Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.mft
File:                     YzGUhnMC7ZcHf8E_K62PwcI83Y4.mft (raw, json)
Hash identifier:          7Ab+fbhSrZi4jMog3kYqNmvfUYCih2ltzYtrBQjZ6pg=
Subject key identifier:   DE:B2:E2:E8:6E:18:EE:99:D5:26:2C:2C:FD:C9:BD:7A:F1:C3:2A:8B
Authority key identifier: 63:31:94:86:73:02:ED:97:07:7F:C1:3F:2B:AD:8F:C1:C2:3C:DD:8E
Certificate issuer:       /CN=633194867302ed97077fc13f2bad8fc1c23cdd8e
Certificate serial:       01A12EB37414D91159EF5ED74D5CB752EAA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzGUhnMC7ZcHf8E_K62PwcI83Y4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.mft
Manifest number:          0116
Signing time:             Mon 12 Oct 2026 06:01:14 +0000
Manifest this update:     Mon 12 Oct 2026 06:01:14 +0000
Manifest next update:     Tue 13 Oct 2026 06:01:14 +0000
Files and hashes:         1: HuwT9iGWIgJRyUCZSSk1R7OqZEs.roa (hash: gHtemcwtFR9eD7jL8T2vPWRH/SZxxrNlKmGIkUXMU7A=)
                          2: YzGUhnMC7ZcHf8E_K62PwcI83Y4.crl (hash: FwKg+4oYuQc1e7sx5GBge2Sh9E4kRxqPmdqMecL29ms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YzGUhnMC7ZcHf8E_K62PwcI83Y4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2e:b3:74:14:d9:11:59:ef:5e:d7:4d:5c:b7:52:ea:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633194867302ed97077fc13f2bad8fc1c23cdd8e
        Validity
            Not Before: Oct 12 06:01:14 2026 GMT
            Not After : Oct 13 06:01:14 2026 GMT
        Subject: CN=deb2e2e86e18ee99d5262c2cfdc9bd7af1c32a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:f2:e0:cf:5a:7c:d1:22:cf:7f:b8:27:bd:
                    69:2d:19:3d:cf:bc:98:43:25:8b:ed:7f:b9:39:07:
                    ed:b0:b4:e0:be:05:92:12:a0:81:45:34:5d:c9:4e:
                    25:36:9a:1a:16:80:fa:bd:5d:78:e4:68:67:42:58:
                    8e:1c:77:c9:bc:d1:c7:7c:81:12:cd:04:ca:04:d9:
                    d1:30:20:6e:b2:92:86:24:14:57:da:96:f3:96:57:
                    57:da:75:ec:94:f5:f9:4e:bc:45:d9:85:65:b9:14:
                    6c:a5:7c:06:31:1a:95:a0:58:ce:e6:ea:a3:df:f7:
                    25:f9:9e:48:6b:ff:40:91:0c:0b:5f:1e:7f:bc:a9:
                    92:49:bc:aa:73:e9:ed:6b:eb:e5:57:54:c1:9d:3b:
                    d8:4c:8e:64:36:3d:48:9f:ee:c3:cf:d8:e8:5c:eb:
                    6a:7c:88:b0:96:35:c1:56:fa:fa:a1:7b:25:70:d3:
                    6d:87:9d:a9:63:b6:6f:d4:6d:cb:33:69:7a:10:89:
                    17:60:5d:b4:e1:f4:92:7a:ff:d1:06:e5:d5:3b:0b:
                    06:18:10:f1:f7:0f:82:11:8d:43:8e:83:01:b1:f4:
                    76:8f:9c:55:7b:1b:ae:4d:16:ca:b6:e2:0e:d1:4f:
                    37:63:da:c5:b9:23:32:4b:01:17:a5:da:87:75:fd:
                    48:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B2:E2:E8:6E:18:EE:99:D5:26:2C:2C:FD:C9:BD:7A:F1:C3:2A:8B
            X509v3 Authority Key Identifier:
                keyid:63:31:94:86:73:02:ED:97:07:7F:C1:3F:2B:AD:8F:C1:C2:3C:DD:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzGUhnMC7ZcHf8E_K62PwcI83Y4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/YzGUhnMC7ZcHf8E_K62PwcI83Y4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ce:1d:28:63:67:20:76:2f:2e:70:01:6d:f1:2e:a7:d1:a4:
         21:21:97:58:c4:a7:38:94:58:98:27:58:dd:1a:17:70:e9:aa:
         cd:3f:13:be:ac:53:70:c6:68:f1:b9:dd:f3:95:13:d5:92:c1:
         82:a2:33:0d:2f:91:bd:99:9e:d5:6e:06:39:96:30:c0:d9:25:
         ef:34:97:5b:75:27:c9:55:62:7a:02:b3:28:d3:7d:7d:2b:b9:
         e8:f9:46:c8:43:23:a5:f3:60:cb:10:17:9f:6f:76:41:ce:fc:
         e1:a7:d8:d2:34:c9:49:65:b6:53:f1:99:06:a0:b2:23:47:24:
         6a:84:9d:65:da:42:31:49:b4:cc:06:01:0b:2a:47:15:fe:c9:
         75:86:9c:4b:82:ef:4c:a5:76:bb:e5:6f:e1:da:75:36:ec:91:
         f0:0d:61:c0:77:f0:09:ae:78:b3:07:fa:64:15:77:3c:9c:a1:
         35:c1:66:39:da:38:c4:ef:2c:7e:fd:81:87:7b:32:ac:73:8c:
         13:a1:a8:6a:6a:9d:17:c3:cc:15:47:7a:7e:15:27:5c:b6:be:
         35:ae:eb:a7:28:4a:2a:9b:c7:c2:e8:34:e6:22:70:bc:80:52:
         80:25:69:a9:74:e1:48:67:14:71:0a:29:c1:59:3d:ef:05:57:
         63:6a:46:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 10:03:42 2026 by rpki-client