Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
File:                     S5IeM_-6Ocahgd1C7jwK-gwiINA.mft (raw, json)
Hash identifier:          u/Jgjj8jCnonWCz4NssqDTGK+n0XUcCbOaDWgKfyWOc=
Subject key identifier:   42:89:D9:3C:0E:ED:C0:3B:A8:62:79:0A:26:5A:7E:80:B8:6A:3F:51
Authority key identifier: 4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0
Certificate issuer:       /CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
Certificate serial:       01A0DB7263F5BF1987C38021D01680BA72BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
Manifest number:          015B
Signing time:             Sat 26 Sep 2026 02:01:41 +0000
Manifest this update:     Sat 26 Sep 2026 02:01:41 +0000
Manifest next update:     Sun 27 Sep 2026 02:01:41 +0000
Files and hashes:         1: S5IeM_-6Ocahgd1C7jwK-gwiINA.crl (hash: eNz+iA1YGeMbio+AE9ZQbqpDoXEMS1bLQrgj626ug8s=)
                          2: zf1amWZL0cYfq5OOLtTUd15GvWM.roa (hash: 7dLn8t0rA8E+ONSoVaPUp6Xkm/L/m2vJVtWRafaGu5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:72:63:f5:bf:19:87:c3:80:21:d0:16:80:ba:72:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b921e33ffba39c6a181dd42ee3c0afa0c2220d0
        Validity
            Not Before: Sep 26 02:01:41 2026 GMT
            Not After : Sep 27 02:01:41 2026 GMT
        Subject: CN=4289d93c0eedc03ba862790a265a7e80b86a3f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:da:2e:d5:7a:43:1a:74:fc:66:1d:b9:71:ba:
                    60:38:4b:d6:f7:9f:d3:d1:db:2e:fc:b6:e0:8a:5c:
                    1f:5f:30:62:45:ac:2c:d7:9d:ec:ff:2e:a3:2c:60:
                    ce:aa:e5:e1:fd:b5:f9:00:55:70:6b:74:1f:95:4c:
                    2e:d6:1e:e5:cd:cf:4b:49:57:48:cf:e3:54:5d:6d:
                    e0:b2:61:74:a8:df:ad:52:9b:ef:63:d4:21:77:f1:
                    fb:cd:00:43:e0:33:03:0c:ae:b3:a9:91:e2:96:80:
                    7e:21:a3:3f:75:01:3d:8f:23:db:cb:2a:9d:47:b0:
                    d9:d5:09:74:ac:94:44:60:3e:16:c4:4a:06:81:9f:
                    cc:35:fd:69:a3:18:d0:16:42:f7:7d:21:00:56:6e:
                    d7:7d:21:b4:1c:a7:db:a3:f8:5a:1e:98:8b:51:05:
                    f0:34:1e:d8:3c:21:57:f4:39:1b:ba:cb:0a:c3:16:
                    f3:4e:0d:15:3c:d3:6b:a8:12:b5:16:16:06:11:9a:
                    09:89:53:9d:4d:90:be:5d:84:ee:d8:a1:4e:6f:49:
                    c3:c1:da:ad:4d:19:37:26:31:4c:78:9f:f5:60:70:
                    15:ad:72:51:aa:58:a0:f8:d3:35:5b:b2:63:5f:af:
                    1c:32:10:28:f2:5f:0e:92:0a:e6:2a:36:04:d5:91:
                    66:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:89:D9:3C:0E:ED:C0:3B:A8:62:79:0A:26:5A:7E:80:B8:6A:3F:51
            X509v3 Authority Key Identifier:
                keyid:4B:92:1E:33:FF:BA:39:C6:A1:81:DD:42:EE:3C:0A:FA:0C:22:20:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5IeM_-6Ocahgd1C7jwK-gwiINA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1d49c4-4111-4136-88c3-9a3954e0667d/1/S5IeM_-6Ocahgd1C7jwK-gwiINA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:94:3d:1f:38:1c:27:89:a2:b5:57:3d:6b:54:d3:bb:79:9b:
         1b:c8:a1:ac:3e:34:1d:bf:12:b8:69:6f:b3:a9:45:f7:de:cf:
         f4:58:4c:0a:3b:09:84:7b:c0:a7:d5:f2:53:1f:da:9d:5a:64:
         b8:d9:dd:74:c2:97:d1:64:76:dc:b2:4d:fd:7f:ba:81:c3:0d:
         66:af:f2:93:5c:be:eb:52:c6:66:f6:a8:e6:02:d7:46:d5:26:
         e4:f2:ba:f0:00:f9:39:69:b5:f5:c8:13:e4:40:1e:83:42:df:
         27:d0:3b:49:87:f8:34:04:d8:96:98:74:2d:12:3f:76:77:75:
         ae:a9:a0:d4:40:28:c3:d8:53:b2:38:ae:26:6f:4f:14:01:1a:
         90:49:5a:5d:9c:77:b9:2c:d0:62:c4:51:59:46:51:f3:07:81:
         a1:93:96:15:bd:b7:4e:f4:ad:5e:62:44:37:e2:7d:90:e8:4a:
         e2:b2:93:29:79:99:ea:d7:6a:b7:ab:ae:ca:c9:5c:c5:fd:a7:
         08:6f:01:8e:7a:10:ca:26:86:4a:2a:6a:75:ac:85:6b:74:ba:
         15:a8:56:68:91:01:ca:98:06:94:a9:c3:da:77:87:94:b3:fd:
         08:72:a0:c4:d0:64:16:28:56:a1:c4:01:d1:83:97:8d:b7:ef:
         dd:3b:ca:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:18:07 2026 by rpki-client