Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
File:                     Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft (raw, json)
Hash identifier:          /WNS3nJwTI+xGxz+vD1TkGFDiAtg7vx9iBG06vMQtAs=
Subject key identifier:   ED:84:75:B8:3F:35:A6:14:2D:27:BD:C5:B1:D3:7F:62:50:80:38:17
Authority key identifier: 62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0
Certificate issuer:       /CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
Certificate serial:       01A11AF4D1A00E33FE9C9D893425CC33C9E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
Manifest number:          1A90
Signing time:             Thu 08 Oct 2026 10:00:14 +0000
Manifest this update:     Thu 08 Oct 2026 10:00:14 +0000
Manifest next update:     Fri 09 Oct 2026 10:00:14 +0000
Files and hashes:         1: 2gO3AZ0wf5H55So82hrCWwWbVuI.roa (hash: U66k5TcWQ7PD9bBki0lUlKhjoZI0ZIMVHk6yyW5wKeQ=)
                          2: Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl (hash: AUnNCraWOhwxgUAB0FDrWvrBBabWMjfGBl4bV8d6Lzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:f4:d1:a0:0e:33:fe:9c:9d:89:34:25:cc:33:c9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d6e4bffa2b4d1bc40e92b30af0d21a74b0bbd0
        Validity
            Not Before: Oct  8 10:00:14 2026 GMT
            Not After : Oct  9 10:00:14 2026 GMT
        Subject: CN=ed8475b83f35a6142d27bdc5b1d37f6250803817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d1:c3:be:9f:a0:dc:e4:87:3d:e4:46:6f:c2:
                    e9:80:9c:ca:96:48:5c:e4:64:21:dd:2c:a6:07:16:
                    0a:98:38:15:72:01:75:74:19:85:24:14:40:67:ef:
                    ae:86:84:d8:5e:54:33:d2:94:1a:32:04:6d:58:e9:
                    63:54:66:15:f8:16:5b:b6:d1:bd:e6:ce:b8:3e:e0:
                    c9:e8:7b:1d:3d:1b:f6:dc:a8:85:d3:ac:e1:6b:4f:
                    fe:60:ec:47:13:5b:9c:cb:e7:d2:d9:0b:60:db:0a:
                    e3:4c:5c:08:1d:e7:8b:ee:4c:c9:1a:08:55:1c:fb:
                    0d:c0:f8:ab:21:fa:7a:93:25:0f:45:c3:12:6a:e8:
                    15:23:81:c9:e4:ac:35:2f:cb:7d:2c:13:ef:f3:d5:
                    92:0f:f7:57:00:13:71:78:cc:a8:de:f5:0b:28:80:
                    b0:1f:1e:fe:30:90:11:e3:c6:44:30:9c:41:1a:31:
                    b5:55:4b:df:3c:7f:33:e9:1f:0a:ba:3e:2d:01:fd:
                    ba:59:b6:61:91:6c:da:32:56:d0:a0:5e:ff:c0:18:
                    2e:e1:35:a9:04:0e:34:20:19:55:1d:78:00:3d:95:
                    8a:98:c9:34:73:20:fa:d7:46:23:04:7f:93:34:09:
                    94:56:e8:02:3d:fa:96:4e:f9:b8:0f:72:b0:80:3c:
                    bf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:84:75:B8:3F:35:A6:14:2D:27:BD:C5:B1:D3:7F:62:50:80:38:17
            X509v3 Authority Key Identifier:
                keyid:62:D6:E4:BF:FA:2B:4D:1B:C4:0E:92:B3:0A:F0:D2:1A:74:B0:BB:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytbkv_orTRvEDpKzCvDSGnSwu9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/876750-a230-4f26-b442-f15554fa4b0b/1/Ytbkv_orTRvEDpKzCvDSGnSwu9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:19:4a:f6:24:77:89:f4:51:ea:1f:7b:97:03:ce:51:7b:f1:
         3e:57:44:19:a0:48:7b:e9:dd:e8:d6:5d:62:5d:60:f6:11:3b:
         cd:06:e7:20:c9:05:52:1a:3d:54:61:dc:f2:b3:34:47:f6:88:
         07:83:67:85:59:e7:52:60:a0:17:c9:03:21:2e:ed:3a:94:85:
         b7:dd:0a:e6:37:25:cd:a0:1d:c7:00:30:fb:ea:c1:8b:3e:9b:
         d8:91:5b:ba:8e:f9:91:25:29:47:82:8d:ad:c9:cf:d7:e8:c9:
         70:10:a3:5f:93:22:e3:84:50:ba:89:4d:84:a4:69:c0:35:1c:
         e6:ef:75:b4:60:c1:7b:6e:9f:0d:8b:90:4b:42:f4:f4:f9:c1:
         7b:cd:12:f7:f3:54:32:8a:f3:79:be:c4:ff:78:af:75:5a:90:
         a9:26:de:33:23:a3:a9:93:95:22:d1:27:f3:41:c2:49:56:32:
         89:c0:6d:c8:03:5d:2d:d1:5f:0e:0b:06:b1:67:3b:ea:6e:8c:
         81:db:33:18:e6:84:9b:0f:07:fb:11:ba:62:e3:f3:99:18:4e:
         a8:82:03:fd:ec:07:a7:3c:0f:a0:37:d1:a9:39:4f:6f:c2:6e:
         70:3c:d4:b5:80:4e:40:8a:0f:8f:9a:ab:bf:bd:78:fd:a0:c1:
         ca:e7:5c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:44:33 2026 by rpki-client