Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
File:                     YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json)
Hash identifier:          eNYmkTVAy5f9i4+2+7jKTD8pso2Clv2vo2XzyHUzq2A=
Subject key identifier:   AE:3A:3C:6B:F5:54:5B:1F:A1:91:AF:1E:EB:B8:62:D2:70:73:11:4C
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Certificate issuer:       /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial:       01A0D34AC6EFEB135AA8FFADAF3013D5B808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
Manifest number:          11F0
Signing time:             Thu 24 Sep 2026 12:01:28 +0000
Manifest this update:     Thu 24 Sep 2026 12:01:28 +0000
Manifest next update:     Fri 25 Sep 2026 12:01:28 +0000
Files and hashes:         1: 0sTykt04zhafsgKWmG0fpAc6Xi4.roa (hash: s3D/zF9I60gRgjWMCWnW5l2vwcfUO0zatEx48bleBv8=)
                          2: 13bSAbvbvGDWUO5yvtSsKXnlK94.roa (hash: DXldFZAd6AGXUWvxh5LvcSzCrQoe+CYXwhAGhk24KDA=)
                          3: De_n5gWs77mFUbESDcEhMP4Zgu4.roa (hash: 6EezXySVgGXz55sVzTpFqjj+QzByDEb/wr63m1U01ek=)
                          4: T5zUGgRal9JKPPCQ5ILhLwlQlHM.roa (hash: YHDYE65RL2KgOZOOjjz6vjoQjHzxsBWW9qIdkVOIzBk=)
                          5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: +lvHXy9OyH9eaWKKtTk6Mkiyf0hA8TopF5tW0GxUE4M=)
                          6: Z943jXHlAqEjC8HhkAmn0vuwcbY.roa (hash: zwEb4pXvmmR3brxpaMTgJgnaLu7vluGbc09IMA9MXt4=)
                          7: aZEJdlE8rryKdFsxcXIyoyt-SOg.roa (hash: BG6zGbPXxvvnXkdjQ9fWCyghzw5YTxYUyEjcqpnK0GU=)
                          8: d9cqCh7w_HREeS5tpm1EQv7bdkc.roa (hash: DnP+rNEbo3897fPDs3e26jS0WYx/AYH67Gkmxad3fpM=)
                          9: tL-DJ8EbDPZqo5Hcwxd2ywWIDr0.roa (hash: 7ypgmIY8clfcgfXd8ScXxIyNvL0UG8VUmIwT7yY7+ig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 12:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:4a:c6:ef:eb:13:5a:a8:ff:ad:af:30:13:d5:b8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
        Validity
            Not Before: Sep 24 12:01:28 2026 GMT
            Not After : Sep 25 12:01:28 2026 GMT
        Subject: CN=ae3a3c6bf5545b1fa191af1eebb862d27073114c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:3a:62:4f:4b:b0:68:c6:33:68:21:40:27:
                    9e:ae:91:e1:f1:5f:6d:2a:0c:72:f4:fc:1d:68:6a:
                    c8:e9:2a:5e:c9:be:5a:16:c9:25:d1:f7:db:a3:dd:
                    99:bb:33:ba:97:69:bd:73:82:23:5b:4f:e3:fb:de:
                    d2:70:c7:4b:02:0a:7d:f6:b0:07:ae:de:80:0c:7f:
                    cc:08:97:a2:c9:23:c1:95:75:a7:cd:41:a3:1a:0b:
                    2c:85:65:a8:9a:68:e2:ed:63:52:80:c2:ac:93:80:
                    2e:07:e2:5d:c7:4c:5b:79:95:d0:c0:58:8e:76:cd:
                    c2:09:8d:66:c1:42:10:eb:8e:a9:5d:a9:df:2c:fc:
                    9c:09:d8:fc:73:48:9c:d3:57:3e:d8:ba:90:18:6a:
                    7f:ba:94:49:55:96:3c:91:2d:40:8a:5e:27:45:3a:
                    59:d3:43:f8:82:43:c2:b3:4a:3c:ae:a7:6c:a6:7d:
                    8d:42:1a:e5:6f:cb:28:2d:2a:41:5b:8e:ad:87:f8:
                    40:66:2b:ae:04:8f:de:a3:8f:6f:a8:c9:f6:37:b9:
                    f2:8e:1a:0d:c1:59:47:0a:a2:c0:c5:99:76:0c:62:
                    c7:e7:fa:fe:53:3c:46:9a:5a:38:19:c9:61:f9:0d:
                    42:6b:a5:c6:9d:00:4d:4b:c5:a9:a9:c0:23:b3:56:
                    cd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3A:3C:6B:F5:54:5B:1F:A1:91:AF:1E:EB:B8:62:D2:70:73:11:4C
            X509v3 Authority Key Identifier:
                keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e7:be:a4:0c:1f:2a:d2:7c:7a:55:8c:29:38:01:eb:6b:d3:
         07:89:38:1c:e9:a1:df:12:80:a4:5d:4f:02:bd:81:4d:06:99:
         47:45:6b:88:6d:42:55:f5:8c:0f:d1:82:32:2e:ee:3d:89:7d:
         82:50:5f:c5:38:08:0c:92:17:b4:33:5b:ed:65:c7:d7:81:7b:
         b0:1f:27:dd:c5:24:01:fb:b9:ed:4a:22:7f:ec:d4:f7:97:d6:
         88:c8:a2:fb:7e:ba:b1:63:f9:fc:7e:d5:33:2e:31:c2:dd:30:
         a6:d8:72:9f:4c:0e:0a:4e:1b:17:ad:1e:84:85:cf:cf:5a:a9:
         a7:8e:85:f6:c2:c6:b6:f3:3c:28:4b:54:a1:84:6e:56:20:aa:
         8d:55:a2:14:be:41:cf:fc:4f:77:7e:45:82:fd:cb:1b:ee:4c:
         88:99:4a:b9:55:b2:a6:2f:55:78:87:66:a8:45:95:b2:55:91:
         96:1e:39:d6:f2:3f:ac:2b:9c:cf:ee:0c:24:2b:02:28:3b:32:
         ee:1a:c0:94:fb:94:36:37:ae:fd:e8:5d:eb:be:25:dc:14:3e:
         09:a9:31:88:5c:9e:c3:63:47:42:bc:8a:fe:1f:49:7d:2b:9d:
         24:6c:af:fa:34:fd:cc:17:5b:a4:7e:fa:1f:da:2a:7a:65:4b:
         b1:41:b8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:22:13 2026 by rpki-client