Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
File:                     Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft (raw, json)
Hash identifier:          xvVWEQ9TjmBUoblcEhidFWiziUXXAox7DtvbL3jNvDI=
Subject key identifier:   CB:52:0A:41:D6:EC:7A:AE:14:CA:D6:DF:98:EA:6B:B4:CD:02:0C:09
Authority key identifier: 49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
Certificate issuer:       /CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Certificate serial:       01A17C29596A0ADACF195B1A294FDEC28054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
Manifest number:          0140
Signing time:             Tue 27 Oct 2026 07:00:46 +0000
Manifest this update:     Tue 27 Oct 2026 07:00:46 +0000
Manifest next update:     Wed 28 Oct 2026 07:00:46 +0000
Files and hashes:         1: 0lHNHAB1dSCHu8NfJvUD7DHgsFc.roa (hash: 722KSNZHtYdxDwgLoCah7ZpT1vkIwON9vi+ms0lvuNE=)
                          2: 4Dt7Mn1lHQkg5yii2IEpcWGwkhI.roa (hash: kHQ2nl9ekG4m6X2gKv/CM3Og7S1UQ5gzllovoXGKw5M=)
                          3: IIzVxtmDhdZdhpAbkL-ndC6CsU4.roa (hash: CQ228xdqWMGw11CGwR9Uzvgy1Q7ztTnBAHC18ATjAq4=)
                          4: NzEbjZMTTNc2f7hUh_DfDiEmK50.roa (hash: LA2UVOwQLl1GFakMw+qYipgL+jCj7BhKjZLnryCHmW0=)
                          5: Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl (hash: 5rNQGZsTrPYcq6Q71K9N4xEJXAsNNNFRXxnr5uqjyxA=)
                          6: SwlwWC6qeIOhSte4Utz7PdUgqHg.roa (hash: yli4qoeWd8be0mGTI1Qdhmlvgjg03i5HcPN89QNf6ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:29:59:6a:0a:da:cf:19:5b:1a:29:4f:de:c2:80:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
        Validity
            Not Before: Oct 27 07:00:46 2026 GMT
            Not After : Oct 28 07:00:46 2026 GMT
        Subject: CN=cb520a41d6ec7aae14cad6df98ea6bb4cd020c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:31:ea:0b:d6:60:6d:b1:e9:d3:01:2f:24:65:
                    12:11:29:3f:6f:8c:60:dc:33:7d:22:fd:f8:77:2a:
                    07:2d:61:2b:2e:48:b2:7d:f3:3f:cb:c6:10:04:55:
                    ce:02:f5:e8:24:22:51:08:7d:79:48:9e:73:43:e5:
                    74:2e:b4:dd:96:4f:ca:dd:62:6f:43:b6:2a:2c:68:
                    b8:92:bb:5e:c3:27:7b:c6:80:e3:8b:c1:40:a7:29:
                    ff:df:81:7b:37:6b:40:dd:af:7c:86:33:65:4d:96:
                    f6:73:34:1a:ba:ac:12:ab:6c:52:d5:25:dc:76:37:
                    d9:57:65:23:4d:cc:da:8d:db:2d:d9:d2:bd:ec:f9:
                    a9:18:06:49:c5:64:d2:a0:82:f8:89:c1:60:ce:23:
                    ab:d9:5d:9e:d9:84:70:66:86:3b:b7:4a:0c:6d:35:
                    13:93:c9:9c:82:c9:1d:18:9e:1a:55:12:48:b3:0d:
                    7e:b9:34:3f:3e:a9:f0:df:bb:f7:8d:2a:6a:f9:6c:
                    66:df:c0:a5:20:7c:94:a0:c5:60:43:4f:a7:af:36:
                    3c:a4:8a:44:9f:50:59:c1:0c:f5:11:a7:4c:b5:97:
                    90:b7:23:6b:3f:1f:d9:63:60:7c:31:f3:02:69:89:
                    2e:b8:40:8e:d2:88:56:ff:2e:4b:5d:12:85:fa:bc:
                    e6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:52:0A:41:D6:EC:7A:AE:14:CA:D6:DF:98:EA:6B:B4:CD:02:0C:09
            X509v3 Authority Key Identifier:
                keyid:49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:9a:04:04:b5:6e:0b:f5:51:42:20:85:36:5d:ed:a1:59:50:
         60:73:43:ef:94:89:fd:e6:f6:cc:54:50:ee:8a:54:6a:8d:8b:
         c7:ad:b8:05:e6:d5:a4:4e:8d:2d:15:db:33:04:c7:a4:eb:fc:
         52:21:92:6b:49:54:52:b2:32:48:f1:0a:1c:69:ce:37:d8:cd:
         57:bd:1d:bd:0d:ca:bb:ec:30:4b:80:9e:f9:1f:12:e3:be:46:
         c3:2e:8e:83:45:cd:b6:67:a5:23:ea:52:54:80:2a:30:25:30:
         54:11:b7:34:33:5f:db:49:c9:5a:b9:fd:06:7e:83:cb:b2:a9:
         dc:13:f7:62:0a:ea:f2:37:3e:07:d4:91:98:da:4e:75:44:53:
         8f:b5:cf:18:37:c9:69:62:20:45:19:a4:34:ed:15:5a:d7:81:
         30:ee:e4:be:c0:49:61:9f:7e:11:8e:c0:43:86:fa:bd:50:b5:
         d4:9f:c3:64:13:2b:89:16:f2:94:64:c7:3a:3a:f2:b1:ee:d8:
         50:a8:b5:42:73:5c:1c:63:4f:dd:d8:42:fc:37:16:10:64:2f:
         b7:3f:ba:84:a5:22:90:20:7e:1a:e1:10:ac:23:92:06:8f:58:
         59:59:29:16:65:4f:51:24:d4:f6:67:26:5a:24:ae:21:a3:a7:
         7a:41:52:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:40:57 2026 by rpki-client