Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File:                     sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier:          5kDbPUMDAIDdzwEsNq40gyKjqRERxvujCJq/2pJCnhU=
Subject key identifier:   AD:2E:13:14:D9:4C:4D:8D:CF:E1:F2:35:AC:B5:7C:F9:6B:52:F7:3F
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer:       /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial:       01A0ECD3F0AC8D8CA68153B823409899E271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number:          1A78
Signing time:             Tue 29 Sep 2026 11:01:47 +0000
Manifest this update:     Tue 29 Sep 2026 11:01:47 +0000
Manifest next update:     Wed 30 Sep 2026 11:01:47 +0000
Files and hashes:         1: Y8yMvjdM8WzBnbLjMBe-EIHd6sY.roa (hash: EcntA0METUox1iYBkhoXa3famNCFNSmSo3ZvzLXW5TQ=)
                          2: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: yixnhYiJgRHWVpC0Cu5PEdgQkaK0RQ4U8p+adNDil4A=)
                          3: spIlTecfIOkshZMwK9KtOYZfUkI.roa (hash: F/eeG2fLu4g1L7wn7uLLQklSodsS5/Mx2XBm7dOwxcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 11:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:d3:f0:ac:8d:8c:a6:81:53:b8:23:40:98:99:e2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
        Validity
            Not Before: Sep 29 11:01:47 2026 GMT
            Not After : Sep 30 11:01:47 2026 GMT
        Subject: CN=ad2e1314d94c4d8dcfe1f235acb57cf96b52f73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:e5:00:94:67:ec:6a:fc:1d:05:c5:b7:7c:
                    b5:e2:1a:1a:70:af:be:27:d4:24:6c:a8:7f:52:32:
                    c3:d4:1f:6b:04:2d:6a:c2:9c:e4:e4:83:8f:ea:87:
                    27:e3:9d:cd:fc:9f:ca:43:dd:82:c5:77:1d:35:26:
                    3c:d1:2b:c4:5c:90:10:59:15:4b:8f:27:b7:2b:e9:
                    80:2a:c8:c2:b7:dd:3b:73:bc:15:e4:ec:95:ec:68:
                    b8:e0:23:b5:88:86:c0:6c:6b:f0:f2:79:39:a5:ba:
                    7d:80:95:89:4c:eb:7a:a1:34:5b:87:ca:57:3e:e6:
                    d7:82:51:48:5a:ed:fc:62:9d:7b:86:95:01:a2:32:
                    76:f9:b0:54:7b:8f:8b:44:26:bb:7e:42:47:7f:0b:
                    8a:67:23:22:27:3f:d9:16:ab:92:de:fc:10:2d:b2:
                    b9:df:32:52:aa:6e:a8:61:6e:b0:08:69:46:b5:7e:
                    7a:44:65:b0:da:9a:77:13:08:ec:57:f6:4e:67:c8:
                    da:58:0a:a0:66:f1:cc:64:49:61:fe:31:89:93:38:
                    c1:ae:38:16:ae:b4:ba:be:d8:f7:e3:9f:f9:61:1e:
                    3b:04:a9:3e:51:41:bb:5c:e4:24:1e:93:ca:ea:92:
                    5b:5c:96:7f:f3:da:9e:61:7c:15:8c:0e:37:06:3a:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2E:13:14:D9:4C:4D:8D:CF:E1:F2:35:AC:B5:7C:F9:6B:52:F7:3F
            X509v3 Authority Key Identifier:
                keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:1b:b3:e0:df:7f:4b:64:45:08:08:40:8b:b0:47:dd:6f:44:
         11:a8:28:50:17:83:b2:1c:30:b6:6b:96:6f:b3:f7:34:fd:65:
         a8:28:8d:f3:b5:54:00:78:d3:51:25:cc:53:b9:01:5e:f4:d5:
         15:60:c3:05:c6:ba:f0:8f:67:a0:a3:0c:96:22:bc:78:17:a7:
         76:27:5d:a2:d1:c0:8b:3a:91:be:ce:3d:19:3b:f4:24:ee:7a:
         4f:5e:15:d0:5c:25:bf:d1:f7:17:65:1d:ac:db:61:c6:28:6e:
         17:71:5e:2a:7b:15:2a:39:1f:0d:0c:a8:b6:82:c7:b4:c1:30:
         b9:39:b5:90:97:42:d4:b4:40:fe:20:8a:34:3d:42:ee:02:10:
         42:7a:5a:b7:04:41:c1:e0:51:47:77:47:9d:09:1f:5e:11:12:
         35:bd:3f:c9:77:31:b8:a5:8f:47:1b:d8:94:c0:68:5b:45:15:
         c3:2f:6b:75:90:56:1c:dc:d9:fb:6a:2e:0c:a6:88:1a:74:f5:
         15:76:1a:9c:b0:5e:3c:38:6d:07:cc:44:cd:e4:c1:e2:c1:01:
         07:f4:96:d9:88:97:dc:15:0a:bb:ca:d5:f2:37:fb:89:42:04:
         d7:e5:c1:99:2e:9c:23:0b:d5:64:61:b5:8b:f5:e2:34:2e:be:
         41:97:fa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:05:09 2026 by rpki-client