Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
File:                     _YgaVMfaqF6iOSqTEpRXjbzWp3c.mft (raw, json)
Hash identifier:          jd5AMimte/n1j66QxIoz7r/92bmpcFPv7HDajAbL2uc=
Subject key identifier:   33:FD:39:45:17:4A:A0:79:5D:9C:39:57:73:8E:6D:E8:9D:EF:3E:0F
Authority key identifier: FD:88:1A:54:C7:DA:A8:5E:A2:39:2A:93:12:94:57:8D:BC:D6:A7:77
Certificate issuer:       /CN=fd881a54c7daa85ea2392a931294578dbcd6a777
Certificate serial:       01A1DE39D3E7A197F97A64336028A4B30BCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
Manifest number:          0663
Signing time:             Sun 15 Nov 2026 08:01:34 +0000
Manifest this update:     Sun 15 Nov 2026 08:01:34 +0000
Manifest next update:     Mon 16 Nov 2026 08:01:34 +0000
Files and hashes:         1: Z9p5PRsPJcpcfVYqAkMqyBk3034.roa (hash: w8kHokFeQrpMZQbH5ifwyBNepwmmhZrhfy48stCdHV4=)
                          2: _YgaVMfaqF6iOSqTEpRXjbzWp3c.crl (hash: luPwAIPL5i0pz/nmuDwmf/zL7PJZcbwOxyYKOwo9QOA=)
                          3: hsde82Yn0Zai2KfVvOVvRJQkb6s.roa (hash: asD6OtDzLwUtMA2lL6s9NrcsSrhXt/W0aGYMIPz5FEY=)
                          4: ri3qi_3hbETchxAIYuVxET53Irk.roa (hash: E9/Qz2B3fdQEYvjVj/oCKg6LSUvau7pLbXfE6BliNuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:39:d3:e7:a1:97:f9:7a:64:33:60:28:a4:b3:0b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd881a54c7daa85ea2392a931294578dbcd6a777
        Validity
            Not Before: Nov 15 08:01:34 2026 GMT
            Not After : Nov 16 08:01:34 2026 GMT
        Subject: CN=33fd3945174aa0795d9c3957738e6de89def3e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:42:75:82:f4:15:54:7b:b2:6b:2c:f9:b1:
                    59:a9:e6:00:4a:ac:f5:8e:a5:36:78:42:fe:4b:88:
                    d1:fa:8b:9b:dd:b0:6b:95:99:28:ee:c2:1f:c1:23:
                    2c:9e:ef:00:d7:da:c8:d6:62:19:48:6e:44:d1:59:
                    69:f3:ee:18:66:96:f1:c6:7d:90:e8:8e:28:37:bd:
                    d5:5e:28:c9:60:9f:44:39:17:3f:de:7d:0d:19:01:
                    b9:05:a5:4c:25:8d:60:d7:36:a4:3b:4d:d9:7d:cd:
                    f5:67:93:6e:c8:2f:be:c2:70:17:60:f5:ec:8f:85:
                    82:2b:ee:5d:ef:67:46:04:ef:fe:a6:fc:9b:73:a4:
                    99:50:b1:bb:b4:6f:95:0e:fd:30:96:02:0a:ab:e4:
                    c9:5b:29:00:6a:1f:5e:6b:c5:f1:3d:b2:39:6f:2d:
                    9a:fc:1c:79:55:7d:2e:0f:38:65:73:66:c6:e7:cb:
                    f5:ba:dd:04:df:dd:8d:72:41:12:70:9d:1f:95:70:
                    20:fa:72:79:cd:f7:bf:0e:23:f8:76:59:2c:ca:31:
                    18:71:d2:34:d7:9c:af:b3:ea:4c:7c:dd:e1:25:10:
                    72:fe:64:4c:5c:a7:f2:8b:77:bc:c4:51:c0:3b:d7:
                    ca:28:59:bd:93:dc:ed:73:cd:f9:1d:42:df:cb:35:
                    df:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FD:39:45:17:4A:A0:79:5D:9C:39:57:73:8E:6D:E8:9D:EF:3E:0F
            X509v3 Authority Key Identifier:
                keyid:FD:88:1A:54:C7:DA:A8:5E:A2:39:2A:93:12:94:57:8D:BC:D6:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YgaVMfaqF6iOSqTEpRXjbzWp3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bcb796-5941-4c97-ada6-bcd85f00e138/1/_YgaVMfaqF6iOSqTEpRXjbzWp3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c1:c4:3d:8c:56:46:df:76:20:7b:92:51:04:20:ec:44:23:
         b6:e8:91:87:75:a2:77:09:8b:58:5d:a4:28:73:98:68:d4:e9:
         f3:2f:ed:0b:52:8c:f9:93:4d:fe:33:2c:cd:52:b2:5c:eb:09:
         fa:3f:e3:d2:05:06:5f:06:c4:06:4f:dd:95:04:cf:89:25:a0:
         cc:83:b0:95:9f:21:92:13:ac:25:65:1c:df:cf:06:aa:97:81:
         bc:30:8a:d7:2d:f9:c9:1b:68:4c:92:dc:fc:41:76:2e:68:5e:
         1a:6c:62:c4:40:cf:62:52:52:66:eb:fb:9f:62:36:97:35:ce:
         b8:5c:40:a9:5e:2a:e2:51:b0:42:b5:40:27:ae:75:e2:cb:03:
         05:17:f1:04:89:07:7f:1b:c3:90:6e:82:0d:89:86:0d:db:66:
         c5:0c:65:93:55:4f:70:68:30:b0:99:2c:6a:10:34:aa:8c:b8:
         e0:0d:e0:e1:41:74:35:9c:65:c9:99:35:ac:c2:b7:50:64:3d:
         ca:4d:65:7e:ba:57:00:b0:36:b9:c4:f2:56:67:5a:93:30:ba:
         b0:c2:09:3e:d1:0d:41:c2:99:ef:a8:60:c9:18:ba:33:f2:c6:
         18:50:cd:79:6a:1d:c9:52:48:82:c7:09:f8:4a:c5:0e:2e:b5:
         4c:ef:f7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:59:11 2026 by rpki-client