Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
File:                     SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft (raw, json)
Hash identifier:          Mgm/B9G4hBIAsR1CUi8fmD6B2ZsaFuDTVJR9WTkkGmk=
Subject key identifier:   56:D1:1A:40:A1:7A:5A:05:03:7E:99:94:E2:C9:35:F9:0D:04:35:DD
Authority key identifier: 49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
Certificate issuer:       /CN=4983e96ff270f4eca9701258081bb5cf818966c8
Certificate serial:       01A0F6E92B6446B56E6D3944B6481DD4FB0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
Manifest number:          065D
Signing time:             Thu 01 Oct 2026 10:01:11 +0000
Manifest this update:     Thu 01 Oct 2026 10:01:11 +0000
Manifest next update:     Fri 02 Oct 2026 10:01:11 +0000
Files and hashes:         1: SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl (hash: c59RwI6wl0FruX+PN9zftGGvLWkBLa2Q+ewG4IicVtc=)
                          2: zqYVRlTgvHpJDmnzblzgqUd1qtQ.roa (hash: e8da42eEgoMlNnpHHSa7Q7x96Sq3pNxhBs6tD28L410=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f6:e9:2b:64:46:b5:6e:6d:39:44:b6:48:1d:d4:fb:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4983e96ff270f4eca9701258081bb5cf818966c8
        Validity
            Not Before: Oct  1 10:01:11 2026 GMT
            Not After : Oct  2 10:01:11 2026 GMT
        Subject: CN=56d11a40a17a5a05037e9994e2c935f90d0435dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:69:7d:b7:6d:a5:a6:2f:c2:2a:24:c5:df:
                    07:a3:7f:ac:56:cc:d1:4e:ef:1d:01:6c:f0:63:0f:
                    e6:34:08:32:29:69:c1:c1:ed:e5:67:4e:2b:d6:6c:
                    e2:29:fe:dc:cf:ef:1f:84:54:54:9a:82:04:43:8d:
                    79:79:7a:4b:84:b4:8e:4b:c1:a3:39:53:26:48:78:
                    d9:c8:b2:12:48:9e:f1:a8:b2:a8:25:d5:d2:20:60:
                    a6:cd:ee:fc:33:56:03:90:73:bb:b4:f1:86:dd:89:
                    da:26:b0:78:b6:0f:83:31:5f:2d:65:ca:57:b7:03:
                    d9:59:bd:e0:f5:92:25:60:27:8f:90:4d:98:1d:e4:
                    fe:47:a0:dd:0a:b4:65:7c:76:88:40:f2:f6:7d:9a:
                    92:86:23:4b:1c:f5:b9:7f:53:aa:a1:fb:86:85:66:
                    d1:67:f5:54:7c:ea:13:33:98:02:a2:18:59:e9:63:
                    54:46:5a:19:fa:b4:4d:bf:48:04:23:97:af:00:77:
                    db:d7:1a:df:b1:c5:e1:b0:e3:24:c8:6b:f1:55:59:
                    d9:21:4c:a6:b1:01:88:1d:11:22:75:cf:2a:8a:fc:
                    d6:e0:e3:49:c0:23:f9:84:1a:f6:4a:a1:92:aa:39:
                    5f:10:b7:22:20:1f:96:ac:89:1b:4d:9f:37:65:1f:
                    6e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D1:1A:40:A1:7A:5A:05:03:7E:99:94:E2:C9:35:F9:0D:04:35:DD
            X509v3 Authority Key Identifier:
                keyid:49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:82:56:d1:83:fc:12:9b:0e:c0:fd:25:91:e6:c1:d8:84:7d:
         a1:07:a6:7f:4d:52:26:1a:f5:d4:63:da:54:0d:65:cd:35:40:
         3e:38:e0:bb:33:2d:80:58:aa:b8:f9:03:82:43:db:d7:61:f1:
         aa:8d:33:2a:dc:0d:ba:3b:bb:70:98:f5:a9:32:e4:9d:4e:86:
         1c:2d:c4:41:4b:2e:ee:1c:ca:63:22:2a:82:1d:e0:6b:70:3d:
         86:16:0f:de:f8:66:51:3a:75:bb:d7:80:a6:a3:d3:8b:b1:5f:
         99:2a:3d:de:8f:ae:3b:3d:57:e0:08:f5:75:84:e4:b4:62:45:
         9c:8d:f8:50:4e:d3:6b:f4:96:b7:fb:39:2f:dc:3c:69:38:8f:
         df:3f:c2:89:bd:c0:1f:65:71:1a:73:10:a3:c1:99:65:d8:1e:
         c4:31:85:48:8d:71:9e:86:c5:ce:6f:68:7c:c3:e9:34:d9:04:
         79:c4:14:e5:a7:a0:f6:d4:b3:22:15:0d:e7:03:c0:89:7b:45:
         84:68:44:93:8f:f6:4e:d1:43:bd:16:9d:bb:2e:ed:5d:80:7a:
         59:e8:c5:6b:54:88:b5:a2:31:94:a9:6c:ff:d2:34:b2:29:48:
         dd:d9:2e:40:c2:f8:c8:cc:c2:d6:91:5e:e4:3a:77:f9:fc:26:
         eb:e7:d0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 14:57:52 2026 by rpki-client