Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File:                     S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier:          syI6w6qQeqQUv40+m71TohBdVckx+q0rcYsfdYFlsiA=
Subject key identifier:   E7:9D:CA:77:08:B0:57:D2:77:CD:E9:16:F4:7C:15:9C:90:21:9C:F1
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer:       /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial:       01A08DC4796A6594F67DF5D9AFD106DA14BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number:          078E
Signing time:             Fri 11 Sep 2026 00:00:58 +0000
Manifest this update:     Fri 11 Sep 2026 00:00:58 +0000
Manifest next update:     Sat 12 Sep 2026 00:00:58 +0000
Files and hashes:         1: NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa (hash: jBGdM1PIKUvp7PqxpDnR+tYU0/z5UBNUNem3R8n/8fI=)
                          2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: AviX9+/Kig0hkgnir8ZGDrdc7aqZcy3fA6WLAiF8hlE=)
                          3: cYnE7FavrDSt3SrEYya63HS7_dI.roa (hash: KGEvNenXcCeg3TCO3nqemstjyExiwPsWFQTV1a5VNaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:c4:79:6a:65:94:f6:7d:f5:d9:af:d1:06:da:14:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
        Validity
            Not Before: Sep 11 00:00:58 2026 GMT
            Not After : Sep 12 00:00:58 2026 GMT
        Subject: CN=e79dca7708b057d277cde916f47c159c90219cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:3b:87:b5:83:b1:8c:8f:be:c3:c2:e2:19:
                    20:41:a3:d1:d8:08:27:ad:fd:99:3a:c6:27:02:31:
                    71:00:84:de:25:1a:32:e7:b9:4c:3c:20:3a:c5:33:
                    3b:57:2d:3a:2f:9f:d4:13:50:88:29:46:c6:5e:bd:
                    20:5f:37:36:06:83:3f:66:5b:99:92:a2:73:04:a6:
                    59:0e:1f:b1:3e:59:ec:97:9c:d0:18:75:ba:35:a2:
                    e1:ae:35:2c:8c:e7:cb:25:14:84:1a:bf:ae:7d:e1:
                    d1:48:61:b8:08:85:54:0d:05:9f:b5:a9:e4:c3:8b:
                    94:9e:d3:77:db:a9:4c:ae:fe:ee:c9:38:ec:46:5e:
                    de:47:d5:2f:c7:aa:ca:3d:ad:97:c5:c3:57:c3:9c:
                    b7:eb:00:03:7c:a4:be:5c:6b:6e:9f:7b:0d:e3:ce:
                    27:59:27:c0:13:8d:10:4e:85:65:f6:c4:8a:00:7b:
                    f0:bf:01:cf:c0:c6:12:b9:ab:e8:06:5f:02:a3:e7:
                    2a:29:de:b9:57:13:97:9a:b4:5f:a0:d1:a9:2e:b5:
                    6e:2f:8c:93:fe:cc:e1:a4:38:4f:d8:b8:d0:46:09:
                    8c:db:7c:e7:77:13:60:95:45:d2:bd:be:52:7c:61:
                    31:a7:1c:ab:7c:64:da:98:f8:80:c9:12:dc:40:e9:
                    b6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9D:CA:77:08:B0:57:D2:77:CD:E9:16:F4:7C:15:9C:90:21:9C:F1
            X509v3 Authority Key Identifier:
                keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ba:a7:74:a7:f0:c9:2a:d0:40:2b:a2:b5:64:e4:fb:eb:a0:
         51:ce:71:88:87:db:b1:e7:3f:6c:bd:03:04:7c:ee:31:41:bb:
         1a:ae:be:ad:e6:bb:23:6f:b3:4f:04:66:39:e1:06:56:15:2d:
         18:ca:d1:a9:0f:85:7e:ab:66:fa:2b:44:df:37:a1:88:3f:66:
         af:05:7f:e7:f7:bc:ee:79:7f:8b:c5:b8:24:d0:7c:0e:1f:5c:
         ea:4f:b7:74:71:a9:12:f6:01:ff:3c:c3:c6:f0:85:3a:71:b6:
         f9:83:8f:1b:a7:8e:fe:e8:8b:be:d5:69:aa:60:d1:10:44:db:
         02:6e:86:b1:0c:a3:5b:ad:33:70:15:0a:df:4d:ed:9f:d3:df:
         a3:05:2a:34:e1:fa:cb:de:f2:1d:da:b5:45:e0:92:42:d8:a5:
         ef:69:c6:e9:28:ad:ff:b5:91:ad:8f:2e:c0:83:80:2c:5c:a0:
         c3:ca:74:ef:64:51:ae:b3:09:a2:77:ae:16:48:11:86:01:81:
         2c:5b:09:14:39:79:94:9a:7b:ef:70:6b:bc:d6:b3:e8:03:33:
         98:a2:04:f9:f7:3c:a8:b3:0b:62:5d:5b:38:a1:92:eb:e9:b3:
         a0:6e:0d:ec:ae:03:47:95:37:4e:c9:b4:7b:cc:ec:07:60:f9:
         a5:79:64:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:32:38 2026 by rpki-client