Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File:                     SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier:          lWb4wBEy/niXrnbtlqXeBn+YLBqB+oRSNrNU0k7kUPI=
Subject key identifier:   8B:4B:49:EF:32:5F:B7:4B:C6:50:5A:FF:CE:CB:37:D4:D2:88:C2:5E
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer:       /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial:       01A0B5AD0AEB133591027AB220FE92D0171F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number:          1145
Signing time:             Fri 18 Sep 2026 18:00:11 +0000
Manifest this update:     Fri 18 Sep 2026 18:00:11 +0000
Manifest next update:     Sat 19 Sep 2026 18:00:11 +0000
Files and hashes:         1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: Ja/jOFLcB+qxunGGc0quMV1WgTR3UPnq+a69LQSX+y0=)
                          2: nle7H145kWARm3i3WSQ0jxUoyxQ.roa (hash: zhsBwF/9ucNK3MWhQYCLkOEtb7B4dCQtxNnhlmW24Jc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 18:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:ad:0a:eb:13:35:91:02:7a:b2:20:fe:92:d0:17:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
        Validity
            Not Before: Sep 18 18:00:11 2026 GMT
            Not After : Sep 19 18:00:11 2026 GMT
        Subject: CN=8b4b49ef325fb74bc6505affcecb37d4d288c25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a3:60:7a:f3:f9:14:1d:1b:7b:fc:34:2c:c9:
                    e8:df:ce:00:16:79:b5:e6:56:d2:93:00:65:8f:55:
                    b8:d7:aa:07:b7:b7:36:1c:31:ce:b0:a2:1b:79:63:
                    26:0d:1a:f9:7d:20:7c:32:37:3b:20:b6:10:ed:be:
                    c0:18:84:ae:d3:32:9f:52:a8:51:d7:50:f0:44:d3:
                    40:ee:61:37:c1:f4:ce:38:7c:27:28:9a:2b:fb:e7:
                    94:0e:f9:8f:29:5a:8e:20:bf:17:79:0a:8b:3d:11:
                    c2:31:f3:c6:e3:3e:f8:51:16:c7:d1:bf:d3:9e:8a:
                    97:20:5d:d3:7f:e9:1b:3b:97:bc:64:2c:ec:74:b6:
                    26:78:4e:86:a8:3e:a2:ca:ea:ff:7a:da:32:97:2c:
                    c7:62:92:b9:ba:c9:a8:25:af:af:26:c3:48:db:52:
                    41:96:79:71:d5:fd:0d:78:0d:6b:ee:7b:7b:a0:e7:
                    02:97:2d:4a:0c:f0:87:5d:eb:97:ef:db:a2:b7:12:
                    26:70:18:d6:b2:37:c9:88:1b:d8:20:b6:6b:ac:70:
                    30:fe:c1:b9:6c:99:95:38:ef:10:3e:3f:e6:52:29:
                    a1:fb:bd:9e:dc:a6:f5:43:57:3d:04:e8:7f:84:c3:
                    0b:59:ac:f0:23:17:48:25:0b:29:26:b2:6b:0f:90:
                    05:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4B:49:EF:32:5F:B7:4B:C6:50:5A:FF:CE:CB:37:D4:D2:88:C2:5E
            X509v3 Authority Key Identifier:
                keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:63:99:e2:30:2c:a7:a1:7e:d8:0c:fa:33:c7:2f:3b:ce:0d:
         d4:05:b5:5e:30:1e:b7:d4:20:88:83:f6:61:39:f2:cb:e0:cc:
         79:ea:f5:f4:6c:57:fe:66:98:09:de:1a:e7:c9:34:42:35:6e:
         eb:5b:ad:2a:fe:b9:9c:6d:ea:e3:98:19:fd:4d:75:eb:b8:fb:
         3f:93:51:9c:c1:8d:b3:27:88:06:6d:22:65:45:75:c6:c9:ec:
         a4:bf:b9:21:ea:e5:99:94:82:f5:b0:ba:32:1e:51:b6:4f:89:
         aa:90:bc:1a:33:61:7c:bf:ee:87:6a:02:2c:3b:f5:1a:03:b5:
         91:ef:32:fb:fc:06:98:c5:b1:34:56:f2:cc:ae:96:69:02:f6:
         27:2b:35:51:ce:ac:70:d8:29:cf:05:70:5b:79:65:0b:e6:7d:
         9e:d5:fe:5c:ea:47:b8:ff:ab:6c:f6:b8:54:bc:f6:ab:be:b2:
         b6:1d:71:3a:d5:e7:c1:38:9d:40:99:a9:e3:a2:be:93:38:1f:
         3a:05:1d:7c:1a:0d:ce:cb:62:8e:ba:7f:33:fd:33:11:26:f3:
         cc:f8:4b:09:f8:e2:5f:c9:d7:eb:a5:94:82:09:4a:e7:fd:1b:
         a1:5c:56:a4:a1:f9:9b:f3:93:b8:89:6c:eb:35:c9:33:3a:4e:
         e2:c8:83:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:04:50 2026 by rpki-client