Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
File:                     SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft (raw, json)
Hash identifier:          txyevd05murpjUCLsl02ez8pGaYOcJ8HW2aUpMPUEGw=
Subject key identifier:   55:10:05:AD:FB:89:70:F1:52:AD:2F:33:F3:D8:F7:48:34:29:76:76
Authority key identifier: 48:E6:B2:5B:F9:89:FC:37:04:BD:8E:84:E0:D5:D9:D6:8D:02:B4:EB
Certificate issuer:       /CN=48e6b25bf989fc3704bd8e84e0d5d9d68d02b4eb
Certificate serial:       01A08C7B87AAA87AA8FCD6BD2ADC9AA4D963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
Manifest number:          C2
Signing time:             Thu 10 Sep 2026 18:01:40 +0000
Manifest this update:     Thu 10 Sep 2026 18:01:40 +0000
Manifest next update:     Fri 11 Sep 2026 18:01:40 +0000
Files and hashes:         1: NA4KUnaZ-7quWuidYkuLJ9qLJL8.roa (hash: WMFv5tO73TosL+xYHmLzwInHMA669D5/mO5dF7Lq1sg=)
                          2: SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl (hash: xoK58PeoEgqMwzdyG8UwlVj4Rfx+BkZ/QpAmF95zWMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 18:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7b:87:aa:a8:7a:a8:fc:d6:bd:2a:dc:9a:a4:d9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48e6b25bf989fc3704bd8e84e0d5d9d68d02b4eb
        Validity
            Not Before: Sep 10 18:01:40 2026 GMT
            Not After : Sep 11 18:01:40 2026 GMT
        Subject: CN=551005adfb8970f152ad2f33f3d8f74834297676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:94:52:c6:33:57:fc:2f:89:1e:7c:d9:f0:df:
                    2f:58:80:49:dc:25:41:53:b8:11:34:e0:30:27:1c:
                    5a:06:8d:49:03:38:7d:91:c5:83:b0:08:0b:f5:ed:
                    21:7d:85:b7:82:09:c0:17:cb:b1:67:e9:2b:c2:a7:
                    af:ba:9f:17:c1:a7:9e:e5:6e:b1:b6:09:57:86:79:
                    aa:00:ec:ec:1c:c0:be:24:c4:93:38:53:72:a8:7c:
                    b1:ae:79:a3:48:41:f4:47:e7:36:be:80:b9:ef:2d:
                    c4:30:6f:bf:fc:69:8d:65:9f:96:18:66:ce:6d:c4:
                    06:78:c4:3c:12:5a:bf:c2:b6:71:0f:e1:b3:42:e9:
                    08:79:fd:96:29:96:f8:4f:00:ef:59:a3:1b:e7:ec:
                    0b:e4:db:f6:18:78:89:15:90:4f:9a:4f:86:6f:ed:
                    27:ed:17:f4:42:29:84:e6:6e:3b:f7:79:d2:aa:66:
                    2a:2b:5b:fa:b8:48:25:e3:ff:f0:b7:5c:3e:10:5f:
                    19:ea:7a:a0:d3:20:fd:0a:b5:9a:b3:71:21:c7:a6:
                    eb:c3:56:d5:a6:b0:21:6e:df:1e:a2:93:8e:b7:79:
                    99:04:c6:cf:96:0f:66:26:2f:6b:6b:c7:6d:09:e2:
                    9c:1a:8e:c8:c1:0e:c1:0a:20:a9:b1:08:04:9d:0c:
                    c4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:10:05:AD:FB:89:70:F1:52:AD:2F:33:F3:D8:F7:48:34:29:76:76
            X509v3 Authority Key Identifier:
                keyid:48:E6:B2:5B:F9:89:FC:37:04:BD:8E:84:E0:D5:D9:D6:8D:02:B4:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/SOayW_mJ_DcEvY6E4NXZ1o0CtOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e6:33:fe:60:4c:8f:09:65:39:e8:e1:6d:d4:30:7c:b0:f6:
         cb:52:d5:15:33:e0:26:51:e0:61:e0:b3:60:62:3b:f7:3f:40:
         67:ed:1d:01:6f:b5:55:80:41:dd:62:c9:15:de:c7:c5:10:08:
         37:12:20:e7:36:2d:86:a5:f8:86:51:8e:7e:8e:91:23:ab:3a:
         ec:7c:46:68:13:bc:c5:f5:d1:45:67:34:5a:6d:29:51:86:b1:
         93:19:0a:c9:10:ec:16:59:67:f9:e9:ac:d8:ee:5f:2e:1f:6d:
         b5:e2:31:cc:cf:f0:20:c0:25:c9:98:e6:be:67:82:af:53:87:
         5a:68:59:aa:94:3b:da:c0:24:6d:b9:95:74:00:de:2c:bd:93:
         a4:9b:ff:0c:35:c0:15:74:fa:6b:5c:22:6b:34:71:7c:24:e8:
         e6:f5:c2:79:e9:8a:55:7a:ac:04:e3:63:62:74:ab:3e:e2:ab:
         15:c3:ac:4c:65:56:b9:4e:54:2a:0a:69:6f:d0:ee:ea:b7:a8:
         49:50:6c:d0:33:c0:9c:2e:a7:f2:ea:bb:e6:92:9f:29:45:1f:
         4e:c3:bf:23:85:fe:7c:1f:fc:26:f0:23:c3:2e:da:eb:aa:e6:
         c3:48:fb:62:01:32:f6:2b:ca:fe:19:fa:ae:20:c2:93:74:21:
         21:52:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:49:27 2026 by rpki-client