Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
File:                     SROyYa2_ee42pqOt-mh6fsZYIQs.mft (raw, json)
Hash identifier:          tnM15tUspz5QI8IPsHA+D5+7vji8cLp7uIWUYXl8N+Y=
Subject key identifier:   C8:F3:33:4A:FD:DD:A7:EF:4F:C0:5A:09:3A:39:37:9B:D7:64:55:35
Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
Certificate issuer:       /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Certificate serial:       01A17694EAC585A055DDED761E34BCF598CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
Manifest number:          11C1
Signing time:             Mon 26 Oct 2026 05:00:33 +0000
Manifest this update:     Mon 26 Oct 2026 05:00:33 +0000
Manifest next update:     Tue 27 Oct 2026 05:00:33 +0000
Files and hashes:         1: MKIn2GKscAnSjEe-pKawSjFxEE4.roa (hash: 8pAAduPAownYKe2M33SgXEkvP4hCHBB83tGhPyeNyTU=)
                          2: SROyYa2_ee42pqOt-mh6fsZYIQs.crl (hash: u8svhRNOmXl2kg1w09xLJ5f8KoNHSJnyfpoesHZXY5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:94:ea:c5:85:a0:55:dd:ed:76:1e:34:bc:f5:98:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
        Validity
            Not Before: Oct 26 05:00:33 2026 GMT
            Not After : Oct 27 05:00:33 2026 GMT
        Subject: CN=c8f3334afddda7ef4fc05a093a39379bd7645535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3b:f1:21:d8:f5:87:84:3c:f8:d1:56:18:54:
                    f9:02:32:1f:20:2a:df:8f:38:2b:7f:a8:d0:08:8d:
                    b7:4c:23:1a:eb:15:50:bd:4b:80:94:b0:4f:e6:f8:
                    2d:e0:6e:f5:eb:4c:e2:9e:46:d4:3e:71:6a:6e:af:
                    f5:9f:57:46:87:1a:1e:12:7f:54:c6:98:3a:ba:83:
                    f6:5b:fe:c4:a1:e0:9c:98:79:5e:ce:17:af:24:50:
                    93:d3:dc:89:ce:a1:11:fe:21:54:87:21:d3:15:cf:
                    11:37:db:53:8b:5c:57:51:d1:24:12:c0:27:23:b0:
                    af:05:83:2a:ae:7d:86:d0:bf:a7:cb:41:c2:29:25:
                    bc:35:46:c5:81:2e:1b:86:13:72:18:70:4b:e5:c4:
                    05:d4:d0:db:20:bd:7b:88:c6:e7:05:99:f0:79:b2:
                    dc:b2:0c:b7:df:24:ab:c1:b4:ab:e0:cd:2e:cf:df:
                    61:e7:ff:c1:e6:8b:b5:75:b4:28:7b:9c:18:ec:c2:
                    d4:c9:e9:dc:96:9e:4b:c6:d2:0c:0a:c6:e7:d1:e5:
                    4d:d8:14:89:92:ff:b3:65:fb:87:38:1b:2d:66:bb:
                    9d:49:99:3e:fd:67:ef:3c:7b:d1:b5:6f:b1:0e:32:
                    b1:8c:50:79:96:dc:ac:e4:1e:fc:ca:18:c8:59:1d:
                    a1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F3:33:4A:FD:DD:A7:EF:4F:C0:5A:09:3A:39:37:9B:D7:64:55:35
            X509v3 Authority Key Identifier:
                keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f6:2c:5a:e4:64:d2:64:e9:fd:3d:54:c5:4e:e0:54:69:11:
         44:49:da:2e:68:a6:9a:65:ef:88:19:8f:41:ec:ec:1e:5e:2c:
         8a:a6:d5:96:37:1e:62:ef:74:0f:77:c7:3a:48:88:78:53:4d:
         9c:ce:5e:09:95:54:6f:3a:4c:69:df:be:d4:b2:3e:65:0d:5e:
         f8:17:2c:f9:d2:f5:c4:cd:e5:6b:60:42:2d:55:bf:99:7a:6c:
         2e:05:64:56:1a:d5:38:dc:7b:16:c0:dd:96:25:e2:79:5d:f6:
         7f:fd:a9:77:50:52:63:28:85:39:aa:07:da:db:b4:d4:96:bf:
         6c:8c:72:6a:47:bf:7d:07:1a:52:36:97:00:9b:89:96:e8:bc:
         17:e7:53:cd:9f:16:b6:08:97:95:09:7b:10:76:f0:cf:83:c6:
         56:e9:1d:ed:31:39:e1:d0:49:92:3a:b4:3b:03:2f:e8:be:9e:
         f8:63:1b:8f:74:1d:f2:23:08:f9:01:94:7b:68:2f:73:62:58:
         5d:6d:8d:3c:53:08:0e:d5:98:9e:ab:1f:54:50:13:62:65:fb:
         ed:87:a4:ad:06:03:11:01:26:96:95:ad:a8:b3:cc:29:99:65:
         01:83:cc:32:23:63:a8:26:84:f1:bb:1c:19:51:a6:0a:98:98:
         2f:63:d1:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF2lOrFhaBV3e12HjS89ZjMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MTNiMjYxYWRiZjc5ZWUzNmE2YTNhZGZhNjg3YTdlYzY1
ODIxMGIwHhcNMjYxMDI2MDUwMDMzWhcNMjYxMDI3MDUwMDMzWjAzMTEwLwYDVQQD
EyhjOGYzMzM0YWZkZGRhN2VmNGZjMDVhMDkzYTM5Mzc5YmQ3NjQ1NTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDvxIdj1h4Q8+NFWGFT5AjIfICrf
jzgrf6jQCI23TCMa6xVQvUuAlLBP5vgt4G7160zinkbUPnFqbq/1n1dGhxoeEn9U
xpg6uoP2W/7EoeCcmHlezhevJFCT09yJzqER/iFUhyHTFc8RN9tTi1xXUdEkEsAn
I7CvBYMqrn2G0L+ny0HCKSW8NUbFgS4bhhNyGHBL5cQF1NDbIL17iMbnBZnwebLc
sgy33ySrwbSr4M0uz99h5//B5ou1dbQoe5wY7MLUyenclp5LxtIMCsbn0eVN2BSJ
kv+zZfuHOBstZrudSZk+/WfvPHvRtW+xDjKxjFB5ltys5B78yhjIWR2h5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjzM0r93afvT8BaCTo5N5vXZFU1MB8GA1UdIwQY
MBaAFEkTsmGtv3nuNqajrfpoen7GWCELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84ODBjNDctZmE5Mi00ZWVmLWIyNzYt
YThhMGU1NWY1ZTMxLzEvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84ODBjNDctZmE5Mi00ZWVmLWIyNzYtYThhMGU1NWY1ZTMx
LzEvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/YsWuRk
0mTp/T1UxU7gVGkRREnaLmimmmXviBmPQezsHl4siqbVljceYu90D3fHOkiIeFNN
nM5eCZVUbzpMad++1LI+ZQ1e+Bcs+dL1xM3la2BCLVW/mXpsLgVkVhrVONx7FsDd
liXieV32f/2pd1BSYyiFOaoH2tu01Ja/bIxyake/fQcaUjaXAJuJlui8F+dTzZ8W
tgiXlQl7EHbwz4PGVukd7TE54dBJkjq0OwMv6L6e+GMbj3Qd8iMI+QGUe2gvc2JY
XW2NPFMIDtWYnqsfVFATYmX77YekrQYDEQEmlpWtqLPMKZllAYPMMiNjqCaE8bsc
GVGmCpiYL2PRdg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 14:21:01 2026 by rpki-client