Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File:                     Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier:          yjhVgfpNXMQjP7UT1SU5jNoZc1KpTQ1RdEqT9ORmlRs=
Subject key identifier:   F2:AE:DC:C5:63:E8:E5:38:A6:D8:9C:86:51:E4:94:CA:F4:C8:A4:62
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer:       /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial:       01A0D9BB1505E981B63B83D3B6D62C971B42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number:          1A7A
Signing time:             Fri 25 Sep 2026 18:01:51 +0000
Manifest this update:     Fri 25 Sep 2026 18:01:51 +0000
Manifest next update:     Sat 26 Sep 2026 18:01:51 +0000
Files and hashes:         1: 8EQw8scn945EBI3nr8f8oaXNu5k.roa (hash: Pc5eAGErA0CLNaCRm8m5LzZW6f6RQyf0pkKeLb9c9vc=)
                          2: GkXYgdVFP2_HexVVs3gomnNY70U.roa (hash: Aaxv9YVnKsaCjNY2StCqQ1xmto/cCalggSwSd56aIwk=)
                          3: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: 1GJxPV4xLct0LbH7+53rOirjbZMFsLNVdyLMRF9QZng=)
                          4: hcEiOVl0IV3IE4216hs1e5DZGR4.roa (hash: ZC5U5qcJYYjeF6N2SbLW1XrnWze6Jseft5QLvx76FJw=)
                          5: jVymcQq0h9Y68MDNVjUwnbOR388.roa (hash: MSWDR6kx5EFIH7f8Omshc4kgj1g3khlr4OFNZuTrRzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:bb:15:05:e9:81:b6:3b:83:d3:b6:d6:2c:97:1b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
        Validity
            Not Before: Sep 25 18:01:51 2026 GMT
            Not After : Sep 26 18:01:51 2026 GMT
        Subject: CN=f2aedcc563e8e538a6d89c8651e494caf4c8a462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b7:51:78:66:c2:0e:47:9f:7d:86:79:af:05:
                    f1:37:16:e1:4d:63:84:bb:71:79:a2:d2:05:87:06:
                    f8:1f:97:b8:e3:d3:ae:01:47:ce:18:74:b0:74:ed:
                    9a:ae:94:24:a8:62:0a:1d:bb:ee:3b:02:61:95:88:
                    ce:0a:e1:fb:72:a4:8e:67:cc:b1:8a:c4:e7:10:7b:
                    21:84:f3:21:a2:67:73:88:85:0c:9e:ea:c3:0e:be:
                    4b:92:6b:70:6d:a7:4a:7a:8c:4c:66:1d:4b:dd:1d:
                    48:dc:d0:a0:d3:41:5c:65:69:49:c2:f7:ed:58:a9:
                    87:1c:8b:13:a1:b0:80:54:75:0e:2b:ce:43:e3:a6:
                    77:37:2c:e2:fb:2c:d4:56:05:e6:b4:b0:a9:7e:1c:
                    a9:01:a2:2f:13:98:5d:2f:a6:30:ff:8a:54:1f:59:
                    98:30:eb:28:0b:ea:45:97:c4:53:64:21:a2:92:11:
                    43:58:e2:db:91:fe:7b:f1:57:58:1c:9d:fd:b7:e1:
                    d3:46:e6:ce:4e:b0:6a:f5:e5:0d:81:b2:db:ca:96:
                    33:3d:ee:61:91:98:ce:21:b7:f4:c7:6d:2c:97:d9:
                    3a:9a:b7:7f:e8:c6:39:df:da:a6:72:92:9a:50:70:
                    63:d2:00:14:e7:1f:4a:56:11:03:03:cc:ce:c1:f9:
                    5f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AE:DC:C5:63:E8:E5:38:A6:D8:9C:86:51:E4:94:CA:F4:C8:A4:62
            X509v3 Authority Key Identifier:
                keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:df:99:05:b8:77:db:b3:a5:94:2a:12:84:d9:b7:7b:34:3e:
         cd:3c:20:ec:9e:33:3b:06:7d:27:8a:14:72:89:1d:88:5f:d7:
         48:34:ac:0c:a8:36:11:5a:aa:79:dd:21:1a:53:ee:a3:a9:d4:
         39:7e:76:d5:19:57:a2:77:d4:d8:2e:82:db:d6:a9:e7:d8:36:
         b3:a5:1f:6f:f2:5a:cc:9e:6e:8d:38:b2:de:e9:0d:f4:66:aa:
         40:3a:7f:98:0f:88:ee:be:0f:f5:76:b2:09:56:ab:b7:9c:f3:
         d9:a5:17:f3:38:88:53:a5:3a:84:71:a8:ae:a9:83:24:77:65:
         91:77:b1:5c:31:6c:39:1f:46:1c:b2:f9:c6:e6:ce:0f:6a:05:
         0a:4a:a6:21:15:67:a5:e8:81:46:73:a8:76:c5:59:85:a7:7e:
         a9:08:97:de:c8:74:35:19:b8:65:8e:bf:09:00:de:db:a3:3c:
         08:bc:8b:9c:9a:7c:1a:49:46:90:ed:f1:23:2b:8f:95:04:5b:
         1d:01:37:6e:e8:cf:28:df:06:14:1c:61:d4:34:bc:cf:6f:4b:
         7a:e4:e2:cf:68:f7:c8:26:04:d6:98:99:b1:06:7b:07:c4:4c:
         3e:04:2c:73:84:3a:ae:04:69:3f:fa:71:5e:8e:ea:5e:d2:17:
         f1:05:7c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:19:15 2026 by rpki-client