Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
File:                     YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json)
Hash identifier:          DXn5q9CR3pZxGRyWCtwfH40ROruC8ZhyUynnDWN2y6U=
Subject key identifier:   34:00:8F:84:22:DD:28:A8:F4:6B:A6:B8:84:98:F1:F6:1A:36:F1:9E
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Certificate issuer:       /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial:       01A0D15B954454A9CF783F599139568E26C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
Manifest number:          11EF
Signing time:             Thu 24 Sep 2026 03:00:34 +0000
Manifest this update:     Thu 24 Sep 2026 03:00:34 +0000
Manifest next update:     Fri 25 Sep 2026 03:00:34 +0000
Files and hashes:         1: 0sTykt04zhafsgKWmG0fpAc6Xi4.roa (hash: s3D/zF9I60gRgjWMCWnW5l2vwcfUO0zatEx48bleBv8=)
                          2: 13bSAbvbvGDWUO5yvtSsKXnlK94.roa (hash: DXldFZAd6AGXUWvxh5LvcSzCrQoe+CYXwhAGhk24KDA=)
                          3: De_n5gWs77mFUbESDcEhMP4Zgu4.roa (hash: 6EezXySVgGXz55sVzTpFqjj+QzByDEb/wr63m1U01ek=)
                          4: T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa (hash: YHDYE65RL2KgOZOOjjz6vjoQjHzxsBWW9qIdkVOIzBk=)
                          5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: z6oHL+2tRyUmF60WKYhUXjwJ78QwRTNwTOR6MAUX+4o=)
                          6: Z943jXHlAqEjC8HhkAmn0vuwcbY.roa (hash: zwEb4pXvmmR3brxpaMTgJgnaLu7vluGbc09IMA9MXt4=)
                          7: aZEJdlE8rryKdFsxcXIyoyt-SOg.roa (hash: BG6zGbPXxvvnXkdjQ9fWCyghzw5YTxYUyEjcqpnK0GU=)
                          8: d9cqCh7w_HREeS5tpm1EQv7bdkc.roa (hash: DnP+rNEbo3897fPDs3e26jS0WYx/AYH67Gkmxad3fpM=)
                          9: tL-DJ8EbDPZqo5Hcwxd2ywWIDr0.roa (hash: 7ypgmIY8clfcgfXd8ScXxIyNvL0UG8VUmIwT7yY7+ig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:95:44:54:a9:cf:78:3f:59:91:39:56:8e:26:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
        Validity
            Not Before: Sep 24 03:00:34 2026 GMT
            Not After : Sep 25 03:00:34 2026 GMT
        Subject: CN=34008f8422dd28a8f46ba6b88498f1f61a36f19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:14:04:d7:c2:70:6d:1a:11:49:9f:1b:8c:39:
                    79:3b:89:9b:b7:70:bb:a9:a1:23:e4:af:f7:ee:e9:
                    b9:64:1b:cf:25:49:aa:c2:43:36:1e:26:e0:7c:f2:
                    e7:f1:49:74:2a:24:0e:5c:71:ba:c7:da:3d:2b:8d:
                    07:22:b9:87:0a:45:20:3e:0b:9c:a6:7e:7b:00:f7:
                    b7:d1:c1:d8:e9:4b:48:08:f9:a3:38:e5:27:79:ee:
                    3d:1d:2b:6e:ad:de:52:77:60:e7:75:69:a2:34:60:
                    8e:e3:c0:72:08:53:fb:4e:91:0c:0e:e8:77:8e:40:
                    b9:ed:9d:df:cd:c8:cb:78:68:e4:1d:98:b7:64:3c:
                    cf:e7:ab:14:ba:ea:c9:b5:ea:21:81:15:03:10:68:
                    46:af:66:a2:d3:77:e1:8e:5d:2e:a7:b2:92:b1:2c:
                    b1:76:a6:0d:59:46:d0:d5:cc:77:00:6b:8e:55:c2:
                    3d:7a:d8:bc:03:68:e7:34:1d:ee:2b:11:87:48:98:
                    ea:e5:e8:38:9e:44:a2:02:95:34:62:94:06:23:37:
                    bd:e1:16:f2:92:bb:39:54:53:93:69:34:4e:b3:50:
                    e5:40:4e:27:73:71:f8:1c:73:fc:06:19:5b:e8:27:
                    0e:6e:17:55:9e:7c:c3:2d:1a:51:d9:ce:39:7d:09:
                    66:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:00:8F:84:22:DD:28:A8:F4:6B:A6:B8:84:98:F1:F6:1A:36:F1:9E
            X509v3 Authority Key Identifier:
                keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:18:99:11:0e:52:fb:d8:3e:d3:2e:b6:f8:0b:2c:44:bc:b3:
         38:ed:ee:4a:8c:a9:fe:21:73:d0:ea:b3:c1:f6:73:c6:fb:dd:
         0f:91:60:25:25:b6:4d:4c:a2:38:aa:c5:9b:0b:11:99:ee:0c:
         bd:b6:b4:2e:59:38:78:db:69:8f:e8:d9:58:ba:71:d8:58:26:
         58:59:50:4c:b5:62:a2:1f:b9:67:a0:8d:0d:a1:f4:6b:9a:9c:
         1e:f0:8f:7e:82:eb:c5:96:b5:4c:72:ea:57:62:9c:62:8f:ef:
         85:e7:d5:95:a8:cb:c1:5e:b1:b6:9a:af:2d:7f:3a:4b:62:07:
         1c:2e:71:5b:4e:e2:d4:19:0f:3a:74:3e:cb:5f:96:88:1b:b1:
         be:b6:2f:4a:63:55:06:70:f4:ff:63:29:d1:d4:9a:cb:4e:52:
         c3:e0:51:55:64:20:5d:6a:56:03:78:29:c1:26:8e:d0:9d:7f:
         b5:21:21:32:e0:b2:93:5f:97:47:27:e1:2b:b8:77:bc:e4:bc:
         31:f7:1f:86:c4:8c:c0:cf:26:55:49:6f:f5:8f:fe:f9:36:6c:
         3c:b4:bc:a5:1b:b2:39:09:e6:fd:01:bc:c8:9b:23:0f:7b:0f:
         78:a5:60:9b:84:d1:6d:17:b1:c7:34:ac:fa:de:a7:ed:b3:f0:
         1e:8e:0a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:02:07 2026 by rpki-client