Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File:                     sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier:          YQZtozM6gmQKQR7QDKdZSyJguiXjKPMxNnRoBtBTsOY=
Subject key identifier:   80:98:CB:41:C2:21:54:77:C6:67:A2:E7:92:27:7D:C7:D7:94:6C:A7
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer:       /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial:       01A1062634BE0E41F1ACB7DB1319ADD9AF53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number:          1A8A
Signing time:             Sun 04 Oct 2026 09:02:09 +0000
Manifest this update:     Sun 04 Oct 2026 09:02:09 +0000
Manifest next update:     Mon 05 Oct 2026 09:02:09 +0000
Files and hashes:         1: 6Ie5sPRwouKDZ63tHw4hyjJqq10.roa (hash: XieQfcrAZvNQQrTrpSeqvq6G/q8IwApTZ6vvc3HLXb0=)
                          2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: /WnEeu4xaT11zctmwPnQPW09JvKi+Hl46QS/tAdjOC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:26:34:be:0e:41:f1:ac:b7:db:13:19:ad:d9:af:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
        Validity
            Not Before: Oct  4 09:02:09 2026 GMT
            Not After : Oct  5 09:02:09 2026 GMT
        Subject: CN=8098cb41c2215477c667a2e792277dc7d7946ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6a:d2:61:73:8b:d8:51:66:b6:dc:35:2d:92:
                    df:d1:00:24:1c:0c:43:59:ae:29:a6:41:1f:cb:78:
                    e3:bf:91:e1:95:b7:08:b2:b3:e2:0f:65:bb:c5:d6:
                    4b:71:da:03:3d:0d:b0:b3:61:54:b5:69:51:de:17:
                    b7:00:71:ed:0b:1c:08:1c:38:ec:0f:c5:8f:af:c3:
                    31:5b:d0:c9:b2:29:72:88:95:ec:84:0d:0d:bf:f5:
                    fd:08:87:aa:f4:c4:2b:dd:80:b2:1b:e9:bf:fd:5c:
                    9d:e2:0f:b6:20:9f:27:f2:e4:c3:92:b0:0a:0d:0e:
                    0d:c3:2b:36:77:f5:99:15:ec:7f:19:d5:f7:83:70:
                    25:70:b6:70:18:01:49:c5:e1:66:6f:03:54:00:22:
                    7a:95:c1:6a:80:c8:ee:da:46:b9:9c:a8:73:65:c1:
                    47:84:f4:8c:25:bf:62:f5:c4:85:ad:b2:eb:8f:14:
                    d9:4a:67:d6:b0:54:93:71:51:d6:2a:4f:08:bc:bd:
                    20:10:b4:0c:b8:12:42:7d:92:71:9c:ef:c0:17:0f:
                    7b:2d:54:99:13:11:16:eb:1a:99:01:c3:37:65:fc:
                    35:79:31:ac:58:48:6d:fa:c3:fe:af:00:20:78:b4:
                    68:87:c5:4a:99:e9:99:cb:f4:13:9f:7e:85:47:18:
                    5b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:98:CB:41:C2:21:54:77:C6:67:A2:E7:92:27:7D:C7:D7:94:6C:A7
            X509v3 Authority Key Identifier:
                keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9f:21:7e:6a:68:ab:ae:33:73:b2:84:23:77:60:52:6c:6a:
         78:08:17:52:30:07:54:98:d7:72:6f:79:1e:f2:39:fb:b2:65:
         9e:f9:86:9e:96:c8:62:7d:03:be:cf:91:8b:ce:3f:7e:1f:b4:
         4f:cf:89:d6:53:56:d1:72:29:b2:80:a5:b9:61:0c:66:40:46:
         5c:a5:92:96:2d:af:9f:6d:0c:0c:fc:9b:a0:b0:98:a5:aa:be:
         13:8f:f8:2d:78:01:1b:33:c3:1a:c2:b9:01:1e:77:b6:02:35:
         93:6b:5c:f0:09:dc:9b:61:87:70:e9:f9:59:a8:1d:02:09:db:
         d5:91:80:7f:a6:ca:7f:89:9c:95:e3:1f:fe:56:59:08:8f:a4:
         bd:0b:61:bf:fc:bc:df:17:18:95:ee:af:ff:5a:42:68:0f:b1:
         bb:86:0a:99:c1:95:60:1c:4f:3b:3f:83:ef:73:09:8e:3e:7f:
         49:d2:ed:d1:f5:f9:d7:3d:5c:e2:5d:07:01:e1:33:14:17:e8:
         93:d9:de:1d:c8:aa:9a:6f:04:8b:1e:15:93:e6:39:81:5b:4c:
         72:41:ba:1a:54:a5:c1:55:f9:16:8b:52:77:58:77:94:47:23:
         f3:d3:93:cc:5b:5c:0a:81:c2:8a:b4:8e:d1:91:89:c5:2d:0d:
         d9:75:dc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:46:50 2026 by rpki-client