Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
File:                     S6eyT4fqUURtUZr9T-YEGRmOwBI.mft (raw, json)
Hash identifier:          8rWqFrvqdHMpN0I6lupjpPLxll7FKIBLjV/APNtmGxU=
Subject key identifier:   C3:63:C6:00:C7:FE:F6:7C:66:C7:D1:4E:B4:AC:71:45:29:6E:0C:9B
Authority key identifier: 4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12
Certificate issuer:       /CN=4ba7b24f87ea51446d519afd4fe60419198ec012
Certificate serial:       01A0F59FEC4CBAFB39293DBF0B361B72804E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
Manifest number:          1A83
Signing time:             Thu 01 Oct 2026 04:01:33 +0000
Manifest this update:     Thu 01 Oct 2026 04:01:33 +0000
Manifest next update:     Fri 02 Oct 2026 04:01:33 +0000
Files and hashes:         1: S6eyT4fqUURtUZr9T-YEGRmOwBI.crl (hash: U/tH5rfKrkD7f4SVhMyfU4M3xs9T+tih7MRdY4FQ75k=)
                          2: YpzfhBRjlhlygyZbhfS_gEZ78u8.roa (hash: 4VOe3+Zz4d8DVsxBDVMiQp9XKsvhya9ruQE7ssmcGZ0=)
                          3: o5Bt-A5F4sUEfdarAj82so2-9rk.asa (hash: 9puN29QaYr3CoTjTv9qBsno8hmdQJUVSkIHnreuyEvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 04:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f5:9f:ec:4c:ba:fb:39:29:3d:bf:0b:36:1b:72:80:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba7b24f87ea51446d519afd4fe60419198ec012
        Validity
            Not Before: Oct  1 04:01:33 2026 GMT
            Not After : Oct  2 04:01:33 2026 GMT
        Subject: CN=c363c600c7fef67c66c7d14eb4ac7145296e0c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d4:ea:c2:9f:67:67:4f:b5:80:56:3b:ab:21:
                    03:41:ff:5c:e1:54:1f:40:b3:a9:c1:d1:23:f2:8a:
                    e3:71:92:c3:25:14:92:48:3e:96:83:83:3f:ba:23:
                    d9:20:74:37:8c:80:48:2b:c3:4b:6a:d2:55:8d:67:
                    75:64:ad:ff:22:8b:ff:02:61:ee:2e:ee:eb:ec:95:
                    61:68:b7:91:9f:27:85:ea:aa:63:27:83:dd:4b:85:
                    53:84:1d:66:6f:75:a6:e3:b3:dd:95:34:cb:4e:b8:
                    d6:c0:75:0f:35:51:8c:7d:c0:b7:d4:c4:db:23:2e:
                    f0:42:0c:aa:96:83:6a:49:10:32:b4:ae:20:ce:af:
                    27:13:f0:0d:35:19:40:53:ad:8c:cb:f0:e3:48:3f:
                    07:49:1d:b1:9a:a7:8a:e0:12:c3:c3:0c:8d:ad:d8:
                    1f:28:89:36:18:57:82:5a:b4:ac:35:d4:f7:51:34:
                    01:9e:34:a9:8b:45:b0:4d:eb:0f:41:61:a7:53:b8:
                    92:de:28:bc:4e:91:13:f7:c8:aa:af:94:e9:e5:34:
                    9e:67:88:6b:b2:f1:97:fc:27:f1:7c:3e:83:19:0c:
                    b4:24:5d:0d:d0:8a:81:0f:e8:9e:ff:fa:9a:31:7f:
                    62:e0:ad:09:85:58:4d:99:9e:d3:16:37:24:5c:4a:
                    b2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:63:C6:00:C7:FE:F6:7C:66:C7:D1:4E:B4:AC:71:45:29:6E:0C:9B
            X509v3 Authority Key Identifier:
                keyid:4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:dd:d5:c3:65:96:51:33:76:6a:c9:83:1d:1a:dd:c4:2c:ed:
         0a:08:9d:ca:87:fd:d9:b2:a5:70:7a:7b:6a:61:75:38:b0:66:
         ae:84:30:aa:6a:ee:7d:a3:4b:29:2c:87:03:8d:2b:65:30:76:
         d5:fd:b4:98:ed:93:22:13:4b:db:8f:b3:a3:a8:e3:fd:89:4f:
         68:3c:8e:b6:a7:59:20:80:6d:b6:ef:fb:6c:6b:a5:14:08:dd:
         05:85:1e:01:4d:e6:c7:8e:78:4a:70:c9:97:5e:f9:c6:f3:d3:
         a0:eb:14:82:d1:4a:3f:73:90:ad:93:0d:a2:f1:3d:28:cb:b6:
         77:40:62:9d:27:c8:33:5f:80:d0:3e:56:51:67:b1:68:d7:c0:
         ed:92:b0:5c:71:26:09:ca:22:7d:72:64:35:7a:30:7e:7a:e7:
         74:9b:67:99:9e:53:9e:bf:81:c6:b3:4a:55:c7:b6:48:52:30:
         9c:86:7f:89:bd:1d:f9:05:f3:38:1e:a2:b3:78:3d:34:cb:52:
         e3:c3:ea:4b:70:8d:de:20:d1:62:dc:2d:b4:b5:ac:0c:0e:5c:
         17:20:7a:bf:b1:9a:8c:67:56:fd:18:40:65:2c:ca:e5:d3:42:
         14:73:b3:9b:ef:f9:93:af:20:14:cd:78:1e:01:61:72:24:67:
         55:0b:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:52:56 2026 by rpki-client