5e:86:1e:6a:95:52:d8:35:d6:a1:52:16:a2:78:20:58:11:
         30:e0:0b:19:55:59:22:ca:22:c5:de:cb:fa:54:27:75:0b:91:
         d4:42:37:a2:36:ba:f2:3a:97:57:18:b5:ef:3e:bd:a9:86:d0:
         36:8c:7d:46:d8:cf:db:2c:b5:1c:ec:ec:2c:b2:35:2b:8d:2e:
         b3:b9:e4:de:35:88:ad:7a:ba:4c:ef:fb:a6:d9:81:8d:10:7b:
         38:82:ab:93:6a:2b:10:c9:91:4b:e0:58:d7:bc:1e:b7:04:e8:
         11:47:e8:2b:44:69:18:0b:68:5b:c8:3d:ae:30:8f:97:ba:dc:
         d8:3a:9a:00:1c:79:43:48:76:52:10:29:f9:25:40:22:b6:19:
         c7:cf:22:6c:77:66:d1:a5:4c:9f:db:6c:23:d5:03:08:66:2f:
         42:24:e9:14:09:68:ca:83:c5:5b:88:c0:b3:d0:2b:83:a8:bf:
         24:eb:f8:fe:a6:77:22:c3:20:9f:f8:51:8e:6f:dd:1f:cd:21:
         77:6c:9d:91:ac:84:86:43:8f:42:b9:32:8f:8f:7a:62:f5:41:
         49:d5:aa:75:bc:6f:bd:35:c4:dc:12:75:58:f0:3f:f9:7b:8a:
         9b:ab:5e:a4:75:17:b9:a9:e7:35:df:ad:98:39:f7:ad:e7:91:
         2b:73:5e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 04:44:16 2026 by rpki-client