Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
File:                     SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json)
Hash identifier:          sF4j2F+z0iKpDGx6rUIhK9XsZsQermVGEGSyIf/3PBo=
Subject key identifier:   55:76:59:93:10:9F:1F:9E:34:5F:89:77:07:9F:B9:A1:AE:E6:77:27
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Certificate issuer:       /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial:       01A17D0571CBD889A44F2AF31E9AE0BB1073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
Manifest number:          18C4
Signing time:             Tue 27 Oct 2026 11:01:11 +0000
Manifest this update:     Tue 27 Oct 2026 11:01:11 +0000
Manifest next update:     Wed 28 Oct 2026 11:01:11 +0000
Files and hashes:         1: 32houEZJjYMHYgPuRqIg-2gVrRU.roa (hash: SgYOhNo4HZLgeATCDQYMmqSzEM1MXHyJPN6hUBC7MIM=)
                          2: JnkLx50ImRIwe6DLwjoBPmLJiIM.roa (hash: ZgcI3W3bS8GffqjlQ449bvcUFmbTNqw4WdF2nIUN8ao=)
                          3: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: GZl/l71jw1K6jCpGlCQklgqnIcWQoeXBm7Xu6Ai1H1A=)
                          4: TSB5mTZZzRTTPnt6-Y8o-3CQEPA.roa (hash: PsDTk/dMLVROLGkVcO0KwNjR8rb+3K2JtemVORHSo8Y=)
                          5: Vzeyp2a_2ybj2YU-0i2OoZlnwnI.roa (hash: OMd6zbL5MprZ3M6eB+ZY4S4Gxx6gPSlVJAESUBQW+L4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:05:71:cb:d8:89:a4:4f:2a:f3:1e:9a:e0:bb:10:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
        Validity
            Not Before: Oct 27 11:01:11 2026 GMT
            Not After : Oct 28 11:01:11 2026 GMT
        Subject: CN=55765993109f1f9e345f8977079fb9a1aee67727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:77:a8:d0:25:ec:32:da:de:bf:23:8e:94:d8:
                    f9:62:b7:df:e2:06:4e:c4:48:08:75:30:d3:80:c8:
                    09:af:b1:e5:6d:a5:65:de:ee:6f:c9:2d:0c:43:74:
                    1b:53:63:3d:f2:b8:d2:a2:6f:ce:23:14:00:cd:cd:
                    fc:ce:1b:72:54:84:52:a0:28:0e:aa:65:dd:ef:ca:
                    52:5a:9e:2a:da:8e:84:f0:02:39:3e:a1:6e:45:b9:
                    83:e8:94:a6:48:be:a5:9d:87:73:65:28:48:35:be:
                    a0:39:f2:f0:7e:d2:66:3d:49:81:db:9b:2c:66:f0:
                    c1:36:70:c7:91:e7:ff:38:59:40:a6:e9:6e:cc:9b:
                    22:68:40:2c:c1:b4:8c:7e:ac:dc:e4:e2:23:12:86:
                    cf:4c:22:5a:7e:80:10:b8:c9:2d:2c:3d:c2:53:ed:
                    e4:6f:6d:68:d7:22:d1:68:ed:a2:f4:7c:36:18:69:
                    dc:d7:94:b0:6f:31:00:83:a7:c0:81:32:2b:32:f3:
                    55:de:53:1d:ee:b2:d6:d0:6b:28:84:44:9b:0f:23:
                    c2:ba:40:af:b8:68:02:fe:94:d7:39:1c:c7:f1:f8:
                    6e:72:78:af:90:8a:61:46:53:b5:38:a4:fa:d9:56:
                    8e:1a:13:cc:73:2b:31:44:ab:6e:da:77:17:9c:c9:
                    c3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:76:59:93:10:9F:1F:9E:34:5F:89:77:07:9F:B9:A1:AE:E6:77:27
            X509v3 Authority Key Identifier:
                keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:09:97:41:0a:11:b8:c5:2e:4f:bf:65:d3:86:14:4f:79:27:
         c6:9d:c8:f3:9c:59:d2:07:7d:87:e5:41:e0:28:07:2b:19:7e:
         20:ab:63:b7:6f:e5:13:32:1d:11:69:08:c4:33:43:5b:32:25:
         a5:ae:2b:46:88:6f:a3:7d:68:d0:fe:e6:08:8e:66:d5:c7:59:
         01:e3:38:de:6a:47:e5:5b:74:83:75:ab:9d:94:be:3d:5b:0f:
         78:a5:c9:b3:e6:11:f6:7a:29:e0:75:03:14:60:20:1d:43:d2:
         6b:a8:3e:ac:d1:8a:52:f9:6b:a7:82:e0:97:c9:d5:06:d9:c7:
         08:43:76:09:ad:5f:7b:fa:c1:72:17:4b:1a:f0:8a:5f:b7:79:
         d6:e3:53:8f:9f:70:c4:ec:8c:b5:bd:9a:4d:28:f1:72:c9:8c:
         e7:99:75:d6:4c:06:f2:ee:4b:b4:93:74:de:bb:d8:c5:0a:8e:
         33:dc:1f:48:0d:aa:ac:b8:96:d8:80:d1:2a:78:a7:89:58:12:
         f8:5a:2e:e0:f3:69:07:d3:c9:57:92:6e:f4:37:24:5f:78:82:
         d6:9b:b2:c4:48:84:3a:de:9b:a2:51:3e:ec:e8:4a:e6:32:b4:
         30:d8:1b:6f:3b:1e:79:16:fa:54:95:44:2f:62:4c:d9:47:7d:
         6c:8a:4c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:38:07 2026 by rpki-client