Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
File:                     SJwmPoGEhs_YMcJF3frMqR-9gcA.mft (raw, json)
Hash identifier:          QmYHtymXxGN35GqYixJ91H4d5Y2MlbNyRUDscAS6XZc=
Subject key identifier:   C3:4F:91:87:16:4B:CA:B1:82:45:2E:48:8D:B3:0C:52:BF:87:A9:E0
Authority key identifier: 48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0
Certificate issuer:       /CN=489c263e818486cfd831c245ddfacca91fbd81c0
Certificate serial:       01A14BAB2DE13EFF011F5E507C25A5237D8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
Manifest number:          0730
Signing time:             Sat 17 Oct 2026 21:01:11 +0000
Manifest this update:     Sat 17 Oct 2026 21:01:11 +0000
Manifest next update:     Sun 18 Oct 2026 21:01:11 +0000
Files and hashes:         1: 5JcOQzq7WzmjMFbG4IJGxYNeKgo.roa (hash: gSdvGPuX99g6e3AjEkD3xzqC8m6WCx9LmxK0VDXFz5E=)
                          2: QsLpU8hJ4ATxawddQAfsVH71Yrc.roa (hash: 8LAE+r4LCdI7plc1J5/y/lKsTqyUBWlK/iV7nFAj/Ks=)
                          3: SJwmPoGEhs_YMcJF3frMqR-9gcA.crl (hash: 9E+tHEeCZAZ/fFUgJOTAYKpBP4lKfYRDTQik3qFGpsE=)
                          4: tjcd2B2MoHez1-FLdOBN_2wuTBg.roa (hash: nHwqBLL+1vMmNTrdugL+2uUX5fBDVoNX8Hv9HhSFUYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 21:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4b:ab:2d:e1:3e:ff:01:1f:5e:50:7c:25:a5:23:7d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=489c263e818486cfd831c245ddfacca91fbd81c0
        Validity
            Not Before: Oct 17 21:01:11 2026 GMT
            Not After : Oct 18 21:01:11 2026 GMT
        Subject: CN=c34f9187164bcab182452e488db30c52bf87a9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:22:d8:1b:fa:b2:76:5f:a0:b2:94:08:ba:de:
                    ff:2d:29:3b:c9:91:6d:e7:4c:a6:d1:90:29:5b:bc:
                    99:61:26:c7:fa:d5:d8:fa:6f:21:75:7c:07:33:11:
                    47:52:d3:96:e1:96:08:71:65:bd:4b:fe:84:5a:85:
                    32:af:4b:a1:01:20:a5:4b:40:d2:11:76:78:5c:60:
                    3d:b3:ef:8e:e9:ce:9a:c1:97:91:fe:8d:2f:24:4b:
                    63:bf:67:bc:fa:b9:4a:88:a7:5f:13:fa:4b:dd:ad:
                    fc:0f:ea:58:b1:a2:5c:ca:a3:ff:03:ca:7b:85:f1:
                    b8:37:96:eb:66:6d:2a:a3:70:5a:2d:a3:10:7f:99:
                    64:12:d0:ac:e6:f4:6c:85:6e:bb:5f:d2:c5:c6:1c:
                    18:2a:7e:f5:34:fd:fd:75:11:d3:2b:e9:cc:60:8e:
                    c4:8e:86:b9:05:5a:7e:b8:ac:78:0a:fa:f1:89:9a:
                    46:aa:82:94:32:4c:17:ec:37:8a:c2:b3:6b:56:9e:
                    00:47:31:55:86:6b:d4:e4:45:4f:a4:f0:37:a1:3a:
                    3c:4d:c8:a4:cb:f5:db:63:6b:5f:af:63:41:16:23:
                    87:03:12:89:d3:08:40:d0:ae:34:42:96:9a:be:ad:
                    5f:cd:e1:90:9d:da:5b:14:59:f7:68:fe:80:62:bf:
                    1a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4F:91:87:16:4B:CA:B1:82:45:2E:48:8D:B3:0C:52:BF:87:A9:E0
            X509v3 Authority Key Identifier:
                keyid:48:9C:26:3E:81:84:86:CF:D8:31:C2:45:DD:FA:CC:A9:1F:BD:81:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJwmPoGEhs_YMcJF3frMqR-9gcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/117fc9-7a62-4682-bfbc-2ca3aa71ec5f/1/SJwmPoGEhs_YMcJF3frMqR-9gcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:91:76:8b:a2:9c:1d:9b:76:7c:10:2f:97:93:11:05:22:1f:
         68:05:41:a9:b8:79:08:44:ee:99:92:d1:1c:ac:1a:07:55:91:
         e2:5e:b7:7e:3f:ff:cd:42:6d:90:5f:43:8d:3a:19:75:41:a8:
         bd:61:fe:57:39:69:ff:a4:5b:94:f4:96:b9:96:b1:60:ee:e3:
         3c:d6:0c:86:2a:ba:80:a6:31:81:c4:7f:5a:f9:72:67:fa:0e:
         51:85:e3:a7:ad:c0:52:11:7c:b2:51:02:f7:4e:97:58:b6:99:
         37:22:4c:1b:8a:9e:2a:17:33:99:e2:9d:ee:10:8a:e5:1e:d5:
         a9:73:a7:3c:c9:0e:2d:45:d2:2f:e3:85:cb:e0:fa:79:4f:81:
         8c:50:b1:97:73:f9:91:b1:1c:c1:48:99:3a:08:04:db:49:c4:
         16:39:2b:45:a6:f5:1a:c2:26:a3:91:13:61:cb:eb:dc:c2:79:
         75:28:58:72:2a:86:ab:b9:77:b1:3e:16:a7:30:92:6b:32:fc:
         f3:1b:5c:b7:29:22:21:77:6f:ac:ea:48:59:aa:ba:01:72:55:
         a3:1d:3f:a6:c6:45:ef:1e:42:2a:ed:4b:5d:8b:77:cc:e4:19:
         1a:00:49:cd:0d:7f:9b:22:10:9e:46:ed:18:0b:15:64:2f:be:
         e7:6d:1c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:10:54 2026 by rpki-client