Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
File:                     yAkUktLOioDAh7h2-R1qPCm-eiU.mft (raw, json)
Hash identifier:          6T6KpiOuyl1FCoVqn1I7TLPZ646m9oGJgA2R+NVd4Qk=
Subject key identifier:   3E:B4:83:B8:A8:10:76:39:E4:3E:D5:D4:A2:3B:5E:74:64:21:EF:B2
Authority key identifier: C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25
Certificate issuer:       /CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
Certificate serial:       01A104A4B49399969F4E3139DBD480862192
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
Manifest number:          1080
Signing time:             Sun 04 Oct 2026 02:01:05 +0000
Manifest this update:     Sun 04 Oct 2026 02:01:05 +0000
Manifest next update:     Mon 05 Oct 2026 02:01:05 +0000
Files and hashes:         1: 8dsL3d0zKteGNgXAMQBV42lOios.roa (hash: Pev55fmq4J10EVCjxW4G+QGn2d3P5hztkv0FQEW8Zn0=)
                          2: yAkUktLOioDAh7h2-R1qPCm-eiU.crl (hash: 6LqBO9N07rDbgiO7NkkWLSuRML0etdEYZ5dSzOo/MLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 00:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:a4:b4:93:99:96:9f:4e:31:39:db:d4:80:86:21:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8091492d2ce8a80c087b876f91d6a3c29be7a25
        Validity
            Not Before: Oct  4 02:01:05 2026 GMT
            Not After : Oct  5 02:01:05 2026 GMT
        Subject: CN=3eb483b8a8107639e43ed5d4a23b5e746421efb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:06:96:ee:85:2b:d9:8d:93:b1:47:35:04:15:
                    34:d0:0c:bd:d1:6d:44:aa:97:6e:e7:17:40:0e:d1:
                    58:4b:9b:f8:5d:c0:cf:24:eb:72:0e:a4:dc:e1:7e:
                    22:77:bc:92:e8:e4:e8:80:54:49:d1:4b:20:be:53:
                    8e:9a:c4:ac:45:17:8b:c9:ec:a5:70:1b:96:e3:9c:
                    02:b1:46:4a:64:9b:95:64:3a:ab:a4:4d:21:17:ae:
                    62:3d:d3:98:51:3f:8e:3c:c5:7a:80:5a:27:a3:b1:
                    ce:54:e0:0f:00:b5:91:11:af:62:a4:bc:93:f9:d6:
                    30:ea:a2:ae:64:f0:03:f3:52:df:26:fe:a0:eb:b5:
                    22:90:2c:76:c0:c9:9e:be:23:71:df:21:77:70:d7:
                    7c:96:46:08:5d:1e:8c:54:15:75:e3:c8:ae:bf:bd:
                    08:10:1a:ad:24:06:48:b3:e1:ec:69:b2:cc:2a:21:
                    35:f7:58:dd:a3:50:58:29:f9:c4:d3:2a:54:20:57:
                    b1:8d:ec:19:3b:0d:82:57:94:91:8f:e6:38:3a:3d:
                    ec:a6:9f:d9:8f:21:50:e9:ad:68:10:7e:1d:39:cf:
                    d7:ff:d1:8f:ad:f8:6d:0b:10:a9:71:9d:96:3c:2f:
                    a6:82:d6:7e:da:51:90:48:43:02:7d:13:b1:82:db:
                    b9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B4:83:B8:A8:10:76:39:E4:3E:D5:D4:A2:3B:5E:74:64:21:EF:B2
            X509v3 Authority Key Identifier:
                keyid:C8:09:14:92:D2:CE:8A:80:C0:87:B8:76:F9:1D:6A:3C:29:BE:7A:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAkUktLOioDAh7h2-R1qPCm-eiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c35a99-f87a-4211-af7a-81e2106a5857/1/yAkUktLOioDAh7h2-R1qPCm-eiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e4:28:2b:1a:fa:7b:e0:41:12:8a:9f:af:73:03:48:d6:bf:
         b7:eb:21:11:11:84:a9:6b:68:77:1d:db:80:fe:09:9d:98:0f:
         2d:85:56:ea:a5:bf:8b:3e:05:36:c5:34:f8:f1:64:5b:cc:cb:
         66:d5:3a:7c:6e:f5:8b:d0:aa:72:8d:5b:f8:61:10:a4:08:f1:
         91:5f:00:08:81:46:e7:5f:65:d5:3e:a9:a4:00:c2:1c:89:9e:
         c3:5f:64:40:b3:a0:e0:c3:1e:a7:17:43:a3:53:9d:ac:ee:5e:
         65:4e:bd:6f:63:f7:bd:af:ec:48:db:67:6c:26:00:87:4f:7b:
         c0:b1:2a:36:84:0c:2a:a6:30:10:93:de:c5:42:ac:e5:16:f1:
         f6:4a:a1:67:be:25:17:d1:37:65:91:9f:27:cc:a7:f8:6c:38:
         92:f9:e5:92:b8:19:aa:4d:9e:77:2f:cc:95:f9:7d:0b:b1:ea:
         dd:d1:1b:0d:ee:1d:e2:2f:d9:04:e7:57:52:2d:5b:a5:d3:eb:
         18:5e:8e:79:18:a9:70:37:c2:bf:2a:05:7d:c2:9e:8a:75:e0:
         b6:bd:0e:f0:11:42:fe:b8:fa:9d:c7:24:47:5b:e6:f4:19:04:
         ea:17:1a:ca:c9:c3:a5:ec:2a:a9:17:f1:bd:f0:74:62:35:00:
         3c:c9:25:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:33:14 2026 by rpki-client