Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
File:                     1-YoC0gxrfeNXEl84sXNcobkfh7M.mft (raw, json)
Hash identifier:          pcs7L7R0xgTwAwVzcFxdbnbt4BfXvea2tmALo9q0URU=
Subject key identifier:   9E:7C:87:15:A3:0F:96:7C:53:CF:73:8F:F1:F1:C3:05:0D:94:1D:A9
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Certificate issuer:       /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial:       01A0DB0434D96B50AAE3C02C5EFC3B335617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
Manifest number:          1858
Signing time:             Sat 26 Sep 2026 00:01:21 +0000
Manifest this update:     Sat 26 Sep 2026 00:01:21 +0000
Manifest next update:     Sun 27 Sep 2026 00:01:21 +0000
Files and hashes:         1: 1-YoC0gxrfeNXEl84sXNcobkfh7M.crl (hash: GLQ32SBGWZ8vUA36tXUI6Y+nPeUoKq6lzzbA8uB6YCM=)
                          2: RB5RbNlzRrb86Q06Ud7SSxD--CQ.roa (hash: QgnbMUj23g9e+onnvipNTDHyLiE4Irsi1X62S6yWUWU=)
                          3: RSVz78TcKbJ_MD2cXbiNpiqEht8.roa (hash: Kfj8dlgOkrkqzxLNOoYn0mrD7CiBslCwzAqLBRZZ8qg=)
                          4: VNWZz5w67dWdq-1tiXTZUwje9aI.roa (hash: CCl3JeV4fnIeVXFy/sDyCJUN2cZ+asTf5jw5AL/GHMo=)
                          5: lsF9aarhfVrWYAYvkAQqJ9HkY7E.roa (hash: FCxsh7JN5PbgfVu6BkJdT2PXO8vqzwg3TmeMEKVCTFw=)
                          6: o8qBYm0XB-DKW0l9z4LxLJjVMt8.roa (hash: 6+/jpm9f+1fc/q145oBtk8Pmiq4grW2fLOR+zKT6VOc=)
                          7: vwVgz0AlWqP316EcZY-4ylK0yIA.roa (hash: FuDRoo1XnKDsM6Yjjqt7YCB9VBp4VwF44kzWhYXP7o4=)
                          8: yxG_U6JQIIcrFpALA3Q0FlRxRRM.roa (hash: sCR0T+FP+eVmMckcKFXbsL8e1kdYc/sg61tKHkiV1Sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:04:34:d9:6b:50:aa:e3:c0:2c:5e:fc:3b:33:56:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
        Validity
            Not Before: Sep 26 00:01:21 2026 GMT
            Not After : Sep 27 00:01:21 2026 GMT
        Subject: CN=9e7c8715a30f967c53cf738ff1f1c3050d941da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f8:e7:14:e6:d6:71:19:6b:8f:f9:5d:5b:58:
                    2c:fc:3f:12:22:68:24:f2:f6:82:6b:34:ed:51:94:
                    03:92:eb:25:4a:2d:25:2f:0e:3f:2c:c9:e7:34:7b:
                    fb:94:e3:6f:21:c0:d0:38:af:4a:27:49:8b:f0:26:
                    1a:0b:13:10:58:f8:af:9b:f0:09:57:c8:69:a8:fd:
                    21:dd:bc:06:45:fe:c3:cf:1f:fb:3f:72:ed:6e:ea:
                    ae:9b:5a:3f:6d:ef:db:56:35:ec:6b:1e:84:e9:f9:
                    24:c4:e9:0c:29:78:6b:cd:59:8b:55:82:d8:d4:77:
                    0d:2f:4e:e3:c4:60:2a:dd:45:0e:59:e2:2d:6f:7d:
                    e6:9d:04:72:47:6b:5e:65:4f:83:eb:02:8f:0c:34:
                    be:e9:83:75:49:37:07:af:0c:a2:f2:ad:6b:5e:b2:
                    c4:53:b4:1f:43:55:5d:be:d8:b3:6b:22:c6:a1:7b:
                    3a:fb:37:07:2e:a4:52:93:d4:b3:f7:e6:f4:44:ff:
                    ca:7f:42:c0:f4:3b:79:57:04:cd:1f:6e:56:9c:0c:
                    24:e5:01:ba:1e:93:5f:3a:b8:49:25:b7:f7:f9:61:
                    09:e6:86:d1:9d:c0:04:a4:3c:f5:26:d4:1d:43:94:
                    8d:d7:19:41:f4:b4:9e:a7:6e:7e:75:a6:4b:1c:08:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7C:87:15:A3:0F:96:7C:53:CF:73:8F:F1:F1:C3:05:0D:94:1D:A9
            X509v3 Authority Key Identifier:
                keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:81:bd:d9:e7:a3:38:95:84:52:08:fb:c9:8a:3b:9a:a0:6b:
         9e:23:e9:71:21:e8:a8:18:7b:ea:15:81:55:b6:25:f6:af:85:
         2f:49:1c:2e:10:0b:14:c1:62:52:93:b4:49:60:ec:98:c5:3c:
         4a:6c:ab:fc:08:17:b3:2c:bf:0c:aa:19:ac:79:f0:df:ee:81:
         ff:54:73:28:1e:07:5e:17:b4:cf:80:31:95:67:cb:ca:fa:72:
         75:f2:0c:a8:63:99:60:fd:5b:ce:64:83:61:31:dd:6f:a1:99:
         8b:a5:73:71:20:7a:3f:8c:4e:b7:87:7c:57:25:e8:39:5c:a3:
         bd:f0:db:c1:3c:2d:ba:15:3b:df:29:8c:32:67:bd:1d:c6:d9:
         06:27:a9:86:fa:82:14:5a:cc:d2:ef:cc:dc:6a:1b:53:64:1e:
         35:69:c0:ae:70:89:ee:73:77:4c:5a:ac:32:76:3b:32:f7:83:
         ba:12:1a:04:c3:ae:4f:dc:ab:42:4b:08:aa:41:d0:48:7b:96:
         55:9a:5d:26:a0:31:ee:59:a4:b4:7d:8a:68:53:d9:b0:a4:07:
         33:b1:6a:a7:1c:c3:f7:8e:cd:cd:13:e6:b0:32:9b:c1:24:c6:
         4f:49:98:57:31:00:dc:20:4f:56:19:9e:6c:86:db:67:e0:2e:
         1e:0d:c6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:13:46 2026 by rpki-client