Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.mft
File:                     SlW-JEUcNjrtD78lsV-0XRjrhbs.mft (raw, json)
Hash identifier:          t8937a8rMeflks6V1YdG3nwrebk5oq+R0KWy7Gm4g1U=
Subject key identifier:   51:1C:68:97:5C:EE:27:B6:5C:33:30:40:C6:36:5F:D7:15:B6:07:7F
Authority key identifier: 4A:55:BE:24:45:1C:36:3A:ED:0F:BF:25:B1:5F:B4:5D:18:EB:85:BB
Certificate issuer:       /CN=4a55be24451c363aed0fbf25b15fb45d18eb85bb
Certificate serial:       01A0F6B2E57A2416140B49C9B54D27BF24F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SlW-JEUcNjrtD78lsV-0XRjrhbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.mft
Manifest number:          36
Signing time:             Thu 01 Oct 2026 09:01:54 +0000
Manifest this update:     Thu 01 Oct 2026 09:01:54 +0000
Manifest next update:     Fri 02 Oct 2026 09:01:54 +0000
Files and hashes:         1: 5zLKCLk5iYERmYqDGmtd8mEeKSQ.asa (hash: sx1+DgkP1FpQxqvdjvZ6S4CXbH1TZq5egsnoLK3GPBY=)
                          2: SlW-JEUcNjrtD78lsV-0XRjrhbs.crl (hash: vYbl+kHlHTurGZ0jmCBAfHQEArLNocdXzBYOVpcIc6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SlW-JEUcNjrtD78lsV-0XRjrhbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 09:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f6:b2:e5:7a:24:16:14:0b:49:c9:b5:4d:27:bf:24:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a55be24451c363aed0fbf25b15fb45d18eb85bb
        Validity
            Not Before: Oct  1 09:01:54 2026 GMT
            Not After : Oct  2 09:01:54 2026 GMT
        Subject: CN=511c68975cee27b65c333040c6365fd715b6077f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:42:a5:06:92:2b:9c:2e:05:78:2f:2c:3f:c1:
                    7d:d3:38:2f:4b:2a:86:27:ba:2d:24:3d:1b:4a:77:
                    6e:29:33:95:00:83:70:5f:f2:b2:0a:2f:fc:48:b9:
                    ae:3f:a3:1a:ee:16:6b:96:89:f7:72:10:29:2d:5a:
                    dc:c2:56:1d:94:57:a4:5c:83:78:a1:67:d3:26:ae:
                    b6:5b:b0:7f:79:52:08:50:a5:96:65:d3:c0:0a:85:
                    a0:16:1c:ff:57:92:0f:88:40:c3:ee:dd:ac:09:15:
                    be:5e:8b:df:52:22:9e:fa:a0:fa:32:0f:ab:e5:10:
                    a3:9b:a5:32:bc:80:f3:03:15:24:60:99:3c:77:ae:
                    77:36:f9:86:f4:ff:0e:39:d4:ef:bd:e4:9a:af:e8:
                    69:e6:56:57:af:6a:03:db:a8:1f:4c:87:5a:7c:47:
                    19:64:6b:1b:68:02:c2:b6:90:f8:b2:f0:90:ea:16:
                    80:66:29:bf:a3:9b:d1:1d:74:ce:cb:9d:3b:11:d6:
                    fd:c5:51:c5:d0:65:e7:22:22:2b:0f:95:69:9e:5d:
                    d5:cc:b6:7f:4e:0b:03:ec:4c:7c:6c:60:66:bd:05:
                    29:fa:be:d6:ad:a6:c2:d8:97:86:49:29:75:00:73:
                    a8:bf:f5:5a:e3:1e:bc:8b:c1:ed:55:a7:e3:af:cc:
                    7c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1C:68:97:5C:EE:27:B6:5C:33:30:40:C6:36:5F:D7:15:B6:07:7F
            X509v3 Authority Key Identifier:
                keyid:4A:55:BE:24:45:1C:36:3A:ED:0F:BF:25:B1:5F:B4:5D:18:EB:85:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlW-JEUcNjrtD78lsV-0XRjrhbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4f326e-1816-4ac3-8cea-69896d4094b2/1/SlW-JEUcNjrtD78lsV-0XRjrhbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9b:f9:76:6b:e2:97:b9:db:fd:07:6a:cd:e5:e4:23:f6:c2:
         4f:07:8b:b8:cb:02:2c:78:62:34:16:bd:d0:bc:9e:75:59:f8:
         85:79:2a:6e:f0:ac:d8:b3:01:de:f3:0c:c1:9f:fe:7e:fd:8a:
         2e:f0:f8:7b:89:e2:9e:73:af:ce:dd:10:76:f5:9b:eb:c9:ff:
         95:07:dc:f3:7e:87:37:d3:46:fc:1c:2d:e9:c8:6a:e6:3d:9c:
         97:f3:15:4d:f2:75:e6:ea:31:6a:2a:50:fa:a7:ec:63:36:8c:
         f9:43:49:73:89:f0:dc:ce:d4:89:7e:fb:b1:0d:38:12:73:15:
         02:6c:8e:fb:db:20:f9:ed:48:69:9e:86:4e:4b:11:4d:a6:e7:
         2d:84:bc:63:c0:40:c1:1d:7a:cf:55:27:52:ea:00:36:5c:9f:
         88:c3:7a:de:0d:42:f8:cf:5f:fd:3e:16:af:0c:26:4d:d1:8f:
         2e:1a:78:5c:f7:a2:ac:18:7a:8f:9c:6a:3d:7b:1b:98:01:80:
         8e:e3:e5:1e:5c:1f:16:b9:4b:39:bd:a4:d5:1e:cb:0c:7e:32:
         a4:44:bd:ba:91:32:90:d9:8c:23:dc:d7:ec:4a:0f:03:da:b8:
         bc:9a:ad:04:57:a3:27:7a:d2:7f:eb:8f:11:1f:96:5d:d3:59:
         4a:d3:92:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:39:29 2026 by rpki-client