Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/Scc7ws4hVAJgNLw7kL1jgx94sAU.mft
File:                     Scc7ws4hVAJgNLw7kL1jgx94sAU.mft (raw, json)
Hash identifier:          zsg1OoKks9z/ukWH5npPk11OZqPiEZkmiU/ItcEqkYE=
Subject key identifier:   77:19:54:1B:DA:68:5F:DA:A9:1A:27:7E:33:C7:9C:E0:D6:6A:74:2F
Authority key identifier: 49:C7:3B:C2:CE:21:54:02:60:34:BC:3B:90:BD:63:83:1F:78:B0:05
Certificate issuer:       /CN=49c73bc2ce2154026034bc3b90bd63831f78b005
Certificate serial:       01A0D56FAFEE05FCE6B31A8D993782A9DE8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Scc7ws4hVAJgNLw7kL1jgx94sAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/Scc7ws4hVAJgNLw7kL1jgx94sAU.mft
Manifest number:          38
Signing time:             Thu 24 Sep 2026 22:01:01 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:01 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:01 +0000
Files and hashes:         1: Scc7ws4hVAJgNLw7kL1jgx94sAU.crl (hash: lSmvMZWLLfeAU4vxI4HYRIONxhcpk7pgnWpv+DY6ifo=)
                          2: eMmjxl2ax4RboNyy7t7DciWI2GY.roa (hash: OxpJEytqLM1clRPMJ3w5XoDWzMhouly5oIX7Pec1B2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/Scc7ws4hVAJgNLw7kL1jgx94sAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/Scc7ws4hVAJgNLw7kL1jgx94sAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Scc7ws4hVAJgNLw7kL1jgx94sAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:6f:af:ee:05:fc:e6:b3:1a:8d:99:37:82:a9:de:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49c73bc2ce2154026034bc3b90bd63831f78b005
        Validity
            Not Before: Sep 24 22:01:01 2026 GMT
            Not After : Sep 25 22:01:01 2026 GMT
        Subject: CN=7719541bda685fdaa91a277e33c79ce0d66a742f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:1d:08:e3:7a:63:db:e0:f6:6b:49:a9:08:
                    38:79:56:38:d7:ef:9b:01:9c:8a:19:6b:e3:d8:c9:
                    cd:6f:05:25:0e:63:08:ab:69:82:b2:0f:16:48:20:
                    04:09:49:0f:dc:51:0f:55:86:1b:ec:9d:e2:a3:6b:
                    33:79:26:36:f8:4d:19:ea:09:8d:69:a9:2e:77:54:
                    e8:1a:eb:80:ac:09:15:ac:40:20:b0:bd:de:fd:b4:
                    f8:52:05:5f:d9:7e:e4:5a:3a:ab:dc:50:be:d8:cc:
                    63:2e:6d:2c:26:b0:5b:6a:6a:e0:61:e8:a6:f1:ce:
                    17:12:a9:90:ab:b4:32:5c:b2:a4:ce:de:49:ed:8e:
                    d4:8d:a4:52:48:8b:fe:80:84:f9:99:00:66:82:59:
                    08:d7:0d:b4:e2:0f:3d:de:fb:12:26:eb:45:5e:8a:
                    d9:fc:cc:bc:70:6a:6b:6c:be:47:1a:63:9d:29:b1:
                    23:cc:5e:03:01:84:e5:6a:1b:cd:0f:d9:d6:92:c7:
                    d4:5a:72:ca:6f:ee:ce:b4:1a:d2:70:10:6b:e5:e1:
                    d8:8f:63:78:09:29:5d:8d:52:6c:bb:8e:b1:76:cd:
                    59:27:cb:43:c3:e7:fd:74:20:6e:9c:2d:88:c9:b5:
                    58:a0:45:a3:05:f1:fc:74:2d:75:50:68:c0:fc:9a:
                    82:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:19:54:1B:DA:68:5F:DA:A9:1A:27:7E:33:C7:9C:E0:D6:6A:74:2F
            X509v3 Authority Key Identifier:
                keyid:49:C7:3B:C2:CE:21:54:02:60:34:BC:3B:90:BD:63:83:1F:78:B0:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Scc7ws4hVAJgNLw7kL1jgx94sAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/Scc7ws4hVAJgNLw7kL1jgx94sAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/83a373-c45a-457d-8687-ca0c8e5dc849/1/Scc7ws4hVAJgNLw7kL1jgx94sAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:e0:ef:6e:83:fc:8d:44:63:05:d3:c6:ae:c8:58:81:25:16:
         34:1b:d5:44:99:46:1a:50:b9:e0:0b:98:29:59:39:1e:f0:7e:
         f1:fd:a3:24:c7:81:5d:9a:1c:f2:93:e3:44:b6:70:36:d5:1a:
         b0:1b:5a:b2:ff:52:c8:0a:4c:87:a6:88:89:5b:a6:85:bf:69:
         c9:5d:de:6e:05:59:b6:6a:b7:c1:2f:9a:67:33:28:bf:a9:87:
         bb:9e:7f:b8:5d:83:2e:fa:8b:c4:74:fd:a3:aa:7f:b2:57:ee:
         8e:a2:ea:ef:93:a7:66:ce:e9:b4:5f:b1:c1:07:c9:7d:c6:0e:
         2c:d0:64:8b:38:42:20:8c:fe:f6:ba:f4:4c:53:0e:8e:3b:17:
         e5:d9:10:d9:4b:c6:b6:10:27:51:a9:44:a9:e1:4f:e3:28:61:
         ad:f7:11:4b:13:ab:2e:6c:46:30:59:4a:e9:ef:b9:d3:e8:a0:
         e9:d0:23:5c:b4:5f:c6:0c:33:a6:99:aa:c1:f6:ce:b3:97:76:
         aa:36:60:13:7b:38:0d:11:a5:c6:b2:81:d9:3e:ff:c1:3a:dd:
         e6:32:5d:f4:2b:08:18:09:23:fa:a1:e4:4a:61:41:4e:61:2c:
         6f:d7:f0:f2:58:4e:36:d4:07:02:15:d1:74:f9:c1:92:51:3d:
         b0:c1:8e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:31:18 2026 by rpki-client