Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
File:                     SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json)
Hash identifier:          uSB/+NBi9EpTUhsMTK4tuPyLTVkcc61DfPtP+Obed0o=
Subject key identifier:   F1:53:F0:CB:EA:75:75:AF:93:CA:6C:A0:6D:CA:62:EE:A5:AD:52:05
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Certificate issuer:       /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial:       019F927F13F51B062C4F532353400DB66BD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
Manifest number:          17C6
Signing time:             Fri 24 Jul 2026 05:00:29 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:29 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:29 +0000
Files and hashes:         1: 32houEZJjYMHYgPuRqIg-2gVrRU.roa (hash: SgYOhNo4HZLgeATCDQYMmqSzEM1MXHyJPN6hUBC7MIM=)
                          2: JnkLx50ImRIwe6DLwjoBPmLJiIM.roa (hash: ZgcI3W3bS8GffqjlQ449bvcUFmbTNqw4WdF2nIUN8ao=)
                          3: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: A3m0Z3Bmv8ap+MVOTgQzJGhnUWYn3Bjgb3JM2FBl8BU=)
                          4: TSB5mTZZzRTTPnt6-Y8o-3CQEPA.roa (hash: PsDTk/dMLVROLGkVcO0KwNjR8rb+3K2JtemVORHSo8Y=)
                          5: Vzeyp2a_2ybj2YU-0i2OoZlnwnI.roa (hash: OMd6zbL5MprZ3M6eB+ZY4S4Gxx6gPSlVJAESUBQW+L4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:13:f5:1b:06:2c:4f:53:23:53:40:0d:b6:6b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
        Validity
            Not Before: Jul 24 05:00:29 2026 GMT
            Not After : Jul 25 05:00:29 2026 GMT
        Subject: CN=f153f0cbea7575af93ca6ca06dca62eea5ad5205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6f:c6:e3:19:0d:4b:04:7f:7f:97:55:50:68:
                    dd:d1:c8:b2:f5:58:51:a6:97:45:55:a0:16:b8:52:
                    78:ec:2b:25:84:77:2d:c7:5c:83:b2:9f:08:2c:3c:
                    fc:39:56:58:cb:0d:b0:ae:aa:74:36:31:80:b3:a6:
                    11:ac:80:bb:22:96:05:9c:f8:bc:78:95:0c:46:3e:
                    f4:a5:07:a7:b1:19:95:4e:ee:87:27:96:45:2d:45:
                    c3:d9:2c:3f:b7:d2:16:65:35:9a:ec:5d:ab:2f:09:
                    27:c3:2d:62:6d:63:41:21:01:57:b9:44:f8:c2:66:
                    10:7f:17:18:94:87:73:3f:09:ba:4a:8d:8c:e6:fd:
                    d6:1e:66:38:aa:59:6d:e7:3d:12:db:bb:e2:16:cc:
                    92:2b:53:8f:71:43:ec:c5:7c:d1:45:e3:85:71:ca:
                    2d:29:12:a5:b8:df:51:f6:00:4e:1d:7e:dd:83:6b:
                    a8:39:39:82:4c:eb:ff:d5:2d:6e:2a:9a:da:32:e7:
                    ac:09:66:73:87:3d:d9:ea:5c:e9:91:81:59:b5:68:
                    8e:9e:67:4f:69:28:86:b3:de:2d:8a:66:7e:a1:c6:
                    a7:0d:b4:3b:a5:d8:51:3c:a6:2a:be:15:ed:c8:26:
                    5a:f2:f1:68:86:86:0a:3c:6f:28:69:3e:d9:4b:24:
                    96:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:53:F0:CB:EA:75:75:AF:93:CA:6C:A0:6D:CA:62:EE:A5:AD:52:05
            X509v3 Authority Key Identifier:
                keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:49:42:8c:67:02:29:db:93:f8:c7:c8:99:4d:c2:43:49:eb:
         d4:88:d1:c0:27:75:ef:b4:15:99:1e:f9:fb:9a:ac:26:29:1e:
         8c:65:ef:ca:9c:5a:0a:5e:b6:91:60:32:57:2d:1c:5a:08:55:
         27:c6:75:69:b4:73:1f:31:3c:8d:84:75:88:dc:14:84:96:7f:
         27:58:1c:ee:54:a8:c3:69:9d:d1:bf:98:16:c6:4f:8f:d0:6b:
         41:4f:6a:82:10:c5:da:ce:3c:6b:5d:39:39:0e:f7:ea:47:2b:
         8a:d8:76:3d:c9:3c:40:48:9e:00:04:1c:39:c6:a6:f0:ab:01:
         0d:64:8e:4c:15:f7:34:5e:17:60:dc:78:40:05:bb:b0:fb:5d:
         65:7c:3c:ad:a5:4b:ce:db:f7:95:a2:0f:15:78:11:b8:7b:75:
         10:8e:fe:7c:23:8d:1b:29:0d:79:a9:3d:9e:19:84:55:50:83:
         db:a2:6f:27:fd:05:bd:b9:5c:5c:4e:36:bd:d1:9e:3f:91:c8:
         2f:78:f6:e9:fe:c9:44:cf:d1:63:9c:01:73:50:d3:d2:da:97:
         d2:62:1d:75:1b:28:43:c0:07:53:f2:8d:cd:21:19:10:23:e3:
         72:1f:68:e0:d4:78:58:76:c7:af:f5:4f:f4:b4:c2:ea:db:ce:
         07:12:97:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:40:39 2026 by rpki-client