Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
File:                     yYuCXzbpzDMDFclA3oAMurzjOXs.mft (raw, json)
Hash identifier:          8NKdNfSjPqp8SdImWqxUPmdAXx+Zx7SK/j5uTGzapXw=
Subject key identifier:   BB:22:67:30:77:E8:17:15:77:50:A5:9C:55:D3:6A:C3:E8:13:5E:1F
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Certificate issuer:       /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial:       01A0DA5F1D8AA9370BB759C21CA8B71EF9A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
Manifest number:          1683
Signing time:             Fri 25 Sep 2026 21:01:01 +0000
Manifest this update:     Fri 25 Sep 2026 21:01:01 +0000
Manifest next update:     Sat 26 Sep 2026 21:01:01 +0000
Files and hashes:         1: BIg9g8urjWzblnNO_lVEgCU_0L4.roa (hash: Zkf0cuxdTPBJNDfyoYR/TqE/qjZVNjVMgcTyzgopEr0=)
                          2: Iphm7z7updBWRc2PNItoZmhVxuU.roa (hash: ld3zzmRGDXodfmUypvYiol82dEtF61c0SzZg6YzCfrA=)
                          3: T0TpEfENHz0bxlptxB0nFINW90A.roa (hash: TVxTNouu1BfDbucKooEPdLrXN8aLRFVGM4/IuDaxZE0=)
                          4: fpWqB6GHlXOWcBg30kWtguLx_NY.roa (hash: fXvgv1LhXoBErsUNrvQ4zZ5bYi/IxJJ6Qaj/JGmSwZU=)
                          5: hRup2JJMWBOF-WiIMoiCnCzzApo.roa (hash: /227YrF7k3BWfB+D58mu+onRUSZxRqZuv9vNnJFuS4M=)
                          6: yYuCXzbpzDMDFclA3oAMurzjOXs.crl (hash: RUfaCnmZYUVtvvOorJkBloWIKeNdxgriZRgKLwrRPZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:5f:1d:8a:a9:37:0b:b7:59:c2:1c:a8:b7:1e:f9:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
        Validity
            Not Before: Sep 25 21:01:01 2026 GMT
            Not After : Sep 26 21:01:01 2026 GMT
        Subject: CN=bb22673077e817157750a59c55d36ac3e8135e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:37:57:dc:c6:99:01:71:7e:11:f4:de:e9:c3:
                    cc:af:40:3f:20:d4:89:ea:50:83:12:92:58:4f:d5:
                    43:a5:b5:64:ff:b9:50:52:23:8c:6f:0f:c7:61:f4:
                    5c:8c:4e:12:ba:f2:e5:d1:e4:ff:cf:c1:5d:43:88:
                    6f:b0:b6:20:3c:fe:1d:59:aa:aa:e2:63:6b:a5:41:
                    e0:37:49:78:43:da:c0:aa:4f:80:00:c8:c2:f3:c7:
                    cd:00:a8:be:d1:18:54:e0:98:b6:34:0d:60:32:cc:
                    6f:78:89:f2:11:7d:ee:20:0d:65:af:44:a8:74:0a:
                    da:a8:9f:7e:90:d0:b2:05:79:7c:df:24:f1:e8:bc:
                    18:f2:24:49:2e:65:29:6e:b7:c9:fd:61:e9:49:eb:
                    82:0b:38:ce:11:77:63:21:f9:a7:b3:fc:e8:f0:f8:
                    82:28:5a:14:19:20:d7:7a:c0:08:0e:dd:73:f0:1f:
                    74:61:c6:fb:51:d9:c8:77:88:5e:5b:f4:d8:71:d8:
                    bd:d8:05:e4:08:aa:78:78:72:e8:ba:14:52:a4:0b:
                    ab:8b:40:ff:1d:39:83:ea:5c:28:f0:26:61:e1:11:
                    70:75:2f:bf:22:e9:a4:9e:70:7c:e0:cd:c8:c7:48:
                    83:95:34:08:ee:b3:0f:08:09:2d:6e:06:57:7f:f5:
                    c7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:22:67:30:77:E8:17:15:77:50:A5:9C:55:D3:6A:C3:E8:13:5E:1F
            X509v3 Authority Key Identifier:
                keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:03:74:82:ca:9b:ac:e4:1c:71:a5:c5:28:56:de:58:c9:4a:
         c3:12:9e:aa:b6:df:ae:1f:04:44:d9:20:01:79:17:ee:54:36:
         52:3c:4f:3c:1f:b4:24:1f:13:a3:6e:fc:0e:08:3e:98:b7:a1:
         c3:d1:27:ff:b9:89:7b:74:40:f6:f5:ee:c1:61:b5:4d:ac:9b:
         b7:0d:27:de:d4:2c:f7:fc:81:b6:80:af:f6:b1:4f:ac:b4:d2:
         c8:17:cf:64:f1:8a:43:39:72:d7:36:71:56:38:a0:08:e4:b3:
         7f:ce:a4:b9:75:0c:3b:7c:44:14:f9:4e:d4:b2:28:1d:87:cb:
         4a:e7:16:77:a5:f9:ff:46:5b:cd:0d:7f:2e:fd:cb:98:57:cc:
         c2:7f:d1:bb:62:c5:48:01:a2:fc:eb:ab:9a:3a:15:2e:8d:02:
         1d:53:9b:07:a7:a8:39:85:c4:bd:a9:09:5e:92:28:7d:2d:09:
         3a:8f:97:84:2a:90:7c:a8:7f:8b:e1:96:24:59:09:c4:44:db:
         d3:35:03:67:a2:e2:ea:aa:1c:5b:f6:76:23:d8:3f:ba:43:3e:
         ca:b4:52:68:d4:94:c2:ab:a6:09:f3:1a:e1:0e:d6:17:12:0e:
         fd:4b:a3:aa:9d:f8:74:db:bf:09:0a:bc:ce:d4:3f:be:7b:7a:
         4d:c7:98:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:14:51 2026 by rpki-client