Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
File:                     sVKsjTaZEe8sE_k_mZumY8GOETM.mft (raw, json)
Hash identifier:          xKQegvK78mtscC4tmJRkRoY/6LCmF2VXrdZ1vb2q1PE=
Subject key identifier:   D4:E7:10:50:86:82:7D:CA:BF:24:3F:03:7E:29:6C:8B:2E:88:FF:BC
Authority key identifier: B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33
Certificate issuer:       /CN=b152ac8d369911ef2c13f93f999ba663c18e1133
Certificate serial:       01A178BA42D62E9849C0F4956B88C5F6FF15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
Manifest number:          15CB
Signing time:             Mon 26 Oct 2026 15:00:35 +0000
Manifest this update:     Mon 26 Oct 2026 15:00:35 +0000
Manifest next update:     Tue 27 Oct 2026 15:00:35 +0000
Files and hashes:         1: 0j-b0UIU9NNEJkpR1VPx73yU19g.roa (hash: TOuY3lYHB29I1rwod7JPPIhHmcaY8Z8/HbPhccan9Nw=)
                          2: sVKsjTaZEe8sE_k_mZumY8GOETM.crl (hash: oNSlavumcrnncc/LzA5U/rUu+pNhLFPKkduVnAFZbHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:ba:42:d6:2e:98:49:c0:f4:95:6b:88:c5:f6:ff:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b152ac8d369911ef2c13f93f999ba663c18e1133
        Validity
            Not Before: Oct 26 15:00:35 2026 GMT
            Not After : Oct 27 15:00:35 2026 GMT
        Subject: CN=d4e7105086827dcabf243f037e296c8b2e88ffbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:3f:ed:8d:b3:36:0d:2a:78:9c:8b:78:a7:
                    59:18:9b:bd:17:a7:cc:21:08:3e:94:bb:b6:a1:56:
                    83:a8:4d:bf:d5:26:35:74:12:10:13:c7:a0:86:72:
                    f8:3f:3a:fd:98:42:db:48:10:da:41:95:ad:c1:ae:
                    2d:71:4a:1a:2d:5b:40:a6:9d:77:a5:36:88:44:ba:
                    d5:a9:c1:b6:04:44:f3:8d:0c:0c:e0:0d:ec:d8:5c:
                    60:c7:e5:59:af:be:a3:cd:e5:69:b4:54:af:21:ad:
                    04:f6:a6:00:92:2b:af:91:e8:19:0c:00:a7:fc:fb:
                    61:c1:0f:21:ea:02:22:9d:81:2e:0e:9d:ee:3e:09:
                    80:21:37:77:38:a1:50:07:33:3f:68:6e:b6:b0:4d:
                    26:47:ce:ff:a8:3f:0a:f5:74:93:b0:85:c5:6f:67:
                    62:36:55:c5:ce:33:2e:0d:e3:ed:6a:12:0e:b7:01:
                    9f:41:43:da:77:b1:7c:03:9e:3b:77:f7:40:50:54:
                    a9:5e:b4:f9:8b:e1:1c:ec:bd:af:7d:91:d5:eb:9f:
                    55:7c:e8:17:ba:80:12:64:75:db:55:5d:56:b7:fa:
                    0e:ab:6f:9a:1e:8f:26:be:a1:aa:84:3a:ff:81:72:
                    3a:44:04:15:f1:bb:04:1e:16:48:2a:97:1e:98:11:
                    3a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E7:10:50:86:82:7D:CA:BF:24:3F:03:7E:29:6C:8B:2E:88:FF:BC
            X509v3 Authority Key Identifier:
                keyid:B1:52:AC:8D:36:99:11:EF:2C:13:F9:3F:99:9B:A6:63:C1:8E:11:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVKsjTaZEe8sE_k_mZumY8GOETM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7544b6-e0a9-4df8-9db5-e934dbf93631/1/sVKsjTaZEe8sE_k_mZumY8GOETM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ae:9f:48:fc:22:52:20:59:4c:10:0f:2d:90:ca:85:ea:02:
         da:4c:55:d7:5e:7d:06:4a:52:be:23:6d:1d:3a:12:0f:be:49:
         09:0e:c7:40:00:96:b3:60:44:3b:f9:d5:1e:f1:be:bb:0d:07:
         fa:10:29:3d:1e:60:32:12:8f:81:75:85:9c:2c:27:cf:68:8e:
         57:ef:27:22:3d:96:41:31:cc:10:7d:cd:92:99:90:b4:e9:0a:
         b7:59:f7:c8:05:fc:b0:30:99:fa:53:87:90:0f:67:ee:17:00:
         af:f3:cb:17:c1:f9:00:f4:87:d1:5c:0c:46:a1:c4:0e:a2:36:
         b7:ef:d9:9f:f0:35:04:63:ee:59:da:56:96:8b:b7:f3:fc:af:
         67:5a:f2:2d:a0:8b:53:da:52:8a:73:58:bb:9e:ea:a5:be:e4:
         b0:39:2a:d4:fb:bd:81:90:59:a4:c9:f1:69:3d:b7:d7:b2:49:
         04:ae:55:f5:7b:7e:3f:8c:32:d5:04:ef:b2:75:c4:29:c0:17:
         f9:da:b4:a8:9c:b2:a7:b5:ab:3f:1c:85:2c:d7:36:68:ea:77:
         81:d9:f1:aa:0d:20:81:46:c1:db:57:fb:8d:7e:4b:9d:99:3e:
         b9:f8:d9:10:d2:cb:63:12:91:bf:30:b9:31:b5:4d:7d:0c:13:
         42:0b:1c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:55:17 2026 by rpki-client