Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
File:                     YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft (raw, json)
Hash identifier:          r5+VUYR+PyhE9d7apEivjEhMbsKKSs2rGzQa4kBQ6sE=
Subject key identifier:   48:C9:5D:5F:11:B5:2D:6A:62:57:8C:3D:B4:E5:97:43:0B:8B:FA:6A
Authority key identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
Certificate issuer:       /CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Certificate serial:       01A0DC16CA3ADB120F341268E3EDEAEDE56C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
Manifest number:          121A
Signing time:             Sat 26 Sep 2026 05:01:15 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:15 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:15 +0000
Files and hashes:         1: 7kMdYp5roGfF1VU63Cc4JGcx5Js.roa (hash: uj86j/OpDs/f0Rygt+3blYLNRZRYXffCKOesowzFlqw=)
                          2: YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl (hash: Xozt1KkVzdciaDrzCsvfQKBIQvuuK+eDt/YBSSrCiMA=)
                          3: mB6ctQ7JDyjcQ3pzEiNkX3oG_lc.roa (hash: eNl+c0XuwCaTPy+dCHBabXrocGDi3GDbO258cnnWPK4=)
                          4: mET4_I0vQujHayV2JM5NI5ita-A.roa (hash: e7Iitk3hYpEL0ONAjD0IO1Ux9f6z5Emc5/EOv6IJZlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 05:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:16:ca:3a:db:12:0f:34:12:68:e3:ed:ea:ed:e5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
        Validity
            Not Before: Sep 26 05:01:15 2026 GMT
            Not After : Sep 27 05:01:15 2026 GMT
        Subject: CN=48c95d5f11b52d6a62578c3db4e597430b8bfa6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7a:47:72:1b:b9:52:7e:4b:de:06:d9:df:c8:
                    42:f6:7b:58:2e:61:6e:c7:e7:05:fa:0e:32:fd:9b:
                    5e:a1:bf:06:99:06:fd:c3:5e:0e:83:8c:91:e8:7a:
                    34:a6:56:7d:81:99:bc:87:a9:e6:3d:78:32:bc:17:
                    35:df:b9:b8:3e:c6:4e:9a:e7:a5:35:90:7f:d5:dc:
                    d4:ad:f1:f6:4c:b0:40:7c:39:df:8a:47:88:96:cb:
                    14:be:be:73:cc:c0:ba:b3:93:ab:9f:d9:a6:99:b3:
                    9a:a7:4c:6c:61:b1:43:34:5d:e7:61:f6:15:83:36:
                    12:7f:2a:36:34:e2:c2:ad:76:44:fb:ce:19:12:2d:
                    8f:00:74:e7:5f:90:c4:9b:83:d8:7d:b0:4c:ce:bc:
                    cc:a2:70:e4:9c:8a:a0:f0:5e:6a:9b:e3:4a:de:1d:
                    53:c4:6b:af:59:0b:bd:b2:89:73:85:e0:ad:5f:a4:
                    68:a8:fc:19:d6:ea:be:6d:f9:c4:29:59:bf:99:e4:
                    7e:45:9b:98:b8:a2:5d:c6:a9:73:86:d4:eb:91:78:
                    99:16:86:69:bb:ca:61:43:30:70:af:c9:07:bf:dc:
                    7e:26:63:0a:6d:a8:bc:cf:4a:c5:8a:52:84:ae:fc:
                    38:9c:f6:ef:3b:36:d8:77:85:d2:af:39:15:38:34:
                    20:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C9:5D:5F:11:B5:2D:6A:62:57:8C:3D:B4:E5:97:43:0B:8B:FA:6A
            X509v3 Authority Key Identifier:
                keyid:61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:6e:7c:7d:7a:7d:b5:4b:fc:59:ff:7b:b0:30:a6:a9:54:71:
         b9:54:ae:3d:f8:6b:50:b0:fa:29:ee:9f:ea:9d:d0:50:5a:e8:
         5a:6c:e2:20:d5:04:b6:96:44:1c:84:f7:c1:11:22:b1:b5:fd:
         22:69:9f:45:af:a1:2b:32:2a:46:9c:c8:1e:02:04:57:9f:03:
         1c:9f:48:59:e2:d2:a8:42:26:a5:65:a3:b2:b0:c8:0b:ff:29:
         d5:43:3d:cc:e3:cf:36:9d:c7:cc:04:df:3d:a5:df:f5:c6:33:
         38:6a:72:4b:9c:84:69:52:1b:3c:93:21:14:c5:9f:60:d0:11:
         e0:ed:36:27:1e:b9:22:22:4e:d4:f6:0a:ad:ec:8f:78:d8:c7:
         32:86:6a:9d:46:d2:a9:79:37:07:e2:2f:c5:35:4c:2d:1e:d3:
         6f:9b:a0:70:95:a8:b3:83:23:e9:d5:cb:14:12:64:7d:f9:3f:
         96:55:4b:fa:c0:0b:d4:89:62:f1:f4:a9:d5:15:10:11:7e:6b:
         be:a4:ee:9a:60:ff:47:8f:f0:d2:65:a9:a8:ab:ce:c0:58:ec:
         73:74:d6:58:72:51:89:08:7e:ea:c2:45:eb:49:1b:a2:28:02:
         a0:be:3a:d1:43:aa:08:84:43:5c:be:26:80:7e:b8:99:4a:27:
         76:3d:98:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:15:52 2026 by rpki-client