Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
File:                     SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft (raw, json)
Hash identifier:          MPPJrc8wDZCmmFqfs8gpmz/1xZLHia9Szk4j2mJrNa8=
Subject key identifier:   63:39:B8:E7:97:CB:46:DB:DA:A9:EA:2B:AF:4E:0E:C3:15:F2:C4:2D
Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
Certificate issuer:       /CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Certificate serial:       01A04507C12135425A33282793A2F9BFEC50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
Manifest number:          15E6
Signing time:             Thu 27 Aug 2026 21:02:10 +0000
Manifest this update:     Thu 27 Aug 2026 21:02:10 +0000
Manifest next update:     Fri 28 Aug 2026 21:02:10 +0000
Files and hashes:         1: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl (hash: bJedbyvp6BKSJqanoSfZC/Kzbj06Kd1h6ktbMR3Kkkc=)
                          2: wOjdRDY4rMDU4XDk35HoLt7uT2M.roa (hash: 7YjJqmLdz1HfJE+GpOkltOPkNzD9vAKu54sBhDV3osE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Aug 2026 14:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:45:07:c1:21:35:42:5a:33:28:27:93:a2:f9:bf:ec:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd
        Validity
            Not Before: Aug 27 21:02:10 2026 GMT
            Not After : Aug 28 21:02:10 2026 GMT
        Subject: CN=6339b8e797cb46dbdaa9ea2baf4e0ec315f2c42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:41:93:25:02:f2:97:01:8f:ca:56:07:11:50:
                    6b:40:9b:72:f4:cc:58:4b:54:4f:ac:21:53:e0:ca:
                    ae:17:b3:51:d7:c9:d9:25:73:27:16:d5:03:c3:a7:
                    2c:64:76:2b:6e:4e:fe:ed:0c:1a:63:8c:4e:bd:ac:
                    73:cf:ce:a2:30:d3:34:f4:2b:43:a0:f8:30:2a:09:
                    14:51:2c:4d:0c:04:70:1a:61:50:18:b2:eb:e3:52:
                    30:8e:63:bf:8c:0d:45:dc:59:6f:af:93:e6:00:2d:
                    a0:e2:72:cc:85:8f:6d:c9:ca:b5:6e:97:c0:86:bd:
                    80:c9:fd:9d:80:1b:52:10:52:f7:ae:fb:17:dd:4b:
                    3a:41:99:d2:ff:24:89:9e:cc:25:2e:64:6a:02:12:
                    a0:f8:6d:d0:c3:9d:c9:85:7f:d8:c2:91:0f:8b:6e:
                    a8:68:63:1f:3d:0e:26:7f:27:e3:05:4a:13:df:56:
                    6b:ea:da:6d:f9:9a:2f:6f:db:61:c4:12:a6:d9:0b:
                    94:76:6f:e3:55:ad:9c:2b:dc:05:c0:50:94:dd:b1:
                    76:ea:09:d1:c6:5a:fe:46:37:71:14:a8:09:af:fb:
                    91:bc:43:28:ef:11:18:af:ee:c7:4b:31:28:60:cc:
                    18:1b:6c:f9:63:e5:28:a4:39:ee:f7:7c:9a:b5:bf:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:39:B8:E7:97:CB:46:DB:DA:A9:EA:2B:AF:4E:0E:C3:15:F2:C4:2D
            X509v3 Authority Key Identifier:
                keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:24:f8:a6:5e:f4:c1:af:87:74:7d:ea:5e:2c:31:0a:76:63:
         96:b4:2b:d5:cb:a4:1b:ea:a6:2f:fb:65:31:d8:b7:7d:81:8c:
         ea:2b:d3:62:1e:2d:5b:33:c0:c8:88:b4:5d:cd:01:68:cd:39:
         a6:49:e7:14:75:39:08:80:6b:70:ce:ae:e4:ec:08:bd:b9:b6:
         26:82:5b:8a:4b:47:84:f8:c2:39:d9:f9:09:bc:b3:8d:ce:8a:
         27:ef:a0:12:9d:06:fc:43:f6:f9:c5:da:9a:43:84:1b:2a:a4:
         7b:23:94:23:9e:f4:14:9e:d1:13:76:10:1d:55:09:6d:f1:c9:
         c4:0e:93:96:9e:0c:68:27:27:69:5e:53:4a:7a:7c:34:59:77:
         59:a8:e7:90:29:66:64:d5:03:c9:99:7d:a4:02:71:18:76:fe:
         0a:5c:6a:41:89:da:4c:6c:52:db:d6:61:83:96:1b:10:2e:3f:
         ed:1e:c5:34:59:0c:17:c1:59:ea:5a:61:07:36:8e:cb:25:14:
         be:79:36:e4:55:a7:e2:82:80:73:b9:e0:24:6e:d7:f0:55:dc:
         46:fc:c0:dd:61:ac:65:53:b4:84:1e:71:cb:13:36:e8:e7:f6:
         3b:b7:8a:9f:a4:70:3d:dd:39:22:82:01:a8:3e:26:3c:8e:73:
         33:d1:5d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 23:49:49 2026 by rpki-client