Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
File:                     SBaZwQuP-LkauQlAMU7pOyev3NY.mft (raw, json)
Hash identifier:          wgKTKq1ZssHrwYBcXwByrRYcGtN+ifmxVXoutQrbBEY=
Subject key identifier:   6C:29:CD:A3:5D:95:0B:C5:ED:3D:87:FE:A2:70:23:D2:0E:74:70:AE
Authority key identifier: 48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
Certificate issuer:       /CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Certificate serial:       01A180AB219E99FF9B42461F7849F04787D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
Manifest number:          110B
Signing time:             Wed 28 Oct 2026 04:01:01 +0000
Manifest this update:     Wed 28 Oct 2026 04:01:01 +0000
Manifest next update:     Thu 29 Oct 2026 04:01:01 +0000
Files and hashes:         1: N9xSU22seEj4Gls_lmMkrISNt44.roa (hash: 1sZ9jU2yxOzi9JbZQ0lqxHMOKu1AeSCdlUhQs7k0urM=)
                          2: SBaZwQuP-LkauQlAMU7pOyev3NY.crl (hash: 889pp66SPipUO/7yuegQxHZJx9lr8DAIaX8VrhDg7cg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:80:ab:21:9e:99:ff:9b:42:46:1f:78:49:f0:47:87:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
        Validity
            Not Before: Oct 28 04:01:01 2026 GMT
            Not After : Oct 29 04:01:01 2026 GMT
        Subject: CN=6c29cda35d950bc5ed3d87fea27023d20e7470ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2e:6a:d4:7e:20:e8:6e:3c:b4:ce:4b:52:b5:
                    b5:8f:fa:98:9e:43:0f:20:2a:91:dd:4d:fb:81:47:
                    1e:2f:b4:0b:60:21:19:39:ee:7e:27:24:9a:01:0d:
                    29:3f:15:ec:48:5b:2a:1c:27:e1:b6:c9:6b:b5:b6:
                    4f:f6:5c:57:4d:70:16:aa:6d:6a:f3:ab:c9:5a:63:
                    3e:ec:c0:d0:d6:7e:38:eb:7c:ef:e1:cd:4f:a1:c3:
                    c5:cf:98:5b:28:69:c7:fb:b5:66:98:85:d4:20:64:
                    6a:ee:91:94:1b:56:62:47:88:ee:a0:57:8b:fc:ca:
                    95:19:21:a8:85:a9:55:d4:15:1f:28:24:65:57:e2:
                    fe:b9:5b:bf:28:22:e4:a9:07:55:1c:13:3f:6a:c3:
                    ea:ac:2c:2a:c4:0e:5b:50:4e:7b:ab:d7:06:26:7e:
                    ff:d4:40:a5:10:e1:9c:24:d8:dc:04:b4:8c:95:c5:
                    05:20:cd:1c:c7:b8:53:61:bb:3e:37:05:bf:86:1d:
                    57:7a:18:51:97:a9:6f:23:bc:5b:b3:77:ef:64:0c:
                    81:49:8f:2e:ca:72:43:c8:f9:f5:17:4a:b4:e2:77:
                    dd:a6:04:49:c7:0f:23:d2:b9:41:98:2d:2b:92:05:
                    52:51:ac:89:d3:60:b5:cc:d4:2f:2a:69:9c:2a:d7:
                    e2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:29:CD:A3:5D:95:0B:C5:ED:3D:87:FE:A2:70:23:D2:0E:74:70:AE
            X509v3 Authority Key Identifier:
                keyid:48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:5f:23:0a:05:f5:b3:29:82:45:0e:70:ea:7e:ce:67:79:33:
         57:e6:e5:79:5d:c0:c8:ba:0e:a0:c7:85:55:af:0e:ee:9b:70:
         99:5c:c3:ae:ef:51:fa:88:e9:c3:72:08:15:7d:47:b4:66:0c:
         09:c3:52:47:7d:40:d1:91:7d:95:a1:d7:6c:85:b6:32:90:83:
         26:ad:64:9a:08:68:a2:c4:fd:27:dd:53:df:44:e8:f9:b9:9b:
         fe:ef:46:2e:7d:d5:80:fe:71:ba:6d:2e:0e:d4:51:e9:2f:fd:
         ab:29:87:f4:8f:3f:0d:39:9d:27:90:6c:d7:6e:3f:e6:16:42:
         b2:14:52:f5:51:35:ea:7b:8e:e8:96:0b:c9:7e:79:32:05:0a:
         1b:f8:35:9a:5b:fa:f1:74:42:a7:ca:c8:05:9f:0f:a5:c9:96:
         69:8d:e0:9b:eb:ee:3d:f4:55:7d:71:14:02:2c:fe:15:f8:31:
         8c:92:a5:91:5e:93:84:1e:0b:00:01:7c:59:2f:9b:48:be:94:
         8a:8a:47:ad:d7:8a:e8:05:dc:ba:21:b0:23:17:05:6d:8f:2e:
         0d:0c:59:20:2c:16:a3:35:50:5a:49:63:a8:5b:d6:05:1c:13:
         4e:e7:e5:15:cc:82:7a:cd:db:51:47:ee:8a:7a:6c:c2:63:3e:
         aa:a4:3f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:38:06 2026 by rpki-client