Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File:                     yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier:          /9iM02AV3FebRO7mPP10cmArt9/BBSp+IhHEJ/mO9lU=
Subject key identifier:   5A:03:07:45:B2:7B:B9:CF:CE:47:D8:D7:40:4C:13:17:A1:51:87:F9
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer:       /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial:       01A10BEFD60B5475851C5411E784B0E633AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number:          1219
Signing time:             Mon 05 Oct 2026 12:00:29 +0000
Manifest this update:     Mon 05 Oct 2026 12:00:29 +0000
Manifest next update:     Tue 06 Oct 2026 12:00:29 +0000
Files and hashes:         1: pkANJWQGRxeYUhe9QHaxt_kkCZ0.roa (hash: JQPpr1NgeNVkQnAHd4pZVUEgVBBePxibUcmbvm5s/ds=)
                          2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: 5vY2xU9Hjx4Av5+PTA0d6YJZtdeKUgfqR5SgYMqhnIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 08:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0b:ef:d6:0b:54:75:85:1c:54:11:e7:84:b0:e6:33:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
        Validity
            Not Before: Oct  5 12:00:29 2026 GMT
            Not After : Oct  6 12:00:29 2026 GMT
        Subject: CN=5a030745b27bb9cfce47d8d7404c1317a15187f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a9:bb:f7:d4:23:a2:d5:3a:48:e5:56:3c:aa:
                    67:4a:94:5b:83:6c:9e:76:f4:da:0d:8d:7b:90:2b:
                    eb:3a:5c:92:27:92:3c:c1:5b:2b:9e:a5:ae:af:75:
                    fe:c2:fa:6b:62:f8:1a:87:09:8d:ec:56:3c:e2:ba:
                    e6:6a:df:4d:91:7b:7d:9e:a8:20:00:e3:1c:f3:a9:
                    12:a9:3b:c4:45:36:9c:9b:c7:0b:4a:72:7c:2d:1a:
                    85:11:ea:3a:b4:7b:91:b6:c5:55:d0:6b:28:00:1e:
                    e6:91:d0:20:78:1f:c5:be:c8:96:31:57:bc:e6:84:
                    5e:0c:d3:53:e6:db:f7:c4:d3:7d:48:5c:ce:2d:1e:
                    75:ed:f9:e9:e1:c7:b4:d1:c8:73:d6:5d:e2:35:bc:
                    7d:dc:fd:7c:6e:69:f2:c1:6e:7d:07:2d:df:05:78:
                    20:c6:3f:ad:ac:5f:64:c4:3f:54:64:8e:98:2d:11:
                    30:58:a2:6c:f0:6a:0e:0a:f6:83:ff:cf:22:cd:14:
                    bb:25:53:b2:24:af:79:d2:e1:4f:1b:5c:42:e2:08:
                    c3:6d:60:31:a3:9a:b3:e4:1c:5b:f6:9c:48:61:ce:
                    d2:bf:76:ff:54:50:b0:11:90:99:13:62:55:65:9b:
                    d6:b3:d0:3f:4b:5a:4e:84:f9:43:63:e6:fb:e8:9e:
                    80:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:03:07:45:B2:7B:B9:CF:CE:47:D8:D7:40:4C:13:17:A1:51:87:F9
            X509v3 Authority Key Identifier:
                keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:73:1f:34:33:34:6d:b9:0d:00:94:ef:5d:51:63:ee:df:3e:
         41:4d:a6:02:55:3d:cd:6f:28:0b:d5:4d:24:f5:ca:a2:bb:27:
         a1:a9:ad:cc:5c:50:85:6f:7c:68:1c:8d:8c:9a:3e:91:f8:d0:
         0a:30:bd:08:ce:97:f8:43:8c:6a:a5:4c:b8:55:6f:3d:9e:5d:
         55:20:53:71:5e:29:4a:c9:db:b3:76:fb:5c:2a:39:18:d1:6f:
         fe:7c:6e:65:8b:c3:75:34:eb:1f:0b:81:2e:8d:66:94:e3:e9:
         f5:f1:ca:99:46:e5:39:9a:4f:8d:29:60:2a:c1:e1:23:11:ef:
         68:b6:d3:a5:b0:fd:af:7a:3e:50:a7:4e:74:67:f3:9e:c8:1c:
         a4:60:0a:02:f4:3f:de:07:0e:50:d2:c7:37:ab:3f:67:67:44:
         06:63:2f:3b:5d:ae:a8:0f:ec:ed:f9:b2:b3:13:1a:cc:2e:84:
         80:bc:81:bd:68:5b:0c:83:b6:83:d6:e9:9a:bb:fe:55:92:e5:
         ee:fb:2d:31:15:f4:60:76:3d:92:b6:bc:f2:6b:ac:2a:d4:87:
         5c:7b:06:41:94:1b:e8:ef:2c:8f:17:0f:57:ef:26:e1:96:91:
         d6:96:32:aa:a5:5c:ab:ad:50:32:2d:a4:e1:b2:dc:dc:4b:7a:
         96:39:30:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:40:10 2026 by rpki-client