Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
File:                     SJwmPoGEhs_YMcJF3frMqR-9gcA.mft (raw, json)
Hash identifier:          2pZOj8722D1sM0xpy9MRbNj0AK5O18ceUbmTo/FIBgU=
Subject key identifier:   33:7D:8D:5B:ED:09:26:AD:91:3A:56:76:0B:0B:0A:0D:83:A0:A2:0B
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Certificate issuer:       /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial:       01A0DBA9D2A471D6A14DDC4DE86339FFC3E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
Manifest number:          06F6
Signing time:             Sat 26 Sep 2026 03:02:14 +0000
Manifest this update:     Sat 26 Sep 2026 03:02:14 +0000
Manifest next update:     Sun 27 Sep 2026 03:02:14 +0000
Files and hashes:         1: 5JcOQzq7WzmjMFbG4IJGxYNeKgo.roa (hash: gSdvGPuX99g6e3AjEkD3xzqC8m6WCx9LmxK0VDXFz5E=)
                          2: QsLpU8hJ4ATxawddQAfsVH71Yrc.roa (hash: 8LAE+r4LCdI7plc1J5/y/lKsTqyUBWlK/iV7nFAj/Ks=)
                          3: SJwmPoGEhs_YMcJF3frMqR-9gcA.crl (hash: o7+112bMX11jUUJgWtx0upiNjG5am8uiWeqIthzh/dA=)
                          4: tjcd2B2MoHez1-FLdOBN_2wuTBg.roa (hash: nHwqBLL+1vMmNTrdugL+2uUX5fBDVoNX8Hv9HhSFUYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:d2:a4:71:d6:a1:4d:dc:4d:e8:63:39:ff:c3:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
        Validity
            Not Before: Sep 26 03:02:14 2026 GMT
            Not After : Sep 27 03:02:14 2026 GMT
        Subject: CN=337d8d5bed0926ad913a56760b0b0a0d83a0a20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e5:23:c4:77:94:32:ef:52:a9:bb:e6:4a:c9:
                    8e:f5:24:c8:97:c0:93:db:8c:4e:eb:f9:e3:69:52:
                    2c:12:91:ac:86:10:dc:01:a3:b9:54:3e:70:cf:47:
                    08:76:71:12:69:dd:4f:ed:ab:e7:53:85:db:ac:84:
                    47:94:5a:85:9f:98:35:61:6f:d2:a0:33:9a:48:ce:
                    3e:27:98:bc:09:2f:f4:50:5d:ee:8a:c0:af:6d:5b:
                    ec:d3:a5:f4:b4:d3:71:d0:21:06:05:ae:a2:d5:a5:
                    23:80:cd:38:ec:8c:cb:10:dd:c9:a5:9d:af:6d:74:
                    1a:06:f5:4c:8a:62:79:28:44:3f:6a:32:5c:9f:d9:
                    c1:d8:42:b1:f2:99:35:c2:90:7d:13:90:f4:ce:c3:
                    20:ab:c8:d7:68:a8:9d:d6:e8:b9:b5:9c:93:82:21:
                    be:02:cd:3c:1c:7b:87:13:cb:3d:ba:47:64:11:79:
                    92:0d:a9:78:35:ef:a0:df:af:c3:f0:d6:5b:f1:a2:
                    cf:67:e6:77:4d:da:b0:ac:b6:87:9b:b3:8a:f3:4a:
                    3f:76:51:63:cf:bb:b4:f3:8a:24:f4:10:68:00:5a:
                    19:28:7a:e0:78:1a:b3:a4:de:37:e0:bd:18:ba:03:
                    1a:16:b7:b7:b5:86:09:03:b5:8d:dc:1e:97:09:48:
                    9a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7D:8D:5B:ED:09:26:AD:91:3A:56:76:0B:0B:0A:0D:83:A0:A2:0B
            X509v3 Authority Key Identifier:
                keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:da:f7:c2:cb:50:35:4a:9c:18:51:a7:6e:52:9e:93:45:5f:
         c6:71:f3:a3:19:f2:8c:84:81:30:38:cd:6b:f5:2b:5d:29:75:
         28:10:fd:e1:1a:d8:51:ee:85:b8:98:81:ee:ba:4e:c8:fb:67:
         e6:1b:d9:fe:9c:2c:17:de:cb:8f:69:03:47:44:ae:86:81:98:
         04:63:55:81:bc:4f:15:16:d2:3d:3e:9a:85:44:ce:35:e8:fb:
         a2:d3:3b:a2:0e:de:b8:6d:c4:55:c5:54:98:5f:67:2b:44:ba:
         de:66:e7:b1:76:89:e0:0c:95:4d:1d:07:1d:4b:d5:d6:bc:e5:
         64:e6:90:59:93:9d:5b:95:2e:97:a3:17:47:19:13:00:e1:2e:
         4c:8d:1c:6e:78:0a:37:1c:e8:fe:67:d8:2c:07:65:8c:c4:68:
         32:5e:43:15:68:3b:38:17:bc:4f:75:31:2b:b2:68:c0:2e:5f:
         5a:79:9b:03:8f:39:d8:ee:f3:f9:10:ec:60:d4:69:0f:80:87:
         52:d6:42:62:db:3f:0c:e7:4e:df:18:41:53:06:45:95:af:b8:
         2b:55:8a:3c:fe:bb:6b:e9:db:38:d9:a5:ea:c9:cf:55:6d:6c:
         98:5f:c0:35:39:26:e1:22:d4:e5:a5:36:ac:70:dd:f3:68:1a:
         01:a0:4c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:52:49 2026 by rpki-client