Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
File:                     y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft (raw, json)
Hash identifier:          aIYI0+QAYlL/v5Jd45DgYD1/MzFS+hpy66SmsqxZskY=
Subject key identifier:   01:C7:70:8B:E8:27:35:40:26:FA:47:C3:D5:41:79:5B:8A:10:66:D2
Authority key identifier: CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3
Certificate issuer:       /CN=cb4fba09190b76849fff3d26d580790e54fac2e3
Certificate serial:       01A119E28B47D8888F096F7E2FE6EB392100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
Manifest number:          1A92
Signing time:             Thu 08 Oct 2026 05:00:39 +0000
Manifest this update:     Thu 08 Oct 2026 05:00:39 +0000
Manifest next update:     Fri 09 Oct 2026 05:00:39 +0000
Files and hashes:         1: Zu8UuGG4D2VbmJDnyhSG0Cawt4M.roa (hash: 0v9+1D6+nPkZSNsJJaK1p3wg2xF1SbrepfZyyi1iP3c=)
                          2: y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl (hash: 0dzm+dGoShHbDtqa+nHQlltLh9bH897btO+1WZiyCqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:e2:8b:47:d8:88:8f:09:6f:7e:2f:e6:eb:39:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb4fba09190b76849fff3d26d580790e54fac2e3
        Validity
            Not Before: Oct  8 05:00:39 2026 GMT
            Not After : Oct  9 05:00:39 2026 GMT
        Subject: CN=01c7708be827354026fa47c3d541795b8a1066d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:1e:30:ba:54:22:75:2f:8f:f7:8f:a6:96:
                    c6:ed:62:28:5b:51:4d:fb:37:22:d6:f2:90:b0:9b:
                    20:a0:68:24:62:70:09:b5:5e:a5:16:9e:4a:60:02:
                    47:18:70:b3:45:89:eb:f3:81:05:f5:10:ae:23:f2:
                    94:dd:f8:86:c3:0a:bb:a1:71:40:bf:b7:aa:f4:f6:
                    54:d7:74:fd:ee:f8:78:83:a0:23:fc:6c:d5:58:84:
                    61:1d:7e:1f:53:b3:ba:bb:7a:75:b2:26:f7:7e:65:
                    6c:49:e1:3a:c6:b0:f3:b1:43:bd:fe:bb:7f:03:22:
                    1f:6b:d3:bb:57:eb:40:ac:69:84:ac:49:26:91:54:
                    e6:44:e8:71:1e:c0:29:42:2f:e8:15:31:6e:5b:da:
                    67:c5:60:e2:03:28:3b:21:93:6b:17:ba:a3:3a:ea:
                    3c:04:d1:02:96:01:24:f2:70:31:71:8d:7f:81:58:
                    d4:8e:59:4b:a0:d2:54:a3:0a:a6:5e:63:a6:4e:95:
                    1c:20:e0:0e:3d:51:5b:53:12:b2:ef:06:59:0d:14:
                    12:58:04:3a:b9:0e:12:f6:de:06:b9:a9:cb:23:81:
                    53:6b:5c:fa:25:26:83:f6:fb:18:a6:99:bc:c3:a1:
                    8d:cb:69:c2:1f:d7:91:1d:ee:ad:39:e3:76:06:13:
                    43:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C7:70:8B:E8:27:35:40:26:FA:47:C3:D5:41:79:5B:8A:10:66:D2
            X509v3 Authority Key Identifier:
                keyid:CB:4F:BA:09:19:0B:76:84:9F:FF:3D:26:D5:80:79:0E:54:FA:C2:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0-6CRkLdoSf_z0m1YB5DlT6wuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/dadb4b-14f3-42fa-95b7-f85cc5747fbf/1/y0-6CRkLdoSf_z0m1YB5DlT6wuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:6d:95:db:70:b5:16:74:f4:c1:70:fa:e9:3d:c0:2e:19:c4:
         09:d5:a1:ce:f6:64:d4:b7:62:ee:f9:e8:17:77:11:83:4c:8d:
         be:09:26:20:01:e1:84:d3:36:33:0d:08:ae:7c:92:53:43:e8:
         62:36:76:52:ad:f6:25:9b:b0:09:08:4c:95:3e:9c:e7:4a:e2:
         4a:1c:4f:18:00:2f:5f:2d:1f:8b:1b:03:3a:54:95:e0:48:be:
         f7:f0:12:90:a1:2b:41:d7:28:bb:e4:71:7c:b5:c1:30:9e:f5:
         16:4d:f7:cb:cb:79:9d:da:cd:33:5a:dc:3a:db:95:35:92:13:
         3c:a3:2b:ec:ef:ef:9e:72:0a:4f:51:d3:7f:49:b6:3f:de:3f:
         2e:ba:2e:a5:4c:23:79:3f:d2:5b:3f:d0:ff:56:19:59:4a:9e:
         a5:df:ae:17:0a:de:66:99:e9:36:af:97:7c:b5:f4:23:4c:c9:
         f0:f9:b0:5a:88:bb:fb:21:4a:cd:38:c0:f3:9d:1f:e5:05:09:
         6d:8b:ea:df:60:a5:8b:bf:8c:06:2c:5f:2b:bb:81:51:f0:04:
         de:a3:24:f1:c2:df:bd:6f:f7:10:34:d1:34:bc:7b:98:c3:c8:
         51:83:34:e9:5d:26:76:91:d1:b6:b1:ac:0a:c8:b2:ed:92:ca:
         5f:0d:c6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:43:19 2026 by rpki-client