Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File:                     SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier:          dwhqmhUHMRUJ4NNkUlwQN14Hqiimiax7+d/PrVVXnaA=
Subject key identifier:   13:AF:C8:F9:1E:47:61:F1:04:97:55:B0:AF:75:51:96:F2:C2:1F:FA
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer:       /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial:       01A0B5095DE684D19E81DB1374351DB33D2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number:          1776
Signing time:             Fri 18 Sep 2026 15:01:24 +0000
Manifest this update:     Fri 18 Sep 2026 15:01:24 +0000
Manifest next update:     Sat 19 Sep 2026 15:01:24 +0000
Files and hashes:         1: 32Nopwa7iDrMzQvWR2AiGUXyxqI.roa (hash: UhsqgA9BDo8hjf2FELCXlR0HFZ2+BdgenG+by3xwFz8=)
                          2: LjPmzvpwanEzWC7YwFcmuEsNkws.roa (hash: MIJ/J6I5pbMxfY/A5H3VycZbhKC12p0Tut4YaO1yZlQ=)
                          3: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: 42CfSGCdlQJJyPlItjPIJsSnSIXJP9krHw28UpCFXAM=)
                          4: U032uAEUZ0b4mkUs5GY7tAVTTzU.roa (hash: DED8ognEIVQikRQX7YkZQcK+eDMVkhFnX19M3oaeQrw=)
                          5: UKW6ggBaCeq2EWzJWVDTUUG5C5M.roa (hash: RrnGAk5DcSVwnr4K/OnsZ4KSQkqSg7XT17ThtWs4Qzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 15:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:09:5d:e6:84:d1:9e:81:db:13:74:35:1d:b3:3d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494d7873416510a2fb2346ef342280155522713b
        Validity
            Not Before: Sep 18 15:01:24 2026 GMT
            Not After : Sep 19 15:01:24 2026 GMT
        Subject: CN=13afc8f91e4761f1049755b0af755196f2c21ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c7:2f:3e:60:3d:bd:d9:e1:85:6b:be:20:54:
                    cb:25:fb:fa:f0:44:c7:d7:a2:9a:7a:6e:a3:f1:d3:
                    06:c9:39:9e:df:88:cc:91:c3:63:44:27:6f:50:1b:
                    ef:95:02:56:1a:29:37:aa:77:50:c6:c1:82:20:b3:
                    1a:aa:f4:60:82:f7:18:39:d8:88:6b:4f:5e:bf:d1:
                    34:03:9c:0f:b1:ea:ca:6b:f4:9b:dd:58:98:10:ed:
                    ca:b0:92:e0:31:f9:b9:df:09:fb:81:2c:bc:e2:c8:
                    86:d9:c3:c7:76:64:1e:a6:e1:d2:3a:ef:5b:b1:df:
                    2a:2b:76:41:53:8a:6e:ff:be:8e:cf:b6:13:0f:25:
                    f7:b8:61:a9:19:b4:eb:6a:35:b3:6d:c6:6e:0b:0e:
                    70:cc:83:61:d2:62:9b:52:8b:3d:ba:28:22:ed:e0:
                    79:de:23:e0:00:75:49:67:e9:5d:6a:cd:06:e5:d1:
                    a4:d8:8f:0d:16:d4:d5:40:19:e8:57:7c:e9:41:64:
                    f7:23:fe:15:1d:fa:ea:22:c8:a0:26:8a:a8:ed:47:
                    16:89:81:32:c3:89:e5:92:4f:4e:ec:1e:a9:16:57:
                    a2:6b:7a:91:25:45:53:e6:b5:70:f6:90:8c:8f:67:
                    9f:9a:8c:83:2c:e8:6a:e4:1e:6f:a7:ce:3f:af:d5:
                    31:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AF:C8:F9:1E:47:61:F1:04:97:55:B0:AF:75:51:96:F2:C2:1F:FA
            X509v3 Authority Key Identifier:
                keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f7:93:91:af:99:74:27:95:c9:30:1d:55:0c:b8:35:47:8a:
         77:ee:ff:2c:07:06:a7:f3:1d:68:92:25:a3:2c:5a:d6:8d:c1:
         f0:a2:81:27:f3:ff:bd:22:22:69:fa:f5:2b:0d:f4:df:06:0c:
         53:47:b9:57:88:dc:c5:0e:bc:76:b0:64:62:6b:89:d4:12:4e:
         30:8c:b0:8d:9e:b3:63:64:5f:33:bd:96:de:97:ff:d1:3c:65:
         10:61:cf:50:52:05:ea:73:e0:f9:5c:68:c7:2c:4e:1d:42:4c:
         01:fe:b6:07:6e:c3:3a:16:92:7a:54:c6:e7:c5:74:fd:6b:3d:
         b3:59:12:03:a0:14:50:cb:b5:9e:64:6a:cb:49:3a:f2:3a:59:
         d2:e4:c7:9a:c8:f1:ab:6d:78:01:9b:27:2d:59:8b:2a:23:e3:
         ed:55:f5:d4:17:1e:27:58:5f:b5:de:24:7d:21:ad:d4:4a:2a:
         b5:ff:e2:af:6e:11:4c:c9:34:a0:a8:34:a5:94:9a:0c:82:ec:
         51:09:68:98:d1:f2:db:47:4c:53:3c:04:05:04:1a:16:7f:9d:
         ab:6e:2b:1c:fe:4f:1f:14:d9:59:b2:3a:35:d6:04:bc:9b:b1:
         0c:42:3c:5d:79:b7:cf:29:89:aa:1e:21:5b:e9:19:19:8e:f0:
         b6:f3:24:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:46:55 2026 by rpki-client