Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
File:                     yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft (raw, json)
Hash identifier:          7/vrok5BuFShs+AUGrkfsIdewOkloWb8pMC/IC9NBns=
Subject key identifier:   2C:90:81:0B:6A:83:EF:7F:02:DB:82:0E:79:10:34:7B:82:6F:BA:F3
Authority key identifier: CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D
Certificate issuer:       /CN=caafc093c3c4256d114a8edc0d06c73cb63e186d
Certificate serial:       01A0D570C728F1364FC5AA4272A0C32FB4E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
Manifest number:          1A6E
Signing time:             Thu 24 Sep 2026 22:02:12 +0000
Manifest this update:     Thu 24 Sep 2026 22:02:12 +0000
Manifest next update:     Fri 25 Sep 2026 22:02:12 +0000
Files and hashes:         1: mS3XkJ4Q1gQOb2HyUmXLd_7xoqM.roa (hash: b9RP78cWIQGh4Wfub2kbb9UWqKpzH9C6agCfF1Zol/M=)
                          2: yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl (hash: vS2mzy/flfcGfZT9dqvyFoTtKvIAb5JMPwJ3PhxFbq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 22:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:70:c7:28:f1:36:4f:c5:aa:42:72:a0:c3:2f:b4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caafc093c3c4256d114a8edc0d06c73cb63e186d
        Validity
            Not Before: Sep 24 22:02:12 2026 GMT
            Not After : Sep 25 22:02:12 2026 GMT
        Subject: CN=2c90810b6a83ef7f02db820e7910347b826fbaf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:be:3a:56:64:14:f3:36:60:43:b9:60:5d:
                    9a:a5:3e:6c:f5:ae:5b:6e:2e:b7:06:ba:9b:7f:4d:
                    ef:38:a0:b1:76:5f:68:c1:29:5b:5b:7a:0e:21:0e:
                    49:02:7a:c1:d1:c4:50:81:7c:7b:b2:7f:bf:e8:98:
                    61:85:96:18:ec:f2:fc:0d:36:a0:de:5a:4f:e6:5d:
                    01:02:c0:e0:c4:1f:3b:14:df:cc:b1:48:87:7e:95:
                    b6:c5:36:ae:48:e9:ca:15:22:c0:1c:7b:b4:2d:a5:
                    92:ec:76:81:c6:b2:a4:b9:2e:28:5c:7a:a7:70:49:
                    b9:03:b0:73:18:4d:42:ce:e8:1b:61:b0:ea:7d:d9:
                    b9:56:63:65:ce:df:45:3b:a3:1e:03:a6:39:e0:0b:
                    34:3f:8e:f5:30:df:55:a2:8d:e1:dd:31:89:a6:dc:
                    74:29:5a:17:d9:56:f7:fc:bd:fd:c7:e3:08:36:fc:
                    20:f8:2b:50:e5:7c:d7:13:08:31:0b:67:1b:0b:54:
                    6e:d2:41:bf:61:2b:cb:8e:7d:a1:ee:52:c8:8e:89:
                    35:53:ca:d8:75:00:f7:10:ec:b4:51:bd:03:2b:98:
                    b7:34:ff:da:99:54:1c:f7:e4:c0:e9:7d:ff:f8:40:
                    91:76:d5:33:0f:96:0f:d6:16:71:ac:ef:8b:73:a0:
                    4a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:90:81:0B:6A:83:EF:7F:02:DB:82:0E:79:10:34:7B:82:6F:BA:F3
            X509v3 Authority Key Identifier:
                keyid:CA:AF:C0:93:C3:C4:25:6D:11:4A:8E:DC:0D:06:C7:3C:B6:3E:18:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8825b4-ff08-4916-ae05-893fbe5911b0/1/yq_Ak8PEJW0RSo7cDQbHPLY-GG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:cb:b6:6c:ce:46:f4:b8:9c:72:47:02:0a:d1:ab:e7:ca:82:
         2a:2b:55:c4:fc:86:8b:e8:26:4a:a8:de:00:c6:32:9a:71:20:
         a7:a8:48:cd:8b:e7:01:76:e6:25:75:a5:7b:86:85:61:08:a4:
         fe:a8:e5:f0:79:62:79:2e:c6:8e:fc:72:da:08:28:94:b4:74:
         98:7f:9e:85:98:e9:41:5f:22:05:36:4b:ea:3c:e6:bb:3c:3b:
         4c:a0:46:aa:40:59:e4:90:b2:07:72:1d:ed:c2:ab:fb:f5:8a:
         f6:b3:b8:73:1d:5a:4a:7c:83:6a:30:6c:ca:09:15:5f:f2:22:
         e1:d8:c4:6c:c0:69:b9:fc:fc:9d:7c:d3:5d:4f:23:ce:8c:66:
         60:1f:e2:62:1a:c2:bf:24:a0:f9:6e:a2:83:73:65:d5:50:73:
         a5:e0:31:dd:00:74:33:6e:e4:c1:3c:76:7d:ec:62:7b:48:a9:
         3e:6f:c2:44:79:e4:9b:61:39:01:fa:91:b1:c8:39:fb:87:16:
         b0:10:ec:23:63:ef:4f:23:2c:e9:15:56:ce:f6:79:7c:4e:99:
         ba:09:d3:af:f0:dd:3f:b9:49:8c:49:72:0a:51:53:92:e9:bf:
         f9:1c:3b:29:52:87:3f:4f:ab:1e:8f:95:d2:d5:44:9b:d4:25:
         4d:ad:ae:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:12:01 2026 by rpki-client