Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File:                     S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier:          B3ZXILHLmSfGEmZ+mG3A2Q9w5RUUKaxj5X+tXOrTwfQ=
Subject key identifier:   12:E4:59:C6:7B:D3:4F:5C:43:02:9E:8C:A7:4E:96:76:C4:21:A6:E6
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer:       /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial:       01A08BD6066D70119F175F57191FC79A4165
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number:          078D
Signing time:             Thu 10 Sep 2026 15:00:54 +0000
Manifest this update:     Thu 10 Sep 2026 15:00:54 +0000
Manifest next update:     Fri 11 Sep 2026 15:00:54 +0000
Files and hashes:         1: NuG7e-eaeYmgEKzW-gA4hm0E3yg.roa (hash: jBGdM1PIKUvp7PqxpDnR+tYU0/z5UBNUNem3R8n/8fI=)
                          2: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: mj3NIsp9SDwCs0DKz01N8FZlDw2T1YC+ivBGbxm+hws=)
                          3: cYnE7FavrDSt3SrEYya63HS7_dI.roa (hash: KGEvNenXcCeg3TCO3nqemstjyExiwPsWFQTV1a5VNaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 15:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d6:06:6d:70:11:9f:17:5f:57:19:1f:c7:9a:41:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
        Validity
            Not Before: Sep 10 15:00:54 2026 GMT
            Not After : Sep 11 15:00:54 2026 GMT
        Subject: CN=12e459c67bd34f5c43029e8ca74e9676c421a6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9c:6d:fd:3d:61:43:3b:dd:be:28:53:89:a7:
                    53:97:14:a9:ae:55:40:a4:a0:7d:81:df:4e:8f:b8:
                    f6:b3:e3:8f:e1:a9:04:0d:75:22:57:5d:49:f6:5b:
                    03:37:ba:71:bf:78:47:dc:b9:bb:33:5a:3b:22:16:
                    fa:52:31:57:e9:ca:3f:cc:69:cf:17:d5:d3:31:66:
                    74:ed:17:57:bc:e5:43:e8:a9:a1:1e:da:49:66:b7:
                    13:e6:ad:75:2b:74:c4:25:59:46:ec:ed:85:c4:b4:
                    6d:39:47:ad:3e:ca:a5:f0:f9:3b:2d:69:52:4a:ba:
                    98:72:fb:e9:bf:6e:8d:71:36:36:e5:d9:9c:0a:16:
                    56:95:86:72:9c:fa:bd:6d:87:c2:0a:28:95:d3:4b:
                    b5:e6:2a:8f:f1:50:76:d5:05:0a:fc:bf:8a:74:af:
                    cc:cb:13:eb:81:40:91:af:9f:f4:61:18:ed:0f:13:
                    0f:6b:d5:67:ae:93:a0:5e:92:07:11:15:b6:65:1b:
                    1d:70:a4:fa:60:45:5f:a4:a0:3f:a9:b3:5e:6c:74:
                    e8:8b:62:bf:13:64:8c:41:8a:bc:2e:c3:73:06:e0:
                    a9:21:0f:98:e1:6e:0f:a3:1a:8f:77:4b:d5:ce:3d:
                    20:37:ee:19:81:9b:de:da:8b:9a:67:e4:05:38:87:
                    05:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E4:59:C6:7B:D3:4F:5C:43:02:9E:8C:A7:4E:96:76:C4:21:A6:E6
            X509v3 Authority Key Identifier:
                keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:cd:3b:a6:80:10:72:c9:3c:06:fb:ff:a8:6a:e7:bb:9b:77:
         f3:71:3f:39:3c:8b:10:8a:98:15:57:12:82:53:52:0a:32:ff:
         4e:96:e0:b2:1c:77:c3:77:1d:9c:aa:4c:04:19:e0:c6:f8:ac:
         c2:b2:40:f3:17:60:2d:6b:a8:1a:f8:07:66:67:b8:90:ad:ea:
         00:9a:2d:d2:dc:69:20:34:e2:58:6b:16:e7:7f:e0:e2:76:41:
         59:7b:73:f3:dd:7d:f7:bd:1a:35:27:5b:5d:56:64:7f:b4:8e:
         ec:63:26:25:a4:91:eb:3d:da:c7:28:a0:bf:76:a2:5c:32:5f:
         43:fa:a8:51:a7:90:9d:8f:29:44:77:77:85:91:1c:be:83:82:
         fa:50:d2:79:00:44:c8:19:bd:5a:1d:d7:13:03:ea:d4:de:37:
         54:e4:fe:0f:93:c6:e7:3e:e9:30:55:d6:a3:f6:60:d3:72:e5:
         5f:2d:1a:f8:b7:e7:95:3d:05:1b:29:2b:89:be:2f:a5:e9:5c:
         5b:75:48:52:80:f7:eb:26:7b:5c:13:f8:9a:b6:1d:dc:85:4a:
         31:d2:e7:8c:b5:29:3d:8f:f4:e3:ed:3b:0f:ba:37:1e:c6:0d:
         bd:b8:b0:b8:e2:1f:2b:ef:22:10:3f:4d:d5:a2:f9:7c:d3:dd:
         7b:1f:b9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:08:10 2026 by rpki-client