Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
File:                     SdhmPTuWngJTom1UJb7hxdRDs2E.mft (raw, json)
Hash identifier:          qSyohp9hCeIZ39XE2ScQnCB/+zTT3/JbzBZITo9Ze48=
Subject key identifier:   25:1D:38:E2:2F:4F:AD:8E:3B:CA:0C:48:5F:67:D3:E3:C7:3C:AF:71
Authority key identifier: 49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
Certificate issuer:       /CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Certificate serial:       01A0DBA8B1897DFAC45AB2A0611498DD604E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
Manifest number:          0BD0
Signing time:             Sat 26 Sep 2026 03:01:00 +0000
Manifest this update:     Sat 26 Sep 2026 03:01:00 +0000
Manifest next update:     Sun 27 Sep 2026 03:01:00 +0000
Files and hashes:         1: SdhmPTuWngJTom1UJb7hxdRDs2E.crl (hash: WAdmsHjFyc+83pA+bfjA1WJSdCY3W+egC/N5kyyP1Mw=)
                          2: ss_i7POqldkDP31KMdlVrzarBdE.roa (hash: WvsAUlRR+NRLn32GVVcoWQROpDNnn7tmpssNx6BwiVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a8:b1:89:7d:fa:c4:5a:b2:a0:61:14:98:dd:60:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d8663d3b969e0253a26d5425bee1c5d443b361
        Validity
            Not Before: Sep 26 03:01:00 2026 GMT
            Not After : Sep 27 03:01:00 2026 GMT
        Subject: CN=251d38e22f4fad8e3bca0c485f67d3e3c73caf71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:4b:3c:48:20:c6:70:f0:8a:98:77:75:22:
                    bb:cd:e2:7e:c2:b6:97:c8:53:48:17:fc:fa:d2:53:
                    99:79:cc:f5:b1:b8:ed:a9:6d:eb:7b:85:86:6d:70:
                    ac:c5:e8:e5:cc:c8:70:0e:34:e7:b9:df:1b:06:49:
                    63:0a:1e:e2:b0:48:b3:58:40:4d:e8:7d:48:70:4d:
                    c0:b7:95:27:56:28:58:6a:27:85:85:ad:b1:86:c1:
                    1c:98:eb:77:26:b6:83:df:63:50:59:f3:6f:97:31:
                    fa:41:05:87:27:0d:27:38:97:d9:e5:6e:df:76:d7:
                    4b:c0:f2:22:89:2f:fd:82:b0:34:ef:0e:2a:7a:59:
                    74:4a:0a:fc:78:22:81:3f:11:59:f2:09:d0:09:d7:
                    77:df:bb:04:27:64:4b:0b:0e:33:a8:88:f5:ed:89:
                    6d:75:bf:3b:1c:e9:39:52:6e:42:5e:e8:3f:16:5f:
                    97:0d:b0:6f:83:b0:40:40:57:76:c3:59:08:e6:a2:
                    31:8e:f1:00:02:18:ff:cf:08:b4:97:41:f1:c8:a0:
                    71:60:5f:37:02:9f:4b:e7:10:0f:da:3d:91:60:60:
                    e9:b2:e9:48:ae:66:24:16:fe:3b:7e:b2:ae:4f:3e:
                    81:a8:92:0f:e4:52:b6:da:72:7b:65:d3:da:f1:0d:
                    dd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1D:38:E2:2F:4F:AD:8E:3B:CA:0C:48:5F:67:D3:E3:C7:3C:AF:71
            X509v3 Authority Key Identifier:
                keyid:49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:58:c9:f1:94:72:bc:37:62:3d:05:1f:91:a3:0c:7e:60:0f:
         22:dd:8a:86:57:04:76:dd:1f:9b:52:c5:17:53:77:2e:32:04:
         e7:73:4f:b8:98:5b:b7:63:0a:11:66:a6:da:18:99:50:7b:02:
         d6:19:db:3c:ef:ef:b2:81:a4:51:23:17:e5:f0:7d:e7:d4:dc:
         55:d5:a4:ca:4c:ac:d8:dc:c8:84:ff:a6:fd:56:17:ec:a8:41:
         60:31:17:9b:62:1d:67:9c:b5:d9:52:15:f0:bf:99:de:39:77:
         9f:fd:3c:d3:bb:76:f9:8f:47:83:61:0d:94:ce:8d:0a:e4:1e:
         c4:9b:a5:50:34:57:ba:2c:15:70:89:e8:b5:4b:66:9e:82:39:
         52:c2:ea:e0:ad:73:be:56:b6:12:e1:d8:ae:c4:48:4e:4c:52:
         2c:26:cb:d1:13:9f:78:cf:55:54:fd:6f:bc:17:24:d6:13:da:
         22:46:8f:db:1f:2e:c2:d2:c6:a1:2e:81:24:b0:5d:83:7f:d5:
         9f:3f:5f:7e:15:fb:2f:21:90:cb:c5:40:2c:a9:b7:3e:bf:79:
         e0:0b:a4:2e:d0:f7:d5:70:c2:af:d0:da:18:d8:f3:7a:b8:b8:
         81:9f:d1:5c:c7:52:ee:7d:81:39:0f:9f:61:ff:d4:1f:be:11:
         41:39:5a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:23:00 2026 by rpki-client