Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
File:                     sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json)
Hash identifier:          uIBtBVHuh2nlXZpVgT5Wb9nDQoLN80HKX+lMuit89sk=
Subject key identifier:   96:5E:FD:24:74:AF:6A:A4:42:BD:1D:21:96:05:0B:97:55:99:DC:73
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Certificate issuer:       /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial:       01A0D34AEEC7533904F29BE3F803A53C6494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
Manifest number:          1A6E
Signing time:             Thu 24 Sep 2026 12:01:38 +0000
Manifest this update:     Thu 24 Sep 2026 12:01:38 +0000
Manifest next update:     Fri 25 Sep 2026 12:01:38 +0000
Files and hashes:         1: 7n5MeX8-tWAT68wvCvYynwAR_eg.roa (hash: Q+ItMbkc6eOs9U+JVZ4F5MRsQK89hH4JQq7jlKNjvQo=)
                          2: EesNZ0RnspzkuT_H8NFIXZq6PjY.roa (hash: 7NhcyktFcFiP+lG7oiD1FQ6oyjmx15KRlfJgt15DKyI=)
                          3: VIBDVe2Jq2uKH9k2VWGUppL_ORs.roa (hash: JFKIW75lnnJgqoEDj4lWuAXh9bKImppTNDaCMP9jl1Q=)
                          4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: M5KmIERd+U9gnJO9apiFZzxTICwrnRfmtHsukCmqjyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 12:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:4a:ee:c7:53:39:04:f2:9b:e3:f8:03:a5:3c:64:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
        Validity
            Not Before: Sep 24 12:01:38 2026 GMT
            Not After : Sep 25 12:01:38 2026 GMT
        Subject: CN=965efd2474af6aa442bd1d2196050b975599dc73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:70:40:31:53:d9:39:84:9e:1a:ba:70:95:57:
                    83:9d:e6:95:6a:64:e6:78:76:b0:b0:71:a1:cc:48:
                    e7:8c:19:a4:ff:46:70:f3:6f:94:c3:22:9c:fc:71:
                    37:41:c8:03:01:b3:ef:94:5c:3e:6c:9f:30:66:18:
                    db:e9:c6:f7:c4:d6:be:30:bc:44:d5:8f:16:a3:ca:
                    ec:59:3b:45:47:0a:3d:f5:6e:f6:1d:c3:e7:e6:64:
                    96:21:88:8f:3e:46:8f:45:dd:2f:04:18:a0:4d:b3:
                    76:72:87:35:4d:39:9e:59:d1:4f:58:70:15:0f:59:
                    e2:76:0b:7e:a7:a6:55:6c:89:48:d1:f6:24:38:b2:
                    c9:be:d1:3b:dd:89:60:2f:3a:03:bb:60:b0:3b:fe:
                    26:28:31:03:62:8d:b7:aa:df:6b:a0:0f:13:32:c3:
                    18:54:3b:4c:c6:23:70:37:b3:a2:56:2d:cb:a2:c3:
                    51:88:93:7b:4b:e2:43:b7:3f:d1:62:be:c8:b5:3a:
                    2d:9e:b2:d0:b6:1e:c7:5c:a5:fb:53:f7:00:ff:51:
                    06:87:47:46:97:c0:12:82:42:68:8b:4d:19:52:24:
                    2d:c1:2f:34:52:a0:b4:91:58:72:a8:68:5b:bf:7f:
                    c4:e9:34:02:f0:bc:cb:71:b9:a6:44:a4:f6:f8:e0:
                    f8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5E:FD:24:74:AF:6A:A4:42:BD:1D:21:96:05:0B:97:55:99:DC:73
            X509v3 Authority Key Identifier:
                keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a4:5a:6b:c2:11:5a:1e:f9:6a:34:75:2e:74:24:92:0d:9f:
         03:54:a9:0a:93:90:b1:77:00:4b:5e:c0:24:8e:fc:7b:f5:60:
         db:d9:3a:c5:d5:8f:d9:5d:31:07:67:97:f1:dc:17:fe:d8:c5:
         d2:1e:d4:9e:30:5a:f4:37:fe:5f:af:f2:66:97:cb:8f:2d:86:
         97:3f:91:80:08:15:a2:0d:37:a0:fc:e4:9f:0f:13:cd:7c:3c:
         3d:54:00:90:ac:19:1c:af:13:ba:10:1b:4e:d3:2e:84:10:e8:
         d0:b9:d1:a1:bb:1e:53:18:50:91:71:a5:8e:9f:52:7b:d7:4b:
         e9:ef:e9:c8:8a:d0:66:85:a5:f8:e9:89:57:45:54:50:cd:15:
         e4:42:74:5c:c9:4a:aa:86:4d:d3:28:e3:72:46:9b:9f:0a:60:
         91:96:35:de:fa:bd:68:f4:f1:a4:73:92:e6:06:3e:5a:13:ac:
         72:a1:9f:99:36:bc:97:d5:3f:1e:c1:11:60:10:f1:91:6d:a0:
         1f:4f:0e:f9:f5:2f:29:4a:6f:3b:ae:51:5a:a8:e7:54:6c:78:
         6c:ed:be:35:2f:ba:fa:f0:52:1f:9c:7b:a6:69:86:30:8d:5e:
         09:fa:2f:8d:2f:f0:1a:8f:e3:49:50:c8:88:00:ce:ce:1a:1e:
         f7:5c:a3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:24:36 2026 by rpki-client