Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
File:                     yxODRz6KqHJwaPx1LgYOPb9j4O8.mft (raw, json)
Hash identifier:          AyhLj8Ypp1usG9XgX1Ougr7SzhKqVEvpuLp+1nCzbpM=
Subject key identifier:   82:79:DB:5C:B3:3A:9D:81:2D:29:C5:99:E8:D3:E3:B1:38:9F:B1:45
Authority key identifier: CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
Certificate issuer:       /CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Certificate serial:       01A0D6F0C15681765468914C8C9B7B30EA79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
Manifest number:          0C2B
Signing time:             Fri 25 Sep 2026 05:01:37 +0000
Manifest this update:     Fri 25 Sep 2026 05:01:37 +0000
Manifest next update:     Sat 26 Sep 2026 05:01:37 +0000
Files and hashes:         1: 153fjxVtV5IdmULjsKFsyho7xsA.roa (hash: sMHTNIGNQvUhkdN5VlDx3F2+I4FUHbgADAQUyA3sCa0=)
                          2: yxODRz6KqHJwaPx1LgYOPb9j4O8.crl (hash: tnOPd7gPQPSrhR2KgeNtnmYkTyqpeWquG4B3ZQKjjjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:f0:c1:56:81:76:54:68:91:4c:8c:9b:7b:30:ea:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
        Validity
            Not Before: Sep 25 05:01:37 2026 GMT
            Not After : Sep 26 05:01:37 2026 GMT
        Subject: CN=8279db5cb33a9d812d29c599e8d3e3b1389fb145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:88:20:62:cc:74:d0:4e:f2:82:76:f0:7f:
                    e8:5f:66:84:66:e0:b2:5e:9e:b1:bb:45:9f:2b:9e:
                    61:c2:9d:ba:d1:32:0f:0c:68:e7:d3:9f:77:e4:55:
                    69:1c:b2:65:4f:63:1d:c4:80:67:2b:6e:24:26:ac:
                    93:49:a6:d6:41:1e:a4:c0:1f:b9:ad:23:f7:51:34:
                    e2:30:79:6b:11:97:c0:b4:80:f4:7b:0d:b7:07:7e:
                    83:1e:45:00:8b:e0:ed:1d:25:fe:cb:b6:9c:cc:22:
                    3e:a8:d5:b2:49:36:ab:c0:d3:b1:6f:bf:ff:a9:86:
                    2f:64:dc:bc:c2:a3:39:f0:c2:d5:c0:f4:f5:99:f1:
                    ee:82:48:d1:f4:dd:ab:40:37:55:62:60:ed:84:a8:
                    ff:62:d0:e8:ca:c9:dd:b8:30:77:9f:69:5d:8a:d7:
                    d2:1e:25:61:8b:e3:6e:d4:e6:84:2d:ed:87:0e:98:
                    c5:77:e4:4c:75:ec:b3:f6:ba:07:09:62:11:fb:75:
                    2b:03:86:55:f8:28:b3:09:74:cd:b7:47:9f:1e:61:
                    15:19:10:a1:36:7b:f9:dc:33:f3:63:01:7f:de:0c:
                    d4:37:75:72:e9:aa:c8:3e:d5:f8:c6:0e:05:d2:9a:
                    7b:2c:e0:7a:b5:dc:b9:98:ea:fe:c3:6a:9d:32:c5:
                    ad:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:79:DB:5C:B3:3A:9D:81:2D:29:C5:99:E8:D3:E3:B1:38:9F:B1:45
            X509v3 Authority Key Identifier:
                keyid:CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:cb:d2:e1:8d:85:47:a4:04:dd:bc:c1:0c:c8:73:e0:74:b2:
         c2:fc:1d:28:4b:99:61:a4:77:a0:c6:b0:76:4b:4b:5c:07:a8:
         28:75:2f:09:3b:99:1e:70:83:59:d6:e1:22:1d:02:d8:d6:43:
         0b:7b:60:6f:9b:29:c0:22:63:a6:98:d0:a0:f3:34:55:a3:8b:
         74:0e:f6:17:e0:86:8d:7f:37:55:6d:8c:a1:75:07:84:5c:ed:
         ca:a8:49:4b:65:60:2b:14:29:c0:87:eb:99:58:4b:ec:ca:f1:
         79:7f:10:31:b8:2d:ee:ee:a3:e2:48:b5:ee:0d:a3:4c:fa:54:
         82:c5:29:ed:98:71:b0:d0:b2:84:b0:e7:95:b0:42:eb:7e:d7:
         e8:ce:05:69:18:43:d2:d5:ec:fa:0a:3d:b7:8a:e7:f7:66:b5:
         ef:4e:7d:5f:f2:ff:63:7e:28:95:b2:71:60:a3:25:00:90:cf:
         28:06:6d:dc:6d:4b:ca:4b:ff:77:b7:3a:d9:7e:cd:73:ee:f1:
         93:e7:81:bf:7d:89:43:fa:1f:fc:f6:80:7f:d4:a2:a7:89:c6:
         10:3c:17:6d:62:fe:46:53:4f:cd:81:28:4f:5b:63:10:1c:3e:
         59:a3:9b:12:95:cd:96:e6:9a:77:dd:af:41:b5:24:9f:28:cc:
         e4:08:dd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:12:14 2026 by rpki-client