Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
File:                     Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft (raw, json)
Hash identifier:          sjK10TxufYLCnZOOBSEqwEKBLRfmz/jTp01LWqhUQc8=
Subject key identifier:   64:61:8B:DD:23:53:1E:E7:81:BC:AB:45:C3:F0:54:A0:A8:81:A8:BA
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Certificate issuer:       /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial:       01A0D6F01E2171744C1E3C85CDCABA62FE55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
Manifest number:          1735
Signing time:             Fri 25 Sep 2026 05:00:55 +0000
Manifest this update:     Fri 25 Sep 2026 05:00:55 +0000
Manifest next update:     Sat 26 Sep 2026 05:00:55 +0000
Files and hashes:         1: 1-PTdsM_AGC5XNTFED_Bd1lKJUrY.roa (hash: t/bF8BVKmcIucBirQ4iHEKuh8d9LX26p0NPMDv8nEak=)
                          2: 4qABJGwgFUFuvmAEHteeA7rJeZw.roa (hash: l0sKCAwspdUIfQjPD3CVboLz2SqClsdPV71LM0PlV5o=)
                          3: 6PInJ2tbRTip0fDT1jftw8w7R7I.roa (hash: JDGvPisnEK8vyfb4vuVlQuoioDUHeR2I2cF0Dy3S3VU=)
                          4: B3ZEk8Cap2g9KplZIsoRlruoyZE.roa (hash: g43dat6xdrbXP10ocqQ6N9VTX+6RhA4yXEtNgHAbATA=)
                          5: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl (hash: MiELAjyPF87FvmIbPvkUyD6AZeFTyNJBzCMEpp4vPv8=)
                          6: hxyFg93cyoODusD3h3L8hfc5HG0.roa (hash: BPNhbAxVULf2vc9aGDatTvAGnPVmpDD0d77IZ2F/Ui8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:f0:1e:21:71:74:4c:1e:3c:85:cd:ca:ba:62:fe:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
        Validity
            Not Before: Sep 25 05:00:55 2026 GMT
            Not After : Sep 26 05:00:55 2026 GMT
        Subject: CN=64618bdd23531ee781bcab45c3f054a0a881a8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0c:d2:1c:8b:42:1e:99:05:8e:1d:2b:5b:6a:
                    dc:7c:53:e7:11:a1:7c:2f:f5:54:a3:5b:f9:b8:90:
                    42:de:49:80:2e:83:19:13:79:f0:72:5c:44:c7:29:
                    3e:b9:d1:a8:dd:d2:aa:d1:3b:ac:27:9d:50:95:86:
                    33:47:ee:58:c8:58:df:5f:ce:2d:46:52:13:9a:c6:
                    e6:27:9b:e5:ad:1e:00:83:dc:90:98:8e:9e:0a:4b:
                    78:bd:e4:2e:3d:ec:ae:62:68:d0:15:4d:ff:4c:7c:
                    2d:16:d3:41:eb:a4:39:c2:f0:13:6a:a1:2f:21:19:
                    e7:f8:54:c2:90:a7:aa:f1:5c:a7:ed:ea:21:81:73:
                    9d:09:56:a0:69:56:db:50:68:79:3a:6f:09:cb:e5:
                    63:bb:d3:db:1f:a4:be:d3:1f:86:ea:08:90:3d:86:
                    0a:69:e4:42:c3:56:dc:c5:1f:ed:d8:9f:a8:11:98:
                    70:d6:b8:c6:7e:79:f6:8e:95:4a:5a:4a:df:11:fa:
                    6e:9f:71:84:1b:90:e9:54:b5:53:1d:4a:f9:9a:96:
                    55:b1:0e:42:9a:e3:70:ca:ad:dc:48:03:f7:21:98:
                    59:3b:d2:93:64:ea:e8:0e:87:6f:c1:df:b2:9f:2a:
                    a7:e9:51:0a:9d:2b:de:7d:ea:0c:5b:90:e6:5d:7e:
                    5b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:61:8B:DD:23:53:1E:E7:81:BC:AB:45:C3:F0:54:A0:A8:81:A8:BA
            X509v3 Authority Key Identifier:
                keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c4:ba:a1:13:ae:21:34:7a:55:fa:5f:e7:81:23:9b:06:a0:
         61:1b:26:6d:a0:8f:d7:a4:b8:d0:ed:c2:bf:2b:eb:05:ae:b1:
         64:d3:11:3c:e0:6a:a9:7e:9a:65:9b:8f:fa:40:a0:8e:7b:97:
         f8:26:04:90:f6:32:11:13:b0:85:23:e2:e3:b5:1b:36:16:b2:
         b8:b7:45:e0:34:bf:81:d8:31:f1:81:44:22:3a:9c:e0:d8:4e:
         97:51:86:6f:ac:5d:5c:5f:47:7b:50:f9:d8:aa:cd:84:3d:48:
         03:55:09:f8:7b:98:0f:d3:65:88:c1:b5:d9:6b:82:eb:28:ef:
         5f:dc:a1:e6:9f:86:1d:9a:73:34:67:16:59:65:8c:3d:34:9c:
         8c:bc:c4:a1:c4:2a:e8:f9:09:6f:b5:7c:ad:12:8e:cc:c6:cd:
         62:5d:61:e6:a0:39:20:fd:83:2f:ea:fe:d1:82:a6:f7:d0:ee:
         51:4f:bd:2b:d1:e6:f5:93:c7:d3:a1:0a:c5:4c:fe:bc:4f:7b:
         b1:c0:d5:f8:d0:76:b8:f5:f2:09:78:2e:6c:48:94:87:0f:b8:
         97:63:e0:31:bc:8f:b4:94:3a:a3:2d:a1:7d:70:70:53:d0:a5:
         30:a5:e5:f6:c7:f7:2f:49:f6:c7:51:b8:25:7f:e3:3c:37:ce:
         de:c2:c2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:13:23 2026 by rpki-client