Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
File:                     yoFg7-OfGjB3_dL68ipkgEtUE4I.mft (raw, json)
Hash identifier:          pMKhTnuhS9HI6FiNh5YN35dFSnqmVVp0CHOLQHjt4Yk=
Subject key identifier:   6F:0F:D3:F3:77:82:02:53:53:8D:3D:3C:C3:AE:EA:76:72:F0:CD:61
Authority key identifier: CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
Certificate issuer:       /CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Certificate serial:       01A0DA28D98D3AE7772516585764E72A50E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
Manifest number:          1711
Signing time:             Fri 25 Sep 2026 20:01:45 +0000
Manifest this update:     Fri 25 Sep 2026 20:01:45 +0000
Manifest next update:     Sat 26 Sep 2026 20:01:45 +0000
Files and hashes:         1: c09YJVIz1gAeeersG-N_XV14zPo.roa (hash: A4WIJzWdDctFX+Ynr5FMyCdWVozIwFvvlX52iKZ/Phw=)
                          2: yoFg7-OfGjB3_dL68ipkgEtUE4I.crl (hash: gYMuTEybj73FmVHVZvLQOvaxor5w7DMRVdEVbpXiNOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 20:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:28:d9:8d:3a:e7:77:25:16:58:57:64:e7:2a:50:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca8160efe39f1a3077fdd2faf22a64804b541382
        Validity
            Not Before: Sep 25 20:01:45 2026 GMT
            Not After : Sep 26 20:01:45 2026 GMT
        Subject: CN=6f0fd3f377820253538d3d3cc3aeea7672f0cd61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6b:5b:b5:88:87:4e:db:60:70:53:97:fd:81:
                    d4:83:c2:c1:85:09:ff:40:c1:dd:f4:80:3a:35:e7:
                    17:4b:34:0c:18:97:d6:8f:a9:f6:7a:f3:92:70:94:
                    b5:20:d0:4a:95:d4:97:96:56:dd:52:3c:bb:7a:ae:
                    51:f5:da:87:40:a8:01:b7:f3:8c:59:18:1c:67:3c:
                    90:7c:4e:03:1d:15:c8:1d:1d:48:d8:f6:b3:69:b2:
                    2b:25:0c:7e:0e:6a:3c:4a:ee:c6:b1:1c:d1:c8:4b:
                    4b:3a:30:e3:75:b5:2b:d9:23:e0:52:a2:1f:02:89:
                    24:8d:e6:96:dd:0b:b5:2c:ac:00:b6:55:7d:9b:f6:
                    33:98:22:99:4a:09:d4:f2:c8:55:3e:d2:88:13:95:
                    ef:31:e6:59:29:ec:c4:06:03:6f:6d:fa:35:3f:62:
                    71:ef:c7:15:3f:c9:e7:d6:3e:fa:6c:f2:7f:04:ee:
                    f8:f8:7d:45:8b:42:ea:38:d8:ba:69:10:9d:ab:1b:
                    23:d4:37:e5:32:d2:dd:ea:97:66:0c:22:75:3b:7a:
                    c0:c8:71:d5:0e:46:ea:ba:cb:3f:71:6b:dc:64:8a:
                    e8:1a:5d:ad:45:a2:67:6a:f2:b2:6b:d1:dd:e3:ea:
                    da:fe:9b:7b:5d:58:34:a0:ef:88:b4:2d:31:fc:75:
                    a8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0F:D3:F3:77:82:02:53:53:8D:3D:3C:C3:AE:EA:76:72:F0:CD:61
            X509v3 Authority Key Identifier:
                keyid:CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:22:3e:20:ab:0a:99:c7:5a:1f:c4:fd:2b:9f:76:8b:36:f5:
         59:b7:2a:0e:57:14:1b:e7:46:da:1d:8a:37:28:9c:e7:24:93:
         7c:ad:61:74:0a:a5:8c:1a:3d:dd:d2:b9:7f:b1:f5:fa:15:e5:
         8f:c2:12:e8:81:d1:b8:be:c0:74:a7:cb:46:f7:a4:c9:4b:48:
         82:7b:96:0c:a8:77:50:aa:47:ec:93:cb:b8:80:ae:3a:17:77:
         f3:69:84:9c:60:cc:04:23:7d:b2:e7:3d:e8:41:05:a6:a6:f0:
         e3:60:b4:08:7a:47:7a:ef:24:7b:d1:fc:c4:5f:da:ec:14:3e:
         a0:c0:28:a0:11:16:38:27:76:9b:5d:bd:18:da:3b:85:68:88:
         d9:64:d0:87:67:86:c8:16:98:98:0c:86:d1:d5:8d:bb:59:cf:
         d3:7e:03:88:5e:31:fd:c9:b6:27:55:9c:36:62:ed:95:39:ec:
         7f:f1:36:8f:d0:3d:7a:4d:77:5b:7e:79:0c:b6:eb:1c:c1:3a:
         db:2f:40:b8:81:c6:c4:b5:09:be:ab:6b:07:8a:56:8f:e8:eb:
         d6:eb:e5:1f:4a:d9:75:8b:cb:70:83:c9:f5:67:a0:b9:2c:6b:
         f9:5f:7f:6e:c7:af:e0:5d:56:b3:6c:ce:23:5b:20:e7:cd:92:
         92:4a:f7:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKNmNOud3JRZYV2TnKlDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhODE2MGVmZTM5ZjFhMzA3N2ZkZDJmYWYyMmE2NDgwNGI1
NDEzODIwHhcNMjYwOTI1MjAwMTQ1WhcNMjYwOTI2MjAwMTQ1WjAzMTEwLwYDVQQD
Eyg2ZjBmZDNmMzc3ODIwMjUzNTM4ZDNkM2NjM2FlZWE3NjcyZjBjZDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGtbtYiHTttgcFOX/YHUg8LBhQn/
QMHd9IA6NecXSzQMGJfWj6n2evOScJS1INBKldSXllbdUjy7eq5R9dqHQKgBt/OM
WRgcZzyQfE4DHRXIHR1I2PazabIrJQx+Dmo8Su7GsRzRyEtLOjDjdbUr2SPgUqIf
AokkjeaW3Qu1LKwAtlV9m/YzmCKZSgnU8shVPtKIE5XvMeZZKezEBgNvbfo1P2Jx
78cVP8nn1j76bPJ/BO74+H1Fi0LqONi6aRCdqxsj1DflMtLd6pdmDCJ1O3rAyHHV
Dkbquss/cWvcZIroGl2tRaJnavKya9Hd4+ra/pt7XVg0oO+ItC0x/HWozwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8P0/N3ggJTU409PMOu6nZy8M1hMB8GA1UdIwQY
MBaAFMqBYO/jnxowd/3S+vIqZIBLVBOCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW9GZzctT2ZHakIzX2RMNjhpcGtnRXRVRTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kMjUwMTUtN2QyNC00YWQ1LWEyYzEt
YWM0ZTI4YzJjNWI2LzEveW9GZzctT2ZHakIzX2RMNjhpcGtnRXRVRTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kMjUwMTUtN2QyNC00YWQ1LWEyYzEtYWM0ZTI4YzJjNWI2
LzEveW9GZzctT2ZHakIzX2RMNjhpcGtnRXRVRTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSI+IKsK
mcdaH8T9K592izb1WbcqDlcUG+dG2h2KNyic5ySTfK1hdAqljBo93dK5f7H1+hXl
j8IS6IHRuL7AdKfLRvekyUtIgnuWDKh3UKpH7JPLuICuOhd382mEnGDMBCN9suc9
6EEFpqbw42C0CHpHeu8ke9H8xF/a7BQ+oMAooBEWOCd2m129GNo7hWiI2WTQh2eG
yBaYmAyG0dWNu1nP034DiF4x/cm2J1WcNmLtlTnsf/E2j9A9ek13W355DLbrHME6
2y9AuIHGxLUJvqtrB4pWj+jr1uvlH0rZdYvLcIPJ9WeguSxr+V9/bsev4F1Ws2zO
I1sg582Skkr3DA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:57:17 2026 by rpki-client