Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
File:                     YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json)
Hash identifier:          K6bxhDN5qKHY5L57tZb5pIRRviD9IRKHkmA5gpqR/d0=
Subject key identifier:   79:AA:85:FC:A5:59:66:F0:9E:23:1A:37:24:F1:4A:75:4F:AF:FC:E3
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Certificate issuer:       /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial:       01A106CA32277D6CF1266A47677683A96CE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
Manifest number:          1B02
Signing time:             Sun 04 Oct 2026 12:01:16 +0000
Manifest this update:     Sun 04 Oct 2026 12:01:16 +0000
Manifest next update:     Mon 05 Oct 2026 12:01:16 +0000
Files and hashes:         1: 6Kp8Q7FDy8zVl6KS7XGPmtjTZrI.roa (hash: LSjD6nMfWSQxNszQ+KYKSl3MtwhSLODWVrEJPytMoHE=)
                          2: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: 4aHiPzgT8SA3iQ6zZ/zLYiOwrLQFRLMVoYeBv8ILhKw=)
                          3: dBSDP6Gc4F0vUJietrVIlYi8x5w.roa (hash: 4uu2kwh2x9bYdXpys7yyeAfZRrt8ENd/az4lWpFmo5I=)
                          4: fRx6ZblhgUmoW4nsXZOeWFDGQN8.roa (hash: 5XgSJtsEhxAPMe27NNznGafb5NwSgPc5MwYm0JOVzkE=)
                          5: lFA8TCmOsUwcRT-IH5-xMnLIn9g.roa (hash: rLmZAKicjwEflAKkEb3bhMZ1sp7aW6UtUzE6SYNtwFo=)
                          6: pCNJAJU2R_Ey7VRPw_hxPf5bZjE.roa (hash: KbIRipx6ZRLe6wuu8/y9hOVzulQ9nb+SwsRwZvvvJjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 12:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:ca:32:27:7d:6c:f1:26:6a:47:67:76:83:a9:6c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
        Validity
            Not Before: Oct  4 12:01:16 2026 GMT
            Not After : Oct  5 12:01:16 2026 GMT
        Subject: CN=79aa85fca55966f09e231a3724f14a754faffce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:1e:7d:1f:1a:75:a5:6d:7b:c4:49:79:5d:
                    6c:7c:ed:2b:91:69:b5:c8:20:c2:b4:b7:e4:d7:87:
                    b9:ba:90:d7:ab:f4:21:94:4c:9a:2b:9b:00:a3:61:
                    98:6c:99:64:25:45:2e:de:d4:84:ae:f5:0d:7c:0b:
                    7d:f5:1f:5a:47:85:7b:63:bd:44:b7:3e:db:41:00:
                    8b:f5:11:31:26:e1:68:05:05:18:d9:bb:fd:cf:41:
                    0b:9c:9d:e6:6b:00:d5:0a:b2:ad:70:16:35:07:05:
                    cd:f4:ef:15:fd:9e:8e:38:1f:c6:ca:92:73:ab:a2:
                    ed:e0:ba:a8:11:31:b2:b7:89:e8:3e:32:7d:c9:64:
                    8c:ce:57:4a:62:24:32:9a:5f:78:38:25:46:c8:4e:
                    55:07:cd:8b:51:03:d1:73:65:ad:98:9b:89:f1:89:
                    f8:6a:a7:33:6b:ba:fa:bb:00:61:cd:2b:c2:1c:fd:
                    80:98:0a:a8:84:25:88:81:d3:3a:b7:64:36:59:74:
                    c1:63:e5:5f:8b:a5:18:c5:c7:35:be:17:e7:ba:fd:
                    24:fd:6b:c3:8d:7c:99:34:a3:8b:4a:37:bb:26:0e:
                    7a:22:c5:01:b4:b2:10:58:de:2e:71:f4:a4:80:94:
                    18:75:30:7b:42:0f:e6:4a:56:9c:61:27:bc:50:9a:
                    26:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AA:85:FC:A5:59:66:F0:9E:23:1A:37:24:F1:4A:75:4F:AF:FC:E3
            X509v3 Authority Key Identifier:
                keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:60:98:31:8d:51:92:e0:85:01:94:78:63:54:5a:50:c1:53:
         f5:2f:f5:5b:10:70:54:04:4c:df:a2:f6:99:c6:55:06:45:b1:
         52:be:6d:e6:98:30:97:86:01:99:ce:92:b4:ff:53:73:2d:30:
         4c:14:c4:47:f9:ee:cd:54:0e:f4:77:db:e9:cb:ef:21:c4:35:
         20:e3:12:36:f3:b2:62:f5:f0:98:8d:2e:8f:72:ca:b0:be:f9:
         36:3c:dd:8a:dc:ee:dc:23:33:da:a2:56:ba:57:eb:88:3d:00:
         ab:4f:06:37:1b:e4:a2:96:ba:d8:b2:72:67:15:84:37:9e:f7:
         61:84:15:ae:77:25:5a:a9:44:e0:df:5f:4a:31:46:91:8c:92:
         36:b9:29:aa:02:9a:de:45:f4:b9:1e:2e:cc:74:94:16:d4:62:
         33:5f:c0:5b:78:df:fb:35:98:6e:17:6d:c6:5b:31:60:9f:21:
         a6:78:83:48:e0:36:9a:b7:31:c4:0d:c9:1c:be:fe:54:94:dd:
         1e:a9:cb:28:11:97:bd:6f:91:f7:b5:3f:df:bd:de:49:53:71:
         4d:f1:7b:ba:0e:81:8b:53:e3:41:a9:8b:8e:2d:ac:f7:96:7c:
         8e:f2:f8:67:c1:6c:76:16:a1:5c:a8:19:41:95:46:45:19:af:
         68:67:3e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:48:53 2026 by rpki-client