Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.mft
File:                     Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.mft (raw, json)
Hash identifier:          jvt20dm9w8WSuwXEZXmyLWnGqmHJJ6QR/aRV4PJYj5o=
Subject key identifier:   FD:BC:24:9D:04:CE:09:E1:00:EA:AC:E7:03:48:DF:0A:78:29:27:80
Authority key identifier: 63:F4:2E:D5:F7:BD:1B:25:AF:9B:EC:15:D2:D9:C7:E8:2C:50:46:12
Certificate issuer:       /CN=63f42ed5f7bd1b25af9bec15d2d9c7e82c504612
Certificate serial:       01A0D6B985C792E71ABA1B7207F74B55AD26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.mft
Manifest number:          C5
Signing time:             Fri 25 Sep 2026 04:01:17 +0000
Manifest this update:     Fri 25 Sep 2026 04:01:17 +0000
Manifest next update:     Sat 26 Sep 2026 04:01:17 +0000
Files and hashes:         1: BED9GISLCJhk0pThitFKhHhPnWQ.asa (hash: 6cUNoJrVBhHEyPZpndIyjIlnjwedGAHfcHstbr3UCqM=)
                          2: Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.crl (hash: ysf7tZIEtFZ8s9/Dk+O/6F/OCtrsAdnQ8exrcVh/e9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:b9:85:c7:92:e7:1a:ba:1b:72:07:f7:4b:55:ad:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63f42ed5f7bd1b25af9bec15d2d9c7e82c504612
        Validity
            Not Before: Sep 25 04:01:17 2026 GMT
            Not After : Sep 26 04:01:17 2026 GMT
        Subject: CN=fdbc249d04ce09e100eaace70348df0a78292780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b2:95:ed:aa:37:ea:ff:0a:44:92:dc:a8:c9:
                    5e:86:e1:74:71:70:78:ac:9c:4f:fe:46:67:50:ec:
                    51:0e:b7:0c:27:6f:9f:4c:93:5f:49:4b:7f:b2:90:
                    b6:3d:9f:0d:f1:eb:20:42:4e:4d:16:e6:dd:b0:ae:
                    cb:ce:49:f6:ff:b1:e3:6a:46:31:98:9b:5e:dd:5e:
                    15:2c:01:01:1a:12:ef:e0:0e:bc:5d:e3:bf:87:b9:
                    3c:f9:a6:22:8b:96:87:97:52:49:83:bc:df:7c:3c:
                    5e:ad:69:7d:82:a0:f7:d0:e8:fe:3c:fc:ee:cc:89:
                    26:28:0f:88:60:82:e7:97:2e:c4:81:bb:a9:68:51:
                    c4:0d:cc:f1:fe:36:17:06:e1:61:b5:b4:9d:86:23:
                    d1:5b:13:28:e7:fa:e1:f6:54:ce:b9:b1:8f:94:0e:
                    eb:c7:60:7e:8c:5c:4a:ca:ba:4d:72:29:1f:39:1e:
                    ec:28:03:f5:09:df:fc:7f:74:28:58:30:90:b4:41:
                    06:62:4f:4d:6d:54:10:1c:36:bd:ba:46:b2:f5:f5:
                    8e:0e:9f:59:47:43:6e:19:91:a2:47:1f:9a:d0:09:
                    e5:5b:b7:b8:a9:73:71:ca:08:1c:be:3b:01:eb:57:
                    81:43:bf:b7:77:de:07:50:85:ed:e7:53:8a:70:83:
                    38:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BC:24:9D:04:CE:09:E1:00:EA:AC:E7:03:48:DF:0A:78:29:27:80
            X509v3 Authority Key Identifier:
                keyid:63:F4:2E:D5:F7:BD:1B:25:AF:9B:EC:15:D2:D9:C7:E8:2C:50:46:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e58456-ec5b-461b-bac8-15d1316c9e6c/1/Y_Qu1fe9GyWvm-wV0tnH6CxQRhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:3e:49:9e:df:aa:6f:49:db:1c:bb:87:26:cc:fb:2b:fb:3f:
         9e:41:6e:4f:4d:40:a5:42:dc:db:94:e4:5c:69:9b:fb:62:01:
         76:61:3d:c2:6e:5f:62:fe:9d:b6:fc:58:7c:ee:29:06:c5:e9:
         99:98:b7:cb:64:62:ce:c7:17:eb:32:88:ce:10:4a:1e:88:e9:
         30:1d:12:f7:1f:25:22:c4:06:06:23:1c:97:04:45:31:e9:f7:
         13:24:b6:21:af:f8:d4:25:6c:1b:3f:7c:4e:ef:db:d1:43:53:
         8f:63:07:7a:53:6a:7b:ba:3a:d4:59:fe:01:6d:4f:fe:24:a2:
         94:f1:b5:f8:aa:db:d8:ea:03:81:81:ca:a5:95:39:c8:45:f2:
         22:fd:cc:be:27:c1:7c:64:af:19:8e:81:25:e3:2e:3a:27:55:
         e0:3f:6a:3c:7e:62:0b:88:a0:8f:d4:52:37:b8:8d:57:7e:c6:
         93:c6:3f:f3:36:0d:8b:4c:d3:4a:da:38:a0:71:5d:3f:60:7a:
         ab:a5:71:4f:0a:7d:40:7e:83:b0:81:2e:f3:92:42:52:22:0d:
         2e:ca:97:23:3d:0f:03:b6:ce:7a:53:82:d6:5a:8a:f7:3f:e2:
         b3:a2:66:03:02:4c:55:90:02:0d:76:04:db:71:37:cf:4c:c4:
         8e:ad:3d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:31:44 2026 by rpki-client