Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
File:                     Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft (raw, json)
Hash identifier:          hxTN1FuB4uhblhJChs6T4/TUPIv29ZVlUWFEp5Jyzmg=
Subject key identifier:   03:18:11:6C:92:48:53:09:C2:E6:D2:5D:19:68:EB:C1:BF:CA:03:6C
Authority key identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
Certificate issuer:       /CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Certificate serial:       01A0CA102A1B8CD5BCAC7807D3B2EFA05EA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
Manifest number:          1275
Signing time:             Tue 22 Sep 2026 17:00:51 +0000
Manifest this update:     Tue 22 Sep 2026 17:00:51 +0000
Manifest next update:     Wed 23 Sep 2026 17:00:51 +0000
Files and hashes:         1: BUE7EIoRZVPe0cNnXcD22KEMCwA.roa (hash: F2S7PMb1ZI5mW1mAQMP7O8Np+g1NdICYYD40JG2Q/yc=)
                          2: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl (hash: FSw0Nn9cQS43pUcXeV4t/reU61vo/Cde8zH/gpmYinE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:10:2a:1b:8c:d5:bc:ac:78:07:d3:b2:ef:a0:5e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
        Validity
            Not Before: Sep 22 17:00:51 2026 GMT
            Not After : Sep 23 17:00:51 2026 GMT
        Subject: CN=0318116c92485309c2e6d25d1968ebc1bfca036c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:ab:f5:b9:16:ee:2d:b3:76:b0:86:ba:f6:
                    7b:13:27:ec:21:38:85:4c:a6:3b:0e:df:83:5c:d2:
                    64:b0:66:a6:f1:9c:36:b6:fa:0e:ec:db:d6:8b:e5:
                    58:f8:69:5b:19:3a:76:7d:e4:4e:21:de:ff:7f:f9:
                    5e:f1:99:03:04:ee:b1:ea:2b:4d:d1:67:37:e2:b6:
                    3a:bf:9a:39:15:57:b3:72:c2:d2:a5:39:b3:9f:05:
                    4c:03:9d:10:2d:b2:3a:1a:32:97:61:c2:50:3b:54:
                    46:ce:b4:a5:ab:de:e3:66:f9:b3:b5:0e:6d:64:e6:
                    14:f8:c1:56:05:85:50:a9:bf:ee:38:47:d9:dc:15:
                    dc:78:85:15:60:0e:aa:18:91:eb:86:8a:f4:75:10:
                    d5:dd:2d:23:28:4a:66:76:1b:ab:46:fb:d5:1c:90:
                    0c:2f:db:43:c2:31:67:cd:3c:cf:88:1c:f1:df:ae:
                    61:9a:42:05:c6:c9:a5:ed:30:51:5f:fc:31:4e:ae:
                    a0:15:1f:26:9c:23:4e:74:8c:d4:c4:8b:68:31:4d:
                    37:22:df:64:cf:92:94:45:6b:23:93:ca:a8:01:60:
                    bd:7a:1f:0f:69:db:6a:6a:4c:90:48:1d:99:53:a5:
                    35:a8:fc:d0:cb:8e:43:57:17:54:d1:1b:ae:d3:93:
                    81:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:18:11:6C:92:48:53:09:C2:E6:D2:5D:19:68:EB:C1:BF:CA:03:6C
            X509v3 Authority Key Identifier:
                keyid:0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d8:5f:80:3e:1a:6d:85:b2:3a:3b:c4:d9:5a:c5:22:c9:1d:
         14:09:7f:43:6d:08:3c:85:5d:44:cb:9b:fc:a2:7b:85:f3:ca:
         a1:41:36:07:53:98:ee:2e:8c:51:e8:5e:18:17:3c:90:94:9e:
         38:47:59:e2:c5:1e:cb:18:57:10:7f:20:97:7a:3b:84:b0:7e:
         f5:9f:e0:25:f5:c7:81:4a:bf:b9:3f:0a:da:c1:1d:80:ca:4e:
         20:f5:a2:b4:69:6c:c3:e5:f6:79:a8:88:3e:84:c9:b2:96:60:
         70:f3:8f:e4:1e:fc:70:78:e0:4d:8e:d7:70:54:81:1d:fb:9b:
         0f:cd:4f:18:9b:3b:6a:ce:4d:4e:7f:7c:7d:e1:02:b3:2d:1d:
         1e:2a:27:c4:b5:57:d4:9c:1b:c5:53:83:ab:ba:75:eb:fa:67:
         23:9d:df:41:40:3a:bd:44:05:c1:8b:23:56:9a:8f:47:48:87:
         f9:ff:2e:14:8f:95:fa:8e:b2:65:4c:f2:ef:01:ca:2b:ef:9c:
         5b:e0:7c:e2:ba:f2:3d:74:4d:b7:17:38:af:78:06:15:d5:5b:
         aa:dc:6a:07:79:f2:f6:6f:19:4e:39:f0:88:c6:ae:4d:a9:c9:
         69:9e:7c:42:78:9c:dd:64:36:f2:86:f2:18:27:75:1e:e5:72:
         c6:d7:8f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:23:25 2026 by rpki-client