Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File:                     yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier:          q5cPGJJFhpHnafN6eftvFwMPNpKVYB6vQLKm4h61Y1s=
Subject key identifier:   AA:37:8D:1F:ED:E9:49:68:7C:E3:A1:DF:43:D0:F3:65:E5:48:93:4C
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer:       /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial:       01A13D1319D88449E5D45CB36B9139883903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number:          1300
Signing time:             Thu 15 Oct 2026 01:00:24 +0000
Manifest this update:     Thu 15 Oct 2026 01:00:24 +0000
Manifest next update:     Fri 16 Oct 2026 01:00:24 +0000
Files and hashes:         1: D3wkpKKSoJovDsiCfvbh1DYTkx8.roa (hash: c0FcHGYTB+tG9IR/+QbyBfjUn2VqFpbtfy3DDserGhM=)
                          2: KSjHgXPRASqnBW1tjOtvhmkWPHE.roa (hash: h5XvzMTTFxSuHg9vWwCmjacM7SXacJTLfB8wl2n3Cec=)
                          3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: ezNa5pBHtvL/Z+nqFsM30EQmcg31iwj6gdE4xRAcAI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 22:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:13:19:d8:84:49:e5:d4:5c:b3:6b:91:39:88:39:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
        Validity
            Not Before: Oct 15 01:00:24 2026 GMT
            Not After : Oct 16 01:00:24 2026 GMT
        Subject: CN=aa378d1fede949687ce3a1df43d0f365e548934c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:7f:39:0b:3f:94:ba:4f:3a:c1:a3:75:cd:
                    ce:15:d0:88:2e:7c:fc:17:b6:a8:e0:3b:1a:19:01:
                    56:3b:e2:b6:5e:2e:c2:4a:36:db:21:72:06:14:10:
                    62:ab:a9:be:b7:46:e0:21:9c:b3:af:c7:18:25:ae:
                    5f:78:10:67:98:4a:49:33:9b:23:b2:df:0b:e0:3f:
                    20:51:a9:88:43:a0:3d:52:7e:3c:aa:cf:ae:70:52:
                    32:57:82:a4:8f:22:c5:46:8f:1e:fa:3c:b4:c2:b0:
                    b9:78:5f:a4:69:40:bf:41:10:89:c1:6b:42:3c:77:
                    4f:da:ff:a9:2f:ba:6a:17:4c:39:8b:3b:3f:27:10:
                    c3:6b:31:d3:fc:4c:d6:59:18:f3:b8:9a:d3:72:50:
                    fd:9b:95:aa:75:f1:3e:c9:d8:6d:cd:a6:63:72:9d:
                    67:9b:6b:ad:05:69:4a:12:c3:d1:12:66:0b:62:9c:
                    a7:dc:c6:6a:1e:9c:af:5b:68:15:3d:06:76:c7:7e:
                    53:92:f9:83:81:76:7c:39:c4:3f:e5:e6:63:cf:25:
                    f3:cd:2e:f4:7c:18:f0:6e:7b:1e:d5:8c:90:80:fa:
                    32:81:66:d7:77:f9:13:9c:eb:46:2b:2a:eb:a4:3c:
                    58:1c:f4:03:98:7a:e1:1a:7e:21:02:d1:aa:7b:a5:
                    3c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:37:8D:1F:ED:E9:49:68:7C:E3:A1:DF:43:D0:F3:65:E5:48:93:4C
            X509v3 Authority Key Identifier:
                keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b4:af:ff:c5:49:9c:b1:3e:ad:b9:ec:3d:c6:ed:26:de:88:
         92:19:8d:ef:13:46:57:31:8b:c6:87:25:d1:7b:f1:32:cb:55:
         f5:0e:db:ae:0d:eb:5c:aa:fe:88:d1:b8:de:e4:ab:a9:82:36:
         0c:61:e0:28:70:83:ee:00:6b:c9:98:24:1f:5b:5c:b1:71:ed:
         cc:8a:7d:f0:45:0f:f5:32:de:ef:47:59:36:f7:c0:cc:48:45:
         b1:be:58:4b:63:01:a8:56:80:54:00:b5:15:d3:a2:12:b6:dd:
         45:b6:71:31:4c:9b:53:56:61:b9:54:94:f3:29:79:c4:4f:04:
         0e:d2:d7:92:a1:da:29:bf:21:dc:bc:b0:02:46:fd:9d:6d:e3:
         c9:a4:82:0e:a6:33:80:97:61:28:b9:a6:50:ef:43:d3:60:00:
         4c:41:d2:a0:8f:14:49:e2:96:ec:ce:bb:f4:92:28:d2:c8:54:
         fb:c1:4d:81:ca:bb:52:4a:6c:3a:87:8c:92:36:ee:15:06:ca:
         07:cd:fc:75:49:fd:e6:c6:fd:08:e2:28:92:96:9a:b3:6e:8f:
         26:25:1c:cc:98:0a:f6:dc:08:06:47:9b:ca:8c:6d:cd:f1:1a:
         ab:08:55:d1:4d:97:20:19:2f:15:2e:7a:34:2e:b9:45:4b:54:
         e7:16:ac:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:35:28 2026 by rpki-client