Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
File:                     saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json)
Hash identifier:          2U+tzXNo7nhjd1e5JsH1KGoq08v2dUy0mvfWvPjovxg=
Subject key identifier:   EA:A1:16:80:3C:E6:F4:CD:F7:88:60:90:96:01:E7:BD:0B:82:12:16
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Certificate issuer:       /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial:       01A0890C5EF49E8C229C928B49920EEC97B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
Manifest number:          12B5
Signing time:             Thu 10 Sep 2026 02:01:24 +0000
Manifest this update:     Thu 10 Sep 2026 02:01:24 +0000
Manifest next update:     Fri 11 Sep 2026 02:01:24 +0000
Files and hashes:         1: H4TlFSW9YaEptj2rG_zdsa63qRU.roa (hash: kkvqIvLa9fbZkZn/+ru+xDu0mvZ+FojOrOmiey6ddzc=)
                          2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: CPlfEdMBj+AgJP07OaSAY5lQoBMyQTCKDf8fYWXGjaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 02:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:0c:5e:f4:9e:8c:22:9c:92:8b:49:92:0e:ec:97:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
        Validity
            Not Before: Sep 10 02:01:24 2026 GMT
            Not After : Sep 11 02:01:24 2026 GMT
        Subject: CN=eaa116803ce6f4cdf78860909601e7bd0b821216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1c:1a:11:dc:b7:30:a5:78:6d:37:bf:43:49:
                    87:47:d1:7a:d2:c1:2b:05:b5:99:30:c2:7a:fc:9b:
                    f1:d0:57:47:43:96:65:b2:61:b5:e6:33:c0:39:64:
                    b2:99:d8:a2:1d:d8:0d:6a:78:22:fb:90:71:3a:f8:
                    19:75:aa:3d:95:56:91:41:b5:ab:c5:44:de:a2:49:
                    c6:27:fb:05:ab:30:1d:ff:52:21:7c:1d:67:ad:d7:
                    f8:e3:bc:10:e7:d1:e9:e2:24:55:31:f5:0a:f1:7a:
                    22:b2:1c:d2:1a:70:f2:bd:79:53:22:13:39:ff:c7:
                    37:66:3a:a8:55:f0:6a:b7:81:53:bc:5c:f2:98:98:
                    00:4a:23:8a:77:5c:43:79:86:2b:57:9f:de:69:27:
                    5a:04:1a:58:60:5e:ff:ef:07:0a:1f:7d:0f:09:2e:
                    f1:c9:b8:13:74:67:a7:6e:56:68:b7:2e:f5:c3:ea:
                    e1:5d:ff:f8:32:fc:d9:07:1a:4f:2f:48:e8:64:12:
                    71:b2:32:35:67:2c:25:09:13:87:5e:68:78:a7:bb:
                    70:b1:fe:77:85:76:35:72:01:2f:43:8c:da:4f:14:
                    dd:2b:7a:2a:23:a4:ea:d0:da:84:70:0a:fd:3c:db:
                    91:8f:23:c2:80:ac:29:f8:4e:ff:5a:7e:79:3a:e0:
                    ad:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A1:16:80:3C:E6:F4:CD:F7:88:60:90:96:01:E7:BD:0B:82:12:16
            X509v3 Authority Key Identifier:
                keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:0d:6a:2c:c6:9c:16:1e:b8:4b:61:b9:a9:92:80:bb:c8:ee:
         c6:c8:51:da:11:24:4d:d6:1a:c7:09:f6:9b:95:e3:bd:44:65:
         93:89:42:e7:27:95:f3:6b:14:da:57:cb:12:63:21:e8:ec:b4:
         de:b5:fd:b2:bf:ec:39:5d:32:d7:81:14:4a:1a:df:3f:42:8c:
         c5:70:71:6d:30:8e:ac:08:71:cf:36:c2:a0:21:13:73:82:17:
         49:a8:b2:24:c0:fd:80:83:ef:d1:51:97:a4:8c:db:f0:76:a5:
         ff:06:81:7b:9e:dc:81:7e:b4:ce:ac:b9:e0:30:96:03:14:f2:
         43:dc:37:b4:fd:f9:b8:64:98:59:d4:39:89:e3:0f:4c:59:0f:
         ad:25:f1:fa:8b:d4:e7:d8:29:0d:d4:6b:d6:a4:c0:92:7c:c2:
         46:0f:e3:af:29:7a:08:be:a6:63:d4:a7:a0:42:aa:04:d4:fb:
         8d:c1:85:ae:81:97:41:c8:e7:88:82:eb:ea:91:f5:ec:45:5e:
         60:83:33:e9:ee:75:97:ce:0a:b5:eb:7f:a0:2c:cc:00:60:1a:
         45:14:56:d6:74:48:75:0f:50:0e:df:84:38:6a:d2:4d:9a:07:
         e3:6d:9f:c3:5c:45:b2:81:b7:5a:5a:77:40:da:9d:ab:4e:7d:
         cb:b3:fd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:52:17 2026 by rpki-client