Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
File:                     yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft (raw, json)
Hash identifier:          aik1y3NhtPWwB/HSZWH23nkTBCR1iHVjeqdBWHlqjJ8=
Subject key identifier:   5E:6F:F5:FF:F5:F3:01:BE:2A:5D:B5:76:1C:AA:10:02:34:10:85:DB
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Certificate issuer:       /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial:       01A0D64BF04C9990C9CD7EEFE77393423A41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
Manifest number:          17CD
Signing time:             Fri 25 Sep 2026 02:01:36 +0000
Manifest this update:     Fri 25 Sep 2026 02:01:36 +0000
Manifest next update:     Sat 26 Sep 2026 02:01:36 +0000
Files and hashes:         1: 2Rt9Gwr4sjkr8DA_k8J0_h0v0S4.roa (hash: tqZC3K8qhKl5fCuSFTCvvWh/uoUIwg2YeD8aanIXDKI=)
                          2: G6JvpqCYvPpC7VM1ZZPSfJgdNhc.roa (hash: D1iE+lUItdHWGUL+J972PCDTzMoGyX6bUifXJiUpjwY=)
                          3: ivio5KeVWRux6XlRxWuFL231juo.roa (hash: Em/PVIA83JxuedRO9ip2PoK/WCsTEwUOVUS8akfMdh8=)
                          4: lUtDTycr7tmHl8som-NIOGSL4hQ.roa (hash: bob91L00C+zBJmnNvfIjHOpV1SfQVQs/iVPuHdwEzf0=)
                          5: tWOuO39d71f5m4fAGnZWNgBEmoQ.roa (hash: 9CQk4BPxr4B6xZlS3j9hWqhPr4OQvnm1ZyCmYYoOxCM=)
                          6: yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl (hash: SkzMDfjfJ4MoRflaYFt532fj99TpVmuEkXXa75gyMP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4b:f0:4c:99:90:c9:cd:7e:ef:e7:73:93:42:3a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
        Validity
            Not Before: Sep 25 02:01:36 2026 GMT
            Not After : Sep 26 02:01:36 2026 GMT
        Subject: CN=5e6ff5fff5f301be2a5db5761caa1002341085db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:c3:02:6c:19:61:87:d5:7a:07:5f:b5:3c:
                    26:e5:04:d1:f3:57:4d:25:0f:05:57:92:31:b6:0a:
                    48:51:ab:67:79:db:23:58:35:c4:d8:36:ee:ce:50:
                    d0:24:9f:e3:87:c6:10:71:12:b7:cc:a9:5a:2f:a5:
                    3e:af:39:95:76:57:43:9b:c4:95:6f:63:8e:f2:5e:
                    b2:95:90:f2:47:8a:1e:24:e1:5d:f6:86:c6:86:40:
                    7d:6b:6d:f8:f1:11:7c:8d:df:7e:31:ee:01:84:42:
                    07:8a:de:03:47:37:34:03:38:ec:ea:84:dc:ed:fe:
                    58:7f:fe:b6:c1:3c:6d:e4:b4:ec:9b:c1:03:58:70:
                    2e:f0:7f:c1:0e:fe:7f:52:98:b4:95:ad:d1:41:2a:
                    97:76:a4:46:3e:90:1e:8e:06:78:ae:81:61:62:cf:
                    a5:69:08:6e:40:1d:61:c5:9f:e4:6c:4a:6d:87:71:
                    3a:3b:0c:94:b4:6b:69:41:09:a2:18:35:61:b2:4f:
                    7e:71:97:7a:c3:58:5d:b6:c0:70:19:9c:d1:6e:51:
                    3c:88:b1:ca:a4:28:18:a5:c3:c8:b8:9b:9c:2b:71:
                    4b:b5:93:34:53:ee:d4:09:c1:c5:4a:5a:04:de:92:
                    05:bc:ab:53:1a:42:cf:5b:71:db:45:58:cb:22:dc:
                    28:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6F:F5:FF:F5:F3:01:BE:2A:5D:B5:76:1C:AA:10:02:34:10:85:DB
            X509v3 Authority Key Identifier:
                keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:1d:17:e4:e0:52:22:84:c2:3f:e4:a1:f5:19:0e:d3:fb:3b:
         7c:f3:4b:da:0f:47:f0:72:f2:c4:68:83:da:5a:f9:c0:89:30:
         3d:33:88:e7:d1:01:2e:39:f7:32:34:ba:07:3a:09:3c:f4:12:
         3b:84:5d:3a:92:ee:16:db:28:ef:1f:33:e2:70:da:a8:80:8a:
         91:39:c7:fd:14:e4:9f:57:6c:56:3b:cd:26:cc:c5:33:09:0a:
         4f:df:8c:cc:53:11:ad:6e:60:02:19:0e:09:85:59:24:4e:f1:
         fb:55:c7:85:05:58:eb:44:a3:f4:61:61:ab:9f:56:92:38:3a:
         07:7a:fa:78:63:a6:1c:0d:32:3e:89:90:f3:13:72:55:fc:5c:
         45:6b:15:93:ee:6e:05:3f:f2:19:0f:b2:52:b7:30:b6:5e:f9:
         ae:f7:e6:7c:87:52:e1:19:76:5d:82:00:2f:cd:ac:4f:9c:43:
         02:2d:0e:76:ed:93:a0:8d:d0:42:7f:80:74:c5:45:dc:a7:36:
         ef:da:c4:a7:a4:35:1d:dc:d4:9a:f3:59:6a:c5:34:bb:9b:bd:
         ea:eb:32:88:b7:f6:02:db:6c:e0:e0:9e:46:40:80:54:80:7b:
         25:88:bb:f9:02:1c:8d:80:c4:76:63:18:d7:7d:64:90:d7:ab:
         09:a3:47:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:24:09 2026 by rpki-client