Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
File:                     YxrKX5odz6GXBNHwN38bn-kUXgg.mft (raw, json)
Hash identifier:          hjUp/TyosEzZeOkDdOcMU2pDcs9omR1r83+X0Usz9TE=
Subject key identifier:   26:B8:41:56:3E:9C:36:70:C1:2D:F9:97:A0:E7:2F:15:F9:87:09:F5
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Certificate issuer:       /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial:       01A0DC853D205CA9DE61B94EBBFEF58E1B68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
Manifest number:          1A75
Signing time:             Sat 26 Sep 2026 07:01:54 +0000
Manifest this update:     Sat 26 Sep 2026 07:01:54 +0000
Manifest next update:     Sun 27 Sep 2026 07:01:54 +0000
Files and hashes:         1: Awm_DabV6b5aFzZjoL4IRRaHXvI.roa (hash: 8OukxgZtrCYr2IAiBPp1+KwaQD8XPdUdi2hA8JM9baM=)
                          2: YxrKX5odz6GXBNHwN38bn-kUXgg.crl (hash: PdYAIML3IyT5l+TRtJv8e2foYVTy5L+AZ9khAwubZCw=)
                          3: llfMrhUWfSkRK5hK0AzdhqQLJv8.roa (hash: hJA3pZdghhHwfd7bRm3Ls7VwTVf1TOxJacXNTFZzVPI=)
                          4: nFnwvZn2y6J_tUGewNTO4fY9C0k.asa (hash: zDo5Ms/ybgPRllQhXvdgQws7ZsKZj1TDWdYoEliu338=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:85:3d:20:5c:a9:de:61:b9:4e:bb:fe:f5:8e:1b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
        Validity
            Not Before: Sep 26 07:01:54 2026 GMT
            Not After : Sep 27 07:01:54 2026 GMT
        Subject: CN=26b841563e9c3670c12df997a0e72f15f98709f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:cf:5a:ca:5c:9f:7a:31:b3:3c:0a:d2:3a:
                    b2:f5:10:9d:a8:94:d5:00:2e:1e:0d:61:20:b0:3b:
                    d1:5f:5b:aa:b4:15:30:43:b4:d7:6d:43:e9:cd:fb:
                    84:6e:40:db:5a:d4:a6:6a:d5:59:a1:ae:eb:5e:92:
                    ed:cf:f8:47:b3:27:65:7a:2a:ed:c8:52:7a:06:28:
                    86:03:95:6e:90:90:c9:36:3f:83:fa:28:7e:10:38:
                    c0:1f:4a:66:8d:e6:57:89:79:0c:06:28:13:50:1a:
                    68:d0:c3:fa:1f:88:84:5b:a3:06:99:75:2f:19:d8:
                    00:7e:31:b2:0a:1a:60:29:ad:4c:22:11:22:ce:56:
                    77:51:7e:fd:46:d3:5f:ad:ba:0b:88:f7:56:0f:dd:
                    da:73:f2:5f:1e:50:6c:78:b2:1d:7f:28:9c:e5:0f:
                    bc:50:8e:77:89:13:fb:f5:9b:33:de:ec:43:75:26:
                    a4:47:9e:da:ed:2b:40:a8:1a:56:98:ef:91:63:c4:
                    c2:4b:41:3d:1e:91:d0:93:03:20:6c:ff:44:9a:f9:
                    17:cd:a6:16:e0:bb:4a:7e:87:8e:ce:75:85:d7:21:
                    2b:79:fe:f3:25:47:93:95:1e:c6:22:01:60:20:7e:
                    6a:54:f1:20:57:79:9f:56:db:4e:94:c9:0f:41:eb:
                    fe:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B8:41:56:3E:9C:36:70:C1:2D:F9:97:A0:E7:2F:15:F9:87:09:F5
            X509v3 Authority Key Identifier:
                keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d1:aa:0c:79:ee:34:d5:40:41:34:5d:d4:be:bf:6f:d8:7f:
         79:63:f1:a1:32:69:8a:dd:81:f8:ce:d9:7a:32:b4:31:f6:d2:
         fd:74:66:2d:92:56:09:05:3d:e8:60:c8:63:ad:26:86:9b:6d:
         e6:b7:7d:8f:81:2f:38:26:d0:fa:77:22:96:0e:26:1b:aa:6d:
         61:67:3f:75:02:e6:e8:cf:6f:ed:21:c0:ac:a2:91:78:d9:e7:
         b7:a2:93:65:5b:5f:f0:25:3e:ac:bd:13:b0:4e:f4:cf:30:43:
         b9:60:2c:6d:e0:76:f1:38:cf:9d:68:81:bb:5b:b1:35:69:44:
         80:9a:43:ce:11:57:98:d4:58:c4:23:15:f9:e5:32:e8:66:48:
         28:40:1f:4c:cc:25:1f:a5:51:18:22:57:87:f0:b6:d0:ff:79:
         23:d2:f3:d2:81:c2:b8:9d:30:33:23:c2:31:da:df:50:2c:47:
         ae:f8:77:5d:3c:6a:f8:b7:e3:2c:12:a6:40:9e:69:ba:57:03:
         1b:c0:89:85:14:c6:10:64:c0:44:67:4d:32:49:76:ee:6b:4f:
         bf:c7:49:12:d3:9c:28:cf:8a:b0:3c:93:0a:5b:ae:6f:d2:04:
         9f:66:7c:21:75:7c:7c:67:56:43:f8:29:24:80:eb:73:9c:21:
         53:6e:46:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:12:50 2026 by rpki-client