Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
File:                     S4cDP8aofTuNDLPOGrK6u-UroxE.mft (raw, json)
Hash identifier:          IHUfT7FtgT/6Gn8QRfpK/v5eO7JWouxwunJGG51Fz/8=
Subject key identifier:   3F:2F:2D:20:11:F1:39:8C:C2:37:FC:8D:B0:A0:A5:89:C8:77:B5:D8
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Certificate issuer:       /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial:       01A0D6B9CB7DE5ECA7EA8A2C2CA4C5A044A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
Manifest number:          194E
Signing time:             Fri 25 Sep 2026 04:01:35 +0000
Manifest this update:     Fri 25 Sep 2026 04:01:35 +0000
Manifest next update:     Sat 26 Sep 2026 04:01:35 +0000
Files and hashes:         1: A8DjBFWApaOvVsNL6vXCg0QZ-Zs.roa (hash: 9eSIPzP882gnq+toY+f9OquYBfy9B8LbOEOMMknDFO4=)
                          2: ADpY0RLDCpkkHtiKPRNOvIWTc8o.roa (hash: judBBvzLbMYur3XpExAgR3vsTfmpZxb1unhrGpyJGfs=)
                          3: S4cDP8aofTuNDLPOGrK6u-UroxE.crl (hash: kvyT0/Y3EctQu2swrubg4qfbCD1nxlDWZjyAj+m0SaQ=)
Validation:               Failed, certificate revoked on Fri 25 Sep 2026 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:b9:cb:7d:e5:ec:a7:ea:8a:2c:2c:a4:c5:a0:44:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
        Validity
            Not Before: Sep 25 04:01:35 2026 GMT
            Not After : Sep 26 04:01:35 2026 GMT
        Subject: CN=3f2f2d2011f1398cc237fc8db0a0a589c877b5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6c:b3:5c:52:d8:fb:26:82:e2:02:70:2f:2a:
                    45:eb:48:ba:75:55:45:9b:a8:f2:21:9f:d7:39:4d:
                    fa:a5:8c:b0:e2:46:3e:65:40:6d:d2:ef:0e:26:08:
                    1d:00:93:1b:d6:b0:1e:79:01:0a:1f:be:ef:b4:cf:
                    a7:b1:56:7c:e1:5a:04:a3:cf:c4:48:55:38:a3:c3:
                    2e:82:b7:75:1a:c2:d1:5a:ff:be:3e:db:81:6e:8f:
                    9d:30:24:e3:c6:d4:d3:3b:34:7b:4c:f1:73:d6:64:
                    a0:65:2a:45:f9:65:f5:75:3b:db:22:4c:3f:cf:78:
                    6b:ad:ce:bd:ba:de:f0:e5:b4:d7:77:cd:b1:f2:49:
                    0a:5d:91:04:ca:3d:b0:97:91:13:87:11:ce:8e:d5:
                    7a:62:0f:2f:86:c0:93:01:90:da:63:09:38:c3:99:
                    3d:59:bd:06:0c:4a:15:2d:a8:a1:2f:cf:c0:55:37:
                    13:65:a4:41:dd:93:ff:35:17:1e:42:84:11:c9:af:
                    56:13:44:92:85:36:42:4d:7b:4a:f3:70:98:b5:4a:
                    a1:32:58:57:af:6c:3d:e7:ad:94:e2:73:66:b7:ba:
                    f1:89:95:27:a9:89:70:1e:1d:bb:34:e9:6b:48:a9:
                    25:5d:56:19:67:8c:9b:e7:64:57:e0:7b:8b:b2:81:
                    6c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2F:2D:20:11:F1:39:8C:C2:37:FC:8D:B0:A0:A5:89:C8:77:B5:D8
            X509v3 Authority Key Identifier:
                keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d1:74:cc:47:db:a4:eb:e5:bb:1d:27:8f:86:ea:55:0f:06:
         41:c2:09:3a:47:c8:5a:cd:08:8d:6a:bf:9c:9d:b5:bb:e9:7c:
         50:81:a0:dd:be:af:7a:fa:5d:59:4b:8d:76:d3:52:9d:58:9a:
         d6:ae:35:9b:dd:99:19:78:c4:e5:fb:85:7d:07:54:f7:bb:71:
         82:64:9f:50:85:b9:c0:0f:19:53:0e:26:d6:24:ce:1f:84:1f:
         1c:77:5d:98:c1:c7:3e:b9:eb:0a:3f:46:77:b5:54:1c:e4:ef:
         e8:b1:0f:fa:88:fe:7f:d7:2b:ee:27:c6:42:82:3c:58:6b:0c:
         d2:f8:21:69:17:b1:4a:22:75:12:c2:19:2b:ed:f8:1b:b5:b7:
         a6:f2:d2:85:9a:47:4d:16:2e:09:00:19:56:2c:b7:ff:41:74:
         9f:a5:f1:1b:a6:c8:66:a7:e3:72:9a:2d:56:06:40:c7:8f:79:
         8c:ce:81:65:6e:ce:53:b2:09:e0:28:59:07:de:f6:db:ca:17:
         53:11:5f:6e:f5:4c:06:63:6e:a6:a2:aa:0e:1c:93:37:a3:43:
         33:10:d6:65:be:a0:7e:3e:16:09:ac:a3:61:ee:97:1d:ef:75:
         2d:11:9b:dd:84:9d:0d:33:8a:16:09:f0:2a:82:d0:8b:d9:ed:
         8c:10:d5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:44:06 2026 by rpki-client