Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
File:                     YgsENUY3RvXyN9k2h77C6s8iRVE.mft (raw, json)
Hash identifier:          rTENM8szsgd3VyZng37/BVVyQcUNoBnxWanwfZSpeLQ=
Subject key identifier:   BC:4B:3B:A2:F9:42:82:8D:0E:F3:19:8C:F5:14:50:78:29:36:90:7D
Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
Certificate issuer:       /CN=620b0435463746f5f237d93687bec2eacf224551
Certificate serial:       01A1095D4C0F535DF92345F98F7B2128EA61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
Manifest number:          0C6B
Signing time:             Mon 05 Oct 2026 00:01:11 +0000
Manifest this update:     Mon 05 Oct 2026 00:01:11 +0000
Manifest next update:     Tue 06 Oct 2026 00:01:11 +0000
Files and hashes:         1: T9qIl1S9tQz4tEVjrSKAWFbOqcg.roa (hash: h4jSuRvvCuZIkrJ0uLJKVCyM1giPtJIbarHhGQfdVf0=)
                          2: YgsENUY3RvXyN9k2h77C6s8iRVE.crl (hash: gJvwcggBZarLtteQOgN0nYZNIMgm9bnYhhaWiP38lU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:09:5d:4c:0f:53:5d:f9:23:45:f9:8f:7b:21:28:ea:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620b0435463746f5f237d93687bec2eacf224551
        Validity
            Not Before: Oct  5 00:01:11 2026 GMT
            Not After : Oct  6 00:01:11 2026 GMT
        Subject: CN=bc4b3ba2f942828d0ef3198cf51450782936907d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:17:f3:73:5a:cd:76:bb:bc:4d:95:d3:a3:
                    31:70:c7:5f:17:1c:5f:10:45:a8:e9:3d:29:52:3a:
                    bd:f4:2d:cc:b9:2f:6c:8b:6e:ea:45:3b:ff:88:f3:
                    7a:08:42:ab:3f:63:be:b4:93:c3:8a:5b:74:82:25:
                    b7:32:6b:21:ac:f4:0f:19:26:c8:d6:ae:3e:c4:3d:
                    12:d9:18:d1:41:1a:1d:fc:8f:b6:96:86:b8:b9:7c:
                    da:6b:c8:e0:5e:a0:42:35:a2:84:47:82:19:82:6f:
                    18:df:0a:21:b2:e1:95:06:28:02:20:9b:23:48:a8:
                    37:50:3e:0d:53:36:dd:22:f9:4e:04:75:37:45:d4:
                    87:5a:25:46:9d:14:55:87:f8:67:a7:a3:a4:18:ae:
                    6a:24:85:11:ea:19:ff:bc:bf:5e:7e:f6:ca:00:40:
                    bb:34:f6:0a:9c:29:9a:68:cb:50:fa:cc:dd:b0:5a:
                    14:29:52:b7:04:ea:36:15:cb:9f:42:0c:c7:54:88:
                    54:64:fa:e2:ac:7b:30:cd:cf:9b:3a:90:6f:e3:9a:
                    9a:b3:5f:58:e2:84:d2:26:80:9e:dd:cf:1a:44:a5:
                    dd:a4:f6:42:a4:d8:74:e6:28:85:81:c1:63:4a:54:
                    71:02:ae:b6:5a:16:23:2d:54:4b:94:63:af:19:96:
                    3c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4B:3B:A2:F9:42:82:8D:0E:F3:19:8C:F5:14:50:78:29:36:90:7D
            X509v3 Authority Key Identifier:
                keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:96:e9:d6:1b:9e:4e:75:a1:12:8a:40:4f:7f:82:41:b7:d6:
         1d:dd:69:d4:20:99:97:9a:17:e6:55:96:7a:18:0d:f2:f6:11:
         6d:dc:cf:da:f0:51:c0:8f:2b:7b:2b:a0:25:2e:21:7c:50:0e:
         f6:ca:cd:17:b3:46:0e:b6:c5:c3:b1:91:10:8a:7a:e1:83:78:
         a3:9c:6e:d4:ad:04:d6:8a:f3:c4:bd:10:38:ca:ca:ff:fb:48:
         72:0f:b1:01:36:59:36:7b:f9:ba:96:0d:32:cc:15:79:63:0b:
         f6:c4:c6:22:ec:6e:d5:eb:be:dc:c8:7c:c0:09:7a:8d:e6:31:
         37:6c:0b:a3:1f:cb:23:95:43:46:7d:6e:ec:53:4a:71:b9:53:
         84:9c:0b:9f:34:40:3e:90:b9:3e:96:05:4f:dc:4e:9a:b7:47:
         d1:7c:49:5e:a7:2f:d9:a9:9b:1b:f0:db:ea:4a:48:17:58:78:
         19:27:5b:65:22:2b:a7:5a:5b:67:c7:f1:5f:58:d7:90:47:ba:
         7a:de:9a:e5:27:ec:26:5d:a5:dd:a8:4e:7d:7a:e1:c5:4f:f6:
         c7:ce:dc:55:5a:1e:b8:e3:6e:c6:db:9d:87:e1:5d:fd:97:2c:
         72:43:cb:9f:5a:8e:57:37:25:23:78:ad:f7:e6:62:22:7d:0a:
         b9:c3:dc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:31:18 2026 by rpki-client