Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
File:                     Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft (raw, json)
Hash identifier:          Et64ojk2Q/kA+aXEp3MTiuawgVSIo5E3UKkB9uEDSgc=
Subject key identifier:   87:26:3B:30:F1:A9:52:B6:6A:B3:B3:6B:7B:30:8A:D0:8C:2D:CE:C5
Authority key identifier: 61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31
Certificate issuer:       /CN=61b866e323382caea961e7d2423e53cab5099131
Certificate serial:       01A0CE23D75462B436356F55BF23E4431107
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
Manifest number:          1A6E
Signing time:             Wed 23 Sep 2026 12:00:50 +0000
Manifest this update:     Wed 23 Sep 2026 12:00:50 +0000
Manifest next update:     Thu 24 Sep 2026 12:00:50 +0000
Files and hashes:         1: 3NvaP4jwnxyquzF_hN6kLglmCmg.roa (hash: Nsv2y6WLDnP92qEGM7EKKYxvpNlDKbWC2r1e4LF2X0U=)
                          2: QsJVa7ALHglGVdigmvX7md5Q674.roa (hash: 22/vuBN3pEmuYMdjZicb7ImHZcbO8Ev5qKlpNkyNuag=)
                          3: Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl (hash: b/idq4ljvwrG8WX1PWao9CyMopXmPVfhy+oRSod2MMk=)
                          4: gTHdBZc2eflWqrCp3nQE8ztvzAo.asa (hash: oQhkHMVJEFmdZLPh6Ty3pNL8Nfw1d0mwKKX008hSzi4=)
                          5: lpSnG-y0Lsx00PzPj6wFEetzroU.roa (hash: 8nc2ssk8ohlYgfLFFN1OlzwafOrvoQKJGYQ+TMSGKjY=)
                          6: vnsB4kAOFnGsHN9CBVoZnqSF5lo.roa (hash: WojFRS0zJ8gYXjOIS9R3kP7lD+l+nHPXLrf3+5L0IXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:23:d7:54:62:b4:36:35:6f:55:bf:23:e4:43:11:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b866e323382caea961e7d2423e53cab5099131
        Validity
            Not Before: Sep 23 12:00:50 2026 GMT
            Not After : Sep 24 12:00:50 2026 GMT
        Subject: CN=87263b30f1a952b66ab3b36b7b308ad08c2dcec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:da:1c:82:7f:d6:3e:ce:43:6c:62:01:3a:18:
                    83:36:f2:c4:69:92:29:53:31:e4:44:ea:12:1b:b7:
                    74:de:4e:89:9f:49:63:b3:6d:44:d9:78:f5:8b:c2:
                    7c:3a:60:0e:cb:76:16:ef:f1:eb:45:6d:3d:af:94:
                    6c:76:63:e2:50:89:a2:cf:1b:26:33:fa:1b:2b:8d:
                    35:6c:2c:e8:1b:bf:17:fc:5a:64:39:e2:27:f9:6d:
                    35:97:48:29:e8:c1:23:8d:6e:c0:73:59:31:0f:fa:
                    e6:00:f0:84:59:d9:b4:5a:4d:d8:b1:0e:98:e7:1d:
                    a4:97:af:0c:98:09:d0:09:bf:ce:22:25:4c:c9:0a:
                    e4:1c:4d:99:cd:ac:60:07:f3:03:1b:b7:00:28:ca:
                    e7:61:02:2a:7d:93:33:9f:5d:ff:7d:ce:a2:fa:ab:
                    8f:ad:fc:9d:59:0e:a7:45:1a:e3:ae:ea:e0:aa:1d:
                    84:16:75:c8:e2:ce:dd:74:09:d5:45:f0:9b:d9:57:
                    10:e9:14:a7:9b:31:53:b4:36:7d:57:8d:d9:01:d1:
                    17:1b:ab:6f:70:3e:06:29:78:68:c9:e1:51:ad:67:
                    a8:c4:eb:17:b1:68:25:72:67:52:8a:3c:13:90:1a:
                    93:f3:b2:9c:c4:14:3d:e8:89:1e:47:06:74:57:87:
                    a7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:26:3B:30:F1:A9:52:B6:6A:B3:B3:6B:7B:30:8A:D0:8C:2D:CE:C5
            X509v3 Authority Key Identifier:
                keyid:61:B8:66:E3:23:38:2C:AE:A9:61:E7:D2:42:3E:53:CA:B5:09:91:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ybhm4yM4LK6pYefSQj5TyrUJkTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4ef4a9-6d96-4989-9c81-d92e68dfffe4/1/Ybhm4yM4LK6pYefSQj5TyrUJkTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:10:0d:fe:08:f2:68:b3:ab:ed:38:67:34:48:13:66:75:44:
         cb:8d:8f:6e:ef:cf:1b:59:24:0d:17:d2:9b:65:1b:d4:75:45:
         fc:8f:11:d1:b6:94:11:d9:73:76:f9:3b:14:d2:ee:ce:20:f3:
         b3:d5:e5:d7:53:e8:b0:e1:f4:96:a4:cf:3b:63:4b:4e:f1:5c:
         36:03:a9:c6:69:ae:06:cd:a2:3c:e1:5e:bc:d8:30:a7:be:7a:
         62:28:e4:d3:35:4c:26:25:12:4a:9a:37:2e:2d:62:37:10:5f:
         2a:06:c2:0e:a3:97:7f:42:fa:d8:70:fe:55:85:f7:bc:9f:32:
         68:92:79:ba:da:be:8e:c5:08:33:b6:3d:fc:f1:5a:b3:4b:36:
         7e:08:e1:48:0d:a3:bb:de:2f:50:2e:41:fb:a1:fd:16:60:8d:
         24:aa:19:45:b5:47:a5:87:7e:4d:14:23:22:e9:13:04:34:6f:
         ed:5b:26:1c:76:bb:cb:63:7a:19:93:89:02:fa:9f:49:46:49:
         68:17:eb:d8:b3:38:b3:77:c6:2c:c8:7e:b9:68:47:31:26:4f:
         18:28:e4:94:bf:2f:80:fb:cd:df:88:46:cb:6f:50:44:36:f6:
         8c:fd:30:3c:63:e1:a8:b9:53:7b:c3:03:bc:57:10:b4:d8:8e:
         96:42:d2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:17:14 2026 by rpki-client