Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft
File:                     SyUQgOllg93f08tXQu9eQmWBFLA.mft (raw, json)
Hash identifier:          wlf8Vd63fveAW8h9PSuVsmmFCjYD91gqV6azYeh6vmI=
Subject key identifier:   95:1E:F8:40:E2:26:83:94:EA:16:D2:99:77:1D:42:26:AF:88:F6:D3
Authority key identifier: 4B:25:10:80:E9:65:83:DD:DF:D3:CB:57:42:EF:5E:42:65:81:14:B0
Certificate issuer:       /CN=4b251080e96583dddfd3cb5742ef5e42658114b0
Certificate serial:       01A08B6848E16066ED3603DDDAAB52F66667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SyUQgOllg93f08tXQu9eQmWBFLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft
Manifest number:          018B
Signing time:             Thu 10 Sep 2026 13:01:02 +0000
Manifest this update:     Thu 10 Sep 2026 13:01:02 +0000
Manifest next update:     Fri 11 Sep 2026 13:01:02 +0000
Files and hashes:         1: SyUQgOllg93f08tXQu9eQmWBFLA.crl (hash: IVmTF0Vu2Gvo0f1Q5UqFPcPKYGac6BjpGy+B+XoabYo=)
                          2: en2MbnssfxDmdQApF9BpXZafTB4.roa (hash: ER4VRDsyb1U6Mhi3DkYQHSd9SIwplFdtiKrG0UkksVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SyUQgOllg93f08tXQu9eQmWBFLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:68:48:e1:60:66:ed:36:03:dd:da:ab:52:f6:66:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b251080e96583dddfd3cb5742ef5e42658114b0
        Validity
            Not Before: Sep 10 13:01:02 2026 GMT
            Not After : Sep 11 13:01:02 2026 GMT
        Subject: CN=951ef840e2268394ea16d299771d4226af88f6d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:56:fe:85:68:af:b3:6d:8a:b7:a7:40:c3:30:
                    07:49:90:8c:16:29:c2:7d:62:48:11:e6:ab:a8:be:
                    c8:03:0c:68:6d:b9:bb:b4:f5:db:00:35:d4:a6:44:
                    c4:1d:c1:66:99:81:08:2f:61:c7:d4:36:03:a6:93:
                    7e:6c:0d:7b:09:1a:7a:54:5a:7c:dd:3e:ce:e7:be:
                    c5:e7:7e:16:78:60:10:30:8c:a8:63:40:60:c7:1e:
                    f2:87:01:2e:f0:5a:b8:19:25:01:20:3d:05:9c:7c:
                    2e:12:df:8e:d9:b8:d6:7c:ef:53:b7:1d:55:aa:68:
                    8c:c6:a4:04:36:75:6e:18:43:5e:55:f7:9e:d1:f7:
                    85:e9:d9:0a:96:7c:6b:72:6f:42:9d:f4:b8:fe:0e:
                    23:a0:b8:c2:39:a9:6e:fb:d0:3b:d6:97:15:a3:bb:
                    b8:bf:b1:7b:75:5a:fb:90:5c:87:09:75:c9:63:2f:
                    ed:22:13:4e:75:a5:f4:54:c5:b0:f8:2f:dd:4e:56:
                    dd:ce:64:4e:ce:fb:c4:f4:af:69:ee:ff:96:f3:99:
                    f1:50:d2:ba:e5:4e:f9:d7:30:5f:81:23:e5:eb:7f:
                    86:aa:7a:da:f3:c3:f0:e0:2b:53:42:7c:aa:61:04:
                    28:00:57:59:28:f4:3d:2a:48:1f:5e:6f:f4:15:ac:
                    20:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1E:F8:40:E2:26:83:94:EA:16:D2:99:77:1D:42:26:AF:88:F6:D3
            X509v3 Authority Key Identifier:
                keyid:4B:25:10:80:E9:65:83:DD:DF:D3:CB:57:42:EF:5E:42:65:81:14:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyUQgOllg93f08tXQu9eQmWBFLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30b398-1407-49c8-9963-bbbb48850735/1/SyUQgOllg93f08tXQu9eQmWBFLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:ee:b1:42:5d:66:5d:14:30:40:66:64:57:f4:73:1a:d5:25:
         a4:ad:4a:3c:85:ec:a7:21:d5:d8:16:1f:ea:7c:ba:a1:5a:f1:
         73:76:03:ba:16:83:fe:c6:76:f6:c3:1e:30:54:95:55:73:21:
         18:44:03:af:8c:5a:03:05:c4:d1:3b:c1:16:e2:ad:22:df:a9:
         4f:28:b3:25:71:01:45:00:0c:d4:93:5f:4c:1d:b0:23:d7:15:
         e7:4e:98:93:1c:08:3c:87:38:36:47:80:fa:58:40:ea:0d:39:
         5f:61:21:1b:f4:a2:c3:ac:e4:e7:46:f2:3c:59:af:33:03:35:
         76:67:2d:2c:26:73:ef:98:7b:32:c9:75:47:81:8f:89:87:82:
         75:f2:09:be:cd:cd:50:43:db:0c:98:5a:a5:b4:57:f9:91:a9:
         6e:85:ec:40:b7:2b:50:ca:84:fe:ae:64:63:bf:7c:60:8c:ea:
         c3:2d:c9:0b:dd:db:ef:a6:39:92:b3:cd:22:02:07:56:94:78:
         9a:c4:fe:15:aa:b7:37:d0:54:39:22:65:f1:97:7a:bb:8f:4f:
         63:8c:36:6a:a0:27:c7:5d:db:80:43:59:3d:42:a5:eb:9d:47:
         e0:b9:31:ef:ec:f6:0b:0f:8d:ba:75:63:f6:09:76:bc:91:2c:
         d3:99:3f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:17:12 2026 by rpki-client