Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
File:                     SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft (raw, json)
Hash identifier:          RKNlUVAGu7bAt9OmjEGbH197309NwSJqXNsKqLg5O8g=
Subject key identifier:   D4:BC:5A:7F:33:94:32:54:62:3F:D8:0F:07:C4:1B:91:32:78:46:4C
Authority key identifier: 49:1B:7A:D0:4E:EF:0B:31:3E:6D:2E:22:6B:92:EA:F2:77:AE:F8:5B
Certificate issuer:       /CN=491b7ad04eef0b313e6d2e226b92eaf277aef85b
Certificate serial:       01A104005C575DB623017070D17C6A3B8359
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
Manifest number:          0160
Signing time:             Sat 03 Oct 2026 23:01:34 +0000
Manifest this update:     Sat 03 Oct 2026 23:01:34 +0000
Manifest next update:     Sun 04 Oct 2026 23:01:34 +0000
Files and hashes:         1: SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl (hash: bBZKtcbxpwoNovlrAs1g1CPvgh71nlVThvKprGTok4w=)
                          2: gBi5xtmED4TG3jUX37mYjraoscw.asa (hash: apBbLvMbeJiiPpO51fdXIrt4IofHYn/vGC5rF3XziIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:00:5c:57:5d:b6:23:01:70:70:d1:7c:6a:3b:83:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491b7ad04eef0b313e6d2e226b92eaf277aef85b
        Validity
            Not Before: Oct  3 23:01:34 2026 GMT
            Not After : Oct  4 23:01:34 2026 GMT
        Subject: CN=d4bc5a7f33943254623fd80f07c41b913278464c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:4d:1a:2a:32:c7:3e:ed:99:79:ea:4b:ae:
                    89:db:d7:52:8b:3b:22:ad:e0:02:2d:f9:bb:f0:1c:
                    8d:51:45:27:e0:2b:8f:46:61:c6:70:d4:4d:84:ae:
                    35:58:09:f3:3b:69:8d:dd:e5:64:b4:b7:61:56:dd:
                    49:f2:89:e8:90:f6:ef:24:78:aa:64:be:b2:0d:9a:
                    8e:08:da:5a:c0:64:16:ff:9c:1f:3f:b1:d4:9b:32:
                    99:1b:19:16:64:29:11:62:88:ee:50:39:85:41:5c:
                    8c:12:31:84:04:6d:96:b0:ea:60:be:a7:e7:70:e1:
                    72:dd:b0:1a:3f:04:5e:0e:33:07:8d:4a:a6:75:40:
                    dd:d5:8d:df:e5:42:d4:73:58:55:d4:ea:d5:ea:72:
                    7c:3a:a4:b0:a1:4a:ec:05:cb:af:e7:9a:2c:e2:b2:
                    b4:d4:25:b0:4a:e9:2e:75:e0:8d:3d:46:8f:cf:24:
                    4d:cb:43:2b:3c:f9:a7:aa:e8:3f:a0:4c:fd:ed:c2:
                    fc:5f:ed:df:4c:52:48:60:ae:30:55:1f:35:6a:5a:
                    b8:21:6c:96:92:6f:7e:73:00:9a:b3:89:c5:9a:38:
                    36:82:e7:33:7b:72:a2:ee:3e:9e:04:dc:be:eb:3b:
                    20:31:10:ac:72:a9:c3:54:2c:d1:36:f2:43:35:45:
                    96:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BC:5A:7F:33:94:32:54:62:3F:D8:0F:07:C4:1B:91:32:78:46:4C
            X509v3 Authority Key Identifier:
                keyid:49:1B:7A:D0:4E:EF:0B:31:3E:6D:2E:22:6B:92:EA:F2:77:AE:F8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRt60E7vCzE-bS4ia5Lq8neu-Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9befa4-093c-4a6d-93ed-3223435280f2/1/SRt60E7vCzE-bS4ia5Lq8neu-Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:58:fb:c3:68:4d:6d:38:68:ca:da:fc:d5:2c:5e:65:8e:62:
         ca:0d:5b:05:fd:39:63:4c:c1:b6:4f:3f:e7:ba:00:d8:45:01:
         6a:c6:8c:b1:5a:43:6a:11:95:5c:78:d2:b0:3e:90:ad:7c:fb:
         d9:d5:a7:de:7e:08:d5:05:9b:72:e5:d8:91:41:a7:4f:99:73:
         3d:6e:99:a5:cd:49:f2:6e:25:10:44:85:27:be:fb:a5:9d:a1:
         45:3d:36:73:d1:33:70:56:59:52:9d:51:f4:06:6f:61:e0:0f:
         5f:28:ba:85:46:b2:b5:cd:b8:00:ab:f0:cd:be:ab:69:92:8e:
         af:89:98:9c:0d:d8:95:84:6f:49:bb:ac:8f:13:9f:f0:20:2d:
         7c:3a:22:f2:ab:d4:87:55:74:c5:0a:97:26:a4:fc:67:bb:9c:
         ed:b9:3a:99:07:ea:93:25:10:d3:60:78:21:b9:3e:87:98:52:
         b1:91:08:2b:b6:c0:9d:c9:69:c6:73:d6:56:36:cb:40:0e:00:
         1e:7d:dd:0d:9a:03:68:03:c9:d6:56:c0:54:53:ff:41:6d:c4:
         db:73:4c:cb:15:b9:a1:85:28:63:be:9e:25:86:8e:4b:af:40:
         90:3c:5f:85:6c:6d:ce:47:14:4b:93:73:1b:71:6f:2a:6a:78:
         0a:2f:d7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:18:51 2026 by rpki-client