Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
File:                     sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json)
Hash identifier:          bk0s0x3qWrqn5kULGtHSOLcJufmKGQe9ISR0dUb0sDM=
Subject key identifier:   84:9D:B1:92:D6:CE:0B:B2:43:55:76:98:C7:73:F1:3E:3D:A6:B6:32
Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
Certificate issuer:       /CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Certificate serial:       01A174022A61CEA8624AA2C3B1B04773EE5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
Manifest number:          0E52
Signing time:             Sun 25 Oct 2026 17:01:01 +0000
Manifest this update:     Sun 25 Oct 2026 17:01:01 +0000
Manifest next update:     Mon 26 Oct 2026 17:01:01 +0000
Files and hashes:         1: _by7AscKsdigQ-BwL976HgZ5JQ8.roa (hash: wziiFvH1qv+pWQ/UztPiXiVxbkfYgEe33kjW55/pvyo=)
                          2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: kKctOgLpOVP+3bEvjxruH2dU0xhKheG79VG3JrfiS6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:02:2a:61:ce:a8:62:4a:a2:c3:b1:b0:47:73:ee:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857
        Validity
            Not Before: Oct 25 17:01:01 2026 GMT
            Not After : Oct 26 17:01:01 2026 GMT
        Subject: CN=849db192d6ce0bb243557698c773f13e3da6b632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:11:46:f3:52:39:5a:a6:36:a7:3c:bd:e0:a2:
                    40:da:7a:4d:8f:37:59:ed:54:06:2d:ae:15:2d:90:
                    d5:1d:a4:b3:86:8f:d5:32:1b:55:77:f3:a5:2d:5d:
                    6b:6b:73:ed:70:48:63:b8:4b:ff:c8:c6:b2:50:f8:
                    a9:cf:fc:6d:da:2c:84:5f:d7:e1:af:ab:b0:97:2d:
                    1a:7a:af:52:88:5d:e1:d2:d1:3b:7e:5f:4c:d6:e0:
                    2a:76:ef:1f:1a:4e:73:cd:22:0e:97:9e:8c:37:51:
                    e4:02:d3:90:ad:ee:05:4b:55:52:8d:46:6e:c1:89:
                    01:45:56:2d:5f:da:76:f3:11:97:90:86:59:d3:07:
                    50:87:8b:10:02:0f:ca:90:24:d6:8d:2d:c6:4d:97:
                    09:ec:a6:74:02:b2:a7:ba:39:06:14:10:9e:86:06:
                    41:32:f7:87:31:1a:5e:ba:c9:0c:b3:63:64:f6:2b:
                    07:01:4a:c0:15:7e:b8:99:89:15:9d:2c:3b:1c:88:
                    28:6f:6a:ea:fa:e5:da:be:95:2b:5c:09:a8:96:23:
                    10:59:f7:34:ee:04:e4:9c:19:92:1e:ec:ee:47:27:
                    86:ba:98:b5:b3:b8:f8:cb:ce:34:56:72:0d:e0:56:
                    d9:f6:d4:7f:41:01:a2:24:b7:e1:0e:ec:1a:28:3a:
                    52:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9D:B1:92:D6:CE:0B:B2:43:55:76:98:C7:73:F1:3E:3D:A6:B6:32
            X509v3 Authority Key Identifier:
                keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b2:37:7b:79:17:5d:23:5c:db:e6:fd:d0:bf:40:e9:32:ba:
         e9:76:38:33:ef:05:29:c3:78:bb:a6:94:2a:37:d9:e9:52:bf:
         29:04:3f:25:c9:8c:1a:3e:6f:af:13:1b:fc:f7:3c:e1:48:8b:
         69:ff:c0:37:20:50:ce:a8:6e:a3:d5:e5:b6:ee:d6:8f:db:9e:
         e3:fc:d7:69:f5:94:3a:c2:ee:47:07:f9:27:a4:72:81:a6:ec:
         b7:78:46:ed:d6:a5:bf:bd:92:5e:e7:48:a2:f2:04:ba:6c:37:
         9a:1c:27:9c:f2:43:83:89:13:cf:81:89:db:c2:4e:8e:b1:23:
         71:42:ef:d4:f8:87:34:ca:06:77:1e:14:df:76:8c:7b:1e:4a:
         be:ca:1a:f0:7b:55:df:be:d0:08:fa:c1:10:55:33:ea:b8:80:
         61:07:ed:a7:ef:cb:80:a2:87:33:5e:50:da:3b:8e:8f:0c:a8:
         1d:e6:74:5a:70:3c:40:b8:c5:5a:43:6d:de:36:18:93:85:cc:
         aa:25:ff:d8:b2:2b:c7:23:45:88:38:4b:93:5e:79:36:d1:34:
         1f:4c:2b:e4:39:20:58:9f:63:28:13:d9:23:fc:04:aa:b3:7e:
         0e:08:8e:6f:10:57:89:d9:8a:0b:5a:10:8c:6b:d8:7f:51:e8:
         73:e8:1c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:21:06 2026 by rpki-client