Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
File:                     ygBGolNBzREDtgzOC5nqN1S6XEE.mft (raw, json)
Hash identifier:          EhUkJabSJ74AdeVu8ttOpEDomdeo+J4eiFyhvYvsquQ=
Subject key identifier:   F1:94:09:0B:7B:1E:97:A7:72:C1:68:74:2C:43:EC:DF:4B:12:6B:1A
Authority key identifier: CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41
Certificate issuer:       /CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
Certificate serial:       01A0EB8A53F06201EB4DC724495FF6FC4916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
Manifest number:          0773
Signing time:             Tue 29 Sep 2026 05:01:46 +0000
Manifest this update:     Tue 29 Sep 2026 05:01:46 +0000
Manifest next update:     Wed 30 Sep 2026 05:01:46 +0000
Files and hashes:         1: stNqzIw6qQRyW22hrj_jya1vgPM.roa (hash: R7iZW3oZGdaZLmvsasGhYvRkXeTvpYwH54Of8otwpTw=)
                          2: ygBGolNBzREDtgzOC5nqN1S6XEE.crl (hash: /aUzRHg2BjniqO+U4PnS6VnVkRS2yf8tvhrsfCnNvuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 05:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:8a:53:f0:62:01:eb:4d:c7:24:49:5f:f6:fc:49:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca0046a25341cd1103b60cce0b99ea3754ba5c41
        Validity
            Not Before: Sep 29 05:01:46 2026 GMT
            Not After : Sep 30 05:01:46 2026 GMT
        Subject: CN=f194090b7b1e97a772c168742c43ecdf4b126b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:2d:0a:1b:88:ba:cf:f0:d4:4b:3d:25:c0:
                    1a:7f:6a:ab:8d:93:f9:0f:4d:5b:a6:bb:3d:46:51:
                    05:64:cc:0c:ca:b4:d9:d3:f0:79:1d:41:9c:34:6f:
                    6a:e9:c1:ac:57:50:ec:6f:b1:94:6f:3c:13:74:d3:
                    01:7c:e1:30:3a:7f:cc:9f:c6:95:2f:b0:c8:b3:94:
                    31:69:a0:66:e8:b9:56:22:8d:a2:6e:99:60:f2:d8:
                    ef:2a:4a:cf:26:f7:53:5d:cf:26:ff:a5:27:bf:7e:
                    cc:31:69:b1:da:3e:75:2b:49:52:43:8a:95:8e:c6:
                    45:ad:60:4e:95:3a:e9:d0:cf:79:cd:3b:f9:04:3c:
                    3b:42:d1:35:e0:76:c0:08:1d:d6:76:7c:b2:ab:10:
                    83:fc:be:62:01:f3:98:5c:05:b6:79:e2:86:60:96:
                    2d:4b:a2:69:28:06:f6:b3:72:02:55:93:16:cb:c3:
                    fd:47:84:5f:a6:0e:e8:4a:6b:cc:02:cc:79:d0:ef:
                    32:18:31:74:73:97:18:5c:30:c5:91:92:fe:df:8b:
                    70:10:7e:37:7e:d1:73:f9:26:c3:e4:38:07:2d:06:
                    7f:6e:24:53:f9:cf:c0:19:af:3a:88:42:b3:41:83:
                    d0:4c:70:25:68:8e:f3:39:af:80:b2:46:79:fa:50:
                    53:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:94:09:0B:7B:1E:97:A7:72:C1:68:74:2C:43:EC:DF:4B:12:6B:1A
            X509v3 Authority Key Identifier:
                keyid:CA:00:46:A2:53:41:CD:11:03:B6:0C:CE:0B:99:EA:37:54:BA:5C:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygBGolNBzREDtgzOC5nqN1S6XEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36bd40-4a48-4c04-9710-5e763d3a4d1d/1/ygBGolNBzREDtgzOC5nqN1S6XEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5e:0c:91:43:7b:cb:21:4f:cb:a5:d8:ce:80:6c:2f:2b:1e:
         e8:ab:3f:ae:32:d5:d0:dd:da:a1:5b:8a:e6:21:84:3f:ed:47:
         87:de:3e:83:dc:59:48:08:1d:50:56:f1:86:5d:a0:95:d4:5f:
         bb:83:ca:80:19:d6:6d:75:8d:a2:6f:58:c5:6b:06:a6:25:b9:
         19:88:ea:ea:55:e3:c4:da:1a:2f:fd:37:35:ef:db:43:2b:8a:
         dc:0b:7f:32:f8:76:2a:6c:e1:09:26:fa:72:cf:d6:20:b4:43:
         1c:e4:45:be:b6:5a:65:c1:fa:03:7c:ec:44:76:0c:8a:c0:b4:
         2a:ef:da:f4:90:64:fc:be:03:e5:b1:7c:55:09:75:e9:b8:59:
         03:88:fb:a9:07:fd:d9:aa:be:80:e6:d8:c0:a6:ef:2d:2c:ed:
         e2:d9:7e:18:9b:06:fe:db:61:7d:c5:93:57:f1:c2:36:9e:b4:
         81:67:83:65:e5:a5:07:52:ec:fe:80:45:29:b4:46:01:2d:4d:
         52:db:33:1f:10:3e:28:9b:97:20:65:3b:04:10:ce:4e:e1:4e:
         3a:96:90:76:40:c7:d5:6e:02:59:86:f1:be:96:9d:c6:d7:79:
         ac:31:e5:91:43:c4:07:df:e8:31:c0:bb:70:98:03:74:49:1b:
         5a:9f:16:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:31:51 2026 by rpki-client