Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
File:                     YaXSF3WehhaW_HftmqY7lO2zvn0.mft (raw, json)
Hash identifier:          GlZwVtN6ZkLTP/2eY0Zh5bgCD1JrlCBFQ6WRxEXfGDo=
Subject key identifier:   C2:5E:1C:BC:3F:38:86:2D:4E:37:B8:D2:02:D2:77:54:61:E0:DA:E6
Authority key identifier: 61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D
Certificate issuer:       /CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
Certificate serial:       01A0CD10C138C9D1DE796E249D3329EA0B8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
Manifest number:          19FA
Signing time:             Wed 23 Sep 2026 07:00:22 +0000
Manifest this update:     Wed 23 Sep 2026 07:00:22 +0000
Manifest next update:     Thu 24 Sep 2026 07:00:22 +0000
Files and hashes:         1: 7nMDcW2MBzGpfpdKdPDTB0QB3hU.roa (hash: en70sYlojLOJhZvnO4mg1gQMw5JWdqgwDgeNhf3auMU=)
                          2: En1jde_TIQ7LiMKAfWOjQ8-vueQ.roa (hash: B07iauNs3fJKlZyy9+dMg1gGMxORKFzCKI2QAYo7MVI=)
                          3: QaLldwyWCNmsJuYxanxijJENiro.roa (hash: zZJuFSJ24SLOyuCH72+V4rIHBfJPcOF4kPyYmAT7g5s=)
                          4: YaXSF3WehhaW_HftmqY7lO2zvn0.crl (hash: e3VjF1Gs6jAvv/KIB955SJA8V3wWzKUeSRnTU5e9kHE=)
                          5: jdSwXFGYkX-QEBXIuasgwFC2D7c.roa (hash: 8ECDcLMvUhxjcLk2BpSduz0pbSgekU1Tj/Vgy8O0Vqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:10:c1:38:c9:d1:de:79:6e:24:9d:33:29:ea:0b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61a5d217759e861696fc77ed9aa63b94edb3be7d
        Validity
            Not Before: Sep 23 07:00:22 2026 GMT
            Not After : Sep 24 07:00:22 2026 GMT
        Subject: CN=c25e1cbc3f38862d4e37b8d202d2775461e0dae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:88:ea:c1:14:84:cf:3e:55:9d:81:39:43:58:
                    2d:b6:de:b8:08:26:aa:8e:e7:26:04:2c:8f:f6:81:
                    cf:3e:06:ba:e6:0a:ad:c8:8f:41:97:df:ac:22:16:
                    97:ba:ae:74:b4:c8:5c:1a:10:89:9e:6e:c2:9e:fa:
                    55:fa:a7:c9:14:08:87:b7:2e:6d:ac:8a:48:5f:ee:
                    02:f1:fd:59:13:cd:07:3d:b5:15:25:91:7a:13:7a:
                    74:ae:f9:8d:73:8b:02:c5:c5:c1:b3:7a:e5:bf:51:
                    a1:3d:88:33:3d:67:2d:f0:64:f9:97:c2:ab:4b:92:
                    04:2b:aa:c2:f9:38:fd:d6:e6:55:e0:4d:60:08:68:
                    ad:57:74:f3:6a:e6:8d:c0:1a:c5:4f:47:22:6d:7d:
                    f6:05:40:b8:5c:9d:94:bd:6c:7a:ed:4e:5f:0e:3d:
                    66:a3:c5:3f:ac:37:19:6f:53:98:f6:de:aa:c4:b5:
                    b8:96:ca:7a:c3:40:c0:82:b5:be:15:23:b1:6a:20:
                    75:82:06:8e:ac:99:65:54:3e:bd:68:cd:95:21:a8:
                    90:b3:4d:2b:9a:83:31:39:f7:6a:0d:a4:33:7d:00:
                    5c:bc:6e:33:39:f4:4a:7b:ec:69:1f:84:ca:0a:50:
                    6b:74:67:35:a1:33:4a:b1:55:34:fc:29:7a:21:b1:
                    97:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5E:1C:BC:3F:38:86:2D:4E:37:B8:D2:02:D2:77:54:61:E0:DA:E6
            X509v3 Authority Key Identifier:
                keyid:61:A5:D2:17:75:9E:86:16:96:FC:77:ED:9A:A6:3B:94:ED:B3:BE:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaXSF3WehhaW_HftmqY7lO2zvn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/72f6cf-9bd4-467a-a92a-5a64a5fc8a64/1/YaXSF3WehhaW_HftmqY7lO2zvn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c3:d0:dc:1d:0a:e7:88:9e:66:e0:92:55:73:d3:33:14:fe:
         5a:f7:32:9b:f0:23:c1:2f:47:ff:e3:d8:6e:34:50:9b:4d:d3:
         ac:dc:68:53:d1:6a:b5:c5:31:7f:ee:6d:16:08:f1:3b:08:b0:
         71:68:7c:b9:e1:e8:e5:24:74:06:ac:11:e1:cd:6d:8c:0e:bc:
         c5:76:c3:c2:a6:8d:87:ea:5d:70:3b:bd:8f:86:26:34:9a:cf:
         f6:8f:b7:4e:f0:b4:bf:f7:3b:30:8a:b2:0e:7f:7d:31:dc:09:
         b1:a7:e1:14:f0:94:3c:b8:f5:94:93:12:ed:d7:49:47:32:e0:
         b7:f7:d0:e3:7f:28:6c:18:1f:34:48:9d:fd:d2:71:a9:0c:66:
         a4:39:e6:cd:58:c8:31:c1:44:eb:18:45:e8:ad:d4:9b:99:6e:
         6b:ce:80:1e:c4:a9:56:14:af:da:51:78:f3:2a:30:bc:87:2f:
         c1:d7:cb:b9:ba:9d:42:5f:30:47:39:f0:4c:20:e4:a7:c1:ca:
         26:93:03:4c:ae:cd:55:43:aa:57:e3:8e:27:fb:b1:0e:09:b2:
         90:fa:93:31:a1:30:64:54:44:ad:4a:05:fe:b6:a4:be:b1:62:
         f7:8d:51:c6:f1:c4:db:5e:7d:c2:f2:a5:3f:e9:18:d7:d0:0d:
         13:85:f9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:17:39 2026 by rpki-client