Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
File:                     SdhmPTuWngJTom1UJb7hxdRDs2E.mft (raw, json)
Hash identifier:          KvX7lEZTQEAxaCnCOJnclBkHpvFfUHldqbReq3gfoGY=
Subject key identifier:   43:13:C0:4F:E2:BB:9C:25:EB:EB:3E:11:12:52:78:17:D6:70:44:73
Authority key identifier: 49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61
Certificate issuer:       /CN=49d8663d3b969e0253a26d5425bee1c5d443b361
Certificate serial:       01A168A294EC4101430AA068EFB91D51951F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
Manifest number:          0C19
Signing time:             Fri 23 Oct 2026 12:00:47 +0000
Manifest this update:     Fri 23 Oct 2026 12:00:47 +0000
Manifest next update:     Sat 24 Oct 2026 12:00:47 +0000
Files and hashes:         1: SdhmPTuWngJTom1UJb7hxdRDs2E.crl (hash: CnCE9a3dqo/khZZfEJYUjvHWd6YycBEklXk8BzXofPE=)
                          2: ss_i7POqldkDP31KMdlVrzarBdE.roa (hash: WvsAUlRR+NRLn32GVVcoWQROpDNnn7tmpssNx6BwiVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 11:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:68:a2:94:ec:41:01:43:0a:a0:68:ef:b9:1d:51:95:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d8663d3b969e0253a26d5425bee1c5d443b361
        Validity
            Not Before: Oct 23 12:00:47 2026 GMT
            Not After : Oct 24 12:00:47 2026 GMT
        Subject: CN=4313c04fe2bb9c25ebeb3e1112527817d6704473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:23:b6:15:f6:c1:d6:d0:e6:58:5c:e3:8b:22:
                    82:40:ca:bb:a6:6c:9b:a1:47:fd:f9:27:90:8e:f2:
                    08:0b:71:cb:11:22:8e:77:2c:d8:25:c1:a5:05:48:
                    02:2a:3c:ac:61:c7:47:cb:d1:18:85:1f:db:be:2f:
                    96:dc:f3:13:50:da:96:1d:76:20:87:26:92:44:3c:
                    0b:5c:54:55:8c:7b:17:dd:2f:b9:86:a4:f5:0d:2b:
                    c8:58:a4:15:fa:64:d5:7e:3e:04:67:c9:81:be:1d:
                    2a:ae:87:0e:05:03:d1:5f:4d:cc:3f:ff:ba:ee:e6:
                    9c:dc:c1:27:09:06:04:83:c2:78:a8:7b:d4:bf:8e:
                    8a:d1:23:73:aa:67:da:40:2a:03:d7:80:c2:37:13:
                    3e:34:d6:55:d0:85:93:ee:6e:d0:7d:61:1e:5c:3c:
                    32:a1:78:6e:b0:11:d8:21:89:e6:44:56:96:22:5a:
                    0f:f4:77:5f:ad:fc:36:2e:ac:80:26:74:81:4b:c6:
                    bb:fe:3c:14:18:31:d2:f4:69:e2:e6:d9:60:a0:26:
                    95:1c:6e:99:dd:c3:93:02:5b:af:53:27:56:98:1f:
                    0d:fa:11:90:d1:2c:68:0d:d7:86:a4:fc:2f:e6:77:
                    66:ff:0a:57:54:9a:91:23:a9:c7:a2:0f:e3:a1:9c:
                    ca:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:13:C0:4F:E2:BB:9C:25:EB:EB:3E:11:12:52:78:17:D6:70:44:73
            X509v3 Authority Key Identifier:
                keyid:49:D8:66:3D:3B:96:9E:02:53:A2:6D:54:25:BE:E1:C5:D4:43:B3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdhmPTuWngJTom1UJb7hxdRDs2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a5d00d-6266-46ea-bc8c-4182bedb98a1/1/SdhmPTuWngJTom1UJb7hxdRDs2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:76:e7:ff:1f:ff:03:be:83:a2:c8:c0:58:7d:7d:75:73:4e:
         32:a8:c7:71:00:09:b2:7b:f7:08:60:80:1b:3c:da:ca:f0:a9:
         c1:0d:f8:f2:ce:b9:b2:a9:f3:b0:4b:f9:fc:27:24:68:76:a0:
         ea:9f:a7:3c:17:51:48:14:5c:ee:88:64:08:79:aa:78:af:b5:
         68:a0:a4:4f:76:fa:bc:25:bc:60:b5:c8:30:7f:ea:7d:ce:d9:
         d1:86:38:90:bb:73:dc:93:0b:58:29:bc:bf:9f:bf:b4:07:0a:
         51:95:c9:d3:5b:41:e2:d1:55:ac:64:bb:19:21:74:03:d0:a7:
         b0:a8:7a:2e:51:12:d0:1f:af:2e:8a:67:e3:21:ef:7b:7e:f6:
         06:24:4b:91:0d:08:81:62:81:c7:1c:5c:0a:03:63:47:ff:b7:
         4d:e7:81:54:ea:3d:ca:a7:e1:6b:9b:f2:94:d1:ba:e2:90:5b:
         c7:ea:67:2e:df:93:87:45:c8:93:bf:94:3f:da:ab:81:98:5c:
         ae:db:06:ae:60:d6:5c:eb:84:c6:4c:24:82:24:a4:22:36:6c:
         78:11:80:dc:24:fb:64:e1:12:71:2e:0c:2b:d6:a6:2f:4a:fa:
         da:53:29:dc:7d:d7:2b:7f:19:99:c4:d0:7a:3b:fc:6e:ec:2b:
         5d:00:29:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFoopTsQQFDCqBo77kdUZUfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZDg2NjNkM2I5NjllMDI1M2EyNmQ1NDI1YmVlMWM1ZDQ0
M2IzNjEwHhcNMjYxMDIzMTIwMDQ3WhcNMjYxMDI0MTIwMDQ3WjAzMTEwLwYDVQQD
Eyg0MzEzYzA0ZmUyYmI5YzI1ZWJlYjNlMTExMjUyNzgxN2Q2NzA0NDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiO2FfbB1tDmWFzjiyKCQMq7pmyb
oUf9+SeQjvIIC3HLESKOdyzYJcGlBUgCKjysYcdHy9EYhR/bvi+W3PMTUNqWHXYg
hyaSRDwLXFRVjHsX3S+5hqT1DSvIWKQV+mTVfj4EZ8mBvh0qrocOBQPRX03MP/+6
7uac3MEnCQYEg8J4qHvUv46K0SNzqmfaQCoD14DCNxM+NNZV0IWT7m7QfWEeXDwy
oXhusBHYIYnmRFaWIloP9Hdfrfw2LqyAJnSBS8a7/jwUGDHS9Gni5tlgoCaVHG6Z
3cOTAluvUydWmB8N+hGQ0SxoDdeGpPwv5ndm/wpXVJqRI6nHog/joZzKWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMTwE/iu5wl6+s+ERJSeBfWcERzMB8GA1UdIwQY
MBaAFEnYZj07lp4CU6JtVCW+4cXUQ7NhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2RobVBUdVduZ0pUb20xVUpiN2h4ZFJEczJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNWQwMGQtNjI2Ni00NmVhLWJjOGMt
NDE4MmJlZGI5OGExLzEvU2RobVBUdVduZ0pUb20xVUpiN2h4ZFJEczJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9hNWQwMGQtNjI2Ni00NmVhLWJjOGMtNDE4MmJlZGI5OGEx
LzEvU2RobVBUdVduZ0pUb20xVUpiN2h4ZFJEczJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXbn/x//
A76DosjAWH19dXNOMqjHcQAJsnv3CGCAGzzayvCpwQ348s65sqnzsEv5/CckaHag
6p+nPBdRSBRc7ohkCHmqeK+1aKCkT3b6vCW8YLXIMH/qfc7Z0YY4kLtz3JMLWCm8
v5+/tAcKUZXJ01tB4tFVrGS7GSF0A9CnsKh6LlES0B+vLopn4yHve372BiRLkQ0I
gWKBxxxcCgNjR/+3TeeBVOo9yqfha5vylNG64pBbx+pnLt+Th0XIk7+UP9qrgZhc
rtsGrmDWXOuExkwkgiSkIjZseBGA3CT7ZOEScS4MK9amL0r62lMp3H3XK38ZmcTQ
ejv8buwrXQApjA==
-----END CERTIFICATE-----
Generated at Fri Oct 23 15:35:37 2026 by rpki-client