Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
File:                     SReefPYEiMPvW3cNIa6xR9pMfO4.mft (raw, json)
Hash identifier:          CoDccsLqItMPEGGWcaTOqR1RhFrKvOPiR52LQnsA77E=
Subject key identifier:   D1:E0:B4:B0:32:2D:5E:80:B8:F0:8D:52:E2:6E:E5:CD:EE:17:09:0F
Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE
Certificate issuer:       /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
Certificate serial:       01A08BD67E9507D259BB6102DC3D6FD362E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
Manifest number:          172E
Signing time:             Thu 10 Sep 2026 15:01:25 +0000
Manifest this update:     Thu 10 Sep 2026 15:01:25 +0000
Manifest next update:     Fri 11 Sep 2026 15:01:25 +0000
Files and hashes:         1: Ep5ktzb7jazkCqqKIA1eaooWA3A.roa (hash: V0HuBh1yvdXINaO+p6RF/CkRfffpWDmrMD6p3MKWJhs=)
                          2: SReefPYEiMPvW3cNIa6xR9pMfO4.crl (hash: 0K21Glojy+AH2Ya7RQ44IoG3AyOI0fcE7NryGElH2r8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d6:7e:95:07:d2:59:bb:61:02:dc:3d:6f:d3:62:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee
        Validity
            Not Before: Sep 10 15:01:25 2026 GMT
            Not After : Sep 11 15:01:25 2026 GMT
        Subject: CN=d1e0b4b0322d5e80b8f08d52e26ee5cdee17090f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:52:3d:d8:21:bc:e5:95:e5:e3:78:90:3c:f5:
                    9e:1f:2f:f8:c4:de:e3:45:81:f7:8a:4b:ca:10:84:
                    c4:9f:2e:ac:1f:28:10:92:47:25:58:a2:a4:fd:77:
                    1f:33:c0:16:c4:c7:ef:4a:14:93:8b:bc:8d:53:40:
                    5a:bf:3e:4a:0a:80:67:4c:07:09:d7:a6:6b:48:15:
                    1b:53:8d:4c:39:b2:3a:1f:f2:80:95:d1:13:36:38:
                    30:01:4e:6a:16:b2:bc:5f:7a:c6:69:63:69:9e:3e:
                    92:b9:82:1b:02:39:c4:bc:fb:4d:11:b4:4b:bb:91:
                    62:fc:1b:36:ca:43:8a:08:a2:32:60:89:f7:2f:f9:
                    09:a8:11:73:0c:44:78:09:9d:95:d6:2c:48:96:ab:
                    31:f1:e5:dc:71:84:31:74:eb:4a:d7:76:34:f5:35:
                    99:9e:d2:cb:89:ec:ee:38:3f:b2:d0:3e:f2:66:ff:
                    a4:9e:fd:78:23:2c:31:11:13:45:a8:9c:f7:6d:33:
                    e2:ed:27:19:b2:2d:44:5d:a9:74:9b:a6:08:c6:e7:
                    a7:fb:00:13:08:06:32:9c:b4:95:ee:72:7a:91:1a:
                    53:71:f2:a8:95:5d:86:7f:da:0b:6a:7e:87:a5:6b:
                    2b:80:6e:60:68:b7:cb:9a:f9:95:c2:19:d0:a9:6c:
                    52:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E0:B4:B0:32:2D:5E:80:B8:F0:8D:52:E2:6E:E5:CD:EE:17:09:0F
            X509v3 Authority Key Identifier:
                keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ca:cd:c3:d1:50:bd:0b:cb:e1:e8:17:d7:ed:7d:29:17:9a:
         30:0f:c0:8b:55:d5:02:aa:96:c1:e0:06:35:f0:49:85:48:bd:
         83:b6:ed:12:c4:5e:0b:61:f3:77:e1:e8:33:a0:99:b1:17:44:
         f5:64:ff:98:98:d5:08:76:df:39:6c:91:f6:db:2a:71:11:85:
         e0:d4:f0:4f:77:07:2a:e1:26:6f:66:fd:1e:3a:20:85:31:6e:
         0b:3b:16:c9:c3:6c:a3:b6:19:c7:88:fd:4d:18:bd:37:d0:32:
         e7:5a:d7:85:34:7d:82:92:93:c8:fd:f4:c8:23:c0:3c:b3:6d:
         41:b0:6a:a8:b0:5e:1e:d1:cc:b9:7c:82:66:c5:fe:37:a5:2a:
         97:3d:bf:57:24:71:bd:23:f4:16:2c:98:c7:06:90:a1:b0:f5:
         4d:cb:75:9e:11:15:3c:80:9b:31:51:80:c6:d1:0f:f9:e0:52:
         72:fb:b3:65:1e:8c:fa:90:a0:ce:75:4d:01:46:90:69:a4:00:
         3b:75:57:70:f2:0a:3b:d4:92:83:68:da:35:3d:56:d8:2c:96:
         42:b9:c6:5f:24:d7:ef:76:50:b8:fc:37:2a:de:29:8e:ed:da:
         37:4f:d6:19:01:36:1c:43:51:9c:f8:b4:4c:7c:94:f4:87:5e:
         39:0a:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:40:16 2026 by rpki-client