Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
File:                     SROyYa2_ee42pqOt-mh6fsZYIQs.mft (raw, json)
Hash identifier:          DWVw1QfGbCY4clKWMzLEbfSWozrzCpPtgbZJDKkS7Uw=
Subject key identifier:   96:C0:88:26:A0:73:4F:BD:AC:2A:2A:00:D4:58:20:26:DD:DA:98:B7
Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
Certificate issuer:       /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Certificate serial:       019D3940F538C450E83ED80573D3D456011C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
Manifest number:          0F8F
Signing time:             Sun 29 Mar 2026 11:00:51 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:51 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:51 +0000
Files and hashes:         1: MKIn2GKscAnSjEe-pKawSjFxEE4.roa (hash: 8pAAduPAownYKe2M33SgXEkvP4hCHBB83tGhPyeNyTU=)
                          2: SROyYa2_ee42pqOt-mh6fsZYIQs.crl (hash: bdWSGw9vZpdQyAwQwBM7AFCJQLgDgAQJ1tI2OXJw/hg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:40:f5:38:c4:50:e8:3e:d8:05:73:d3:d4:56:01:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
        Validity
            Not Before: Mar 29 11:00:51 2026 GMT
            Not After : Mar 30 11:00:51 2026 GMT
        Subject: CN=96c08826a0734fbdac2a2a00d4582026ddda98b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f5:01:d4:3e:7f:7d:1e:dd:90:41:d7:3f:b2:
                    e9:b3:f8:34:8d:db:69:f0:3a:ab:08:61:49:61:81:
                    7c:97:13:1d:a6:aa:26:51:8b:93:0e:b3:0a:e4:17:
                    54:f2:f7:12:55:d9:cc:8c:0e:9c:a4:21:8c:ab:09:
                    89:6c:8a:d5:bf:81:f1:44:b8:f7:02:6b:97:51:5d:
                    b0:b6:67:e3:a2:f5:5b:93:5a:28:46:41:ef:5d:96:
                    eb:12:3a:40:c4:fd:5f:a3:10:ee:ac:9c:1e:dc:dc:
                    e7:e0:9f:81:68:a8:e6:ac:dc:17:b5:92:f1:39:69:
                    72:2b:b5:0b:8a:86:72:9f:91:4c:d2:5d:89:64:61:
                    68:fd:91:92:a6:c7:3d:04:3b:fb:30:76:3a:42:41:
                    74:73:9a:bc:d2:a1:f9:e2:02:08:ff:a7:ec:c5:7c:
                    41:9e:ca:5c:ad:aa:ad:d5:8b:43:3d:94:0f:a4:74:
                    57:7d:d1:65:e7:0f:41:83:17:6b:8e:da:59:aa:20:
                    64:1e:0f:9c:f1:2b:a2:6c:08:76:67:8c:28:e4:51:
                    9e:f0:6f:fd:c3:95:3e:71:d8:04:73:f7:ce:d0:c6:
                    d5:71:cd:68:76:68:98:11:47:c5:c1:f2:3b:47:fc:
                    34:7c:e2:b8:50:6f:26:82:38:bd:e0:25:cb:64:21:
                    c0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C0:88:26:A0:73:4F:BD:AC:2A:2A:00:D4:58:20:26:DD:DA:98:B7
            X509v3 Authority Key Identifier:
                keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:0d:0e:40:45:82:26:bc:6f:cb:c9:72:df:85:b8:b5:86:9c:
         6d:4f:84:11:b0:eb:3d:2a:aa:c3:08:c5:92:a8:dd:14:fd:2b:
         ac:e7:e9:05:13:78:f5:ee:c5:ad:86:45:98:46:af:bf:b3:b0:
         3b:f7:4d:5e:e1:4f:1c:e2:ca:ef:dc:cf:29:a3:86:10:51:2a:
         82:e5:7d:02:c4:e8:78:19:36:49:cf:68:a7:96:1a:1f:63:42:
         26:92:58:b1:37:4e:86:63:9d:1c:c0:c9:6e:56:56:fc:a2:88:
         2a:80:0e:cd:d5:54:60:87:79:71:51:01:e5:b8:c7:02:ac:8d:
         82:e5:3e:92:1f:12:ea:82:dc:7b:ef:1d:96:33:2f:3b:41:cb:
         f5:e5:7f:37:3e:e7:52:5b:43:d7:d5:b4:64:11:35:24:58:c0:
         66:62:fa:78:cf:9a:08:e1:77:3e:b7:42:3a:53:5c:7d:12:e9:
         ab:72:e1:e2:59:77:65:c9:86:ef:1d:a1:45:4c:76:3d:9e:55:
         b8:42:66:0e:ad:9c:5e:55:ed:42:b1:52:71:1d:b1:1d:33:2c:
         b4:44:48:2b:eb:fd:93:7e:82:5d:44:ad:95:f5:e6:9a:53:4d:
         9a:89:55:c6:a6:c8:2e:1d:8a:0d:2f:72:3a:fe:4a:78:47:4d:
         01:05:18:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:57 2026 by rpki-client