Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
File:                     YKVAzkUEVjReyOCY709TY010vx8.mft (raw, json)
Hash identifier:          nAry3cyMbUjs6s6Nve4aRIP7+84SthpWbo7YNUiU1r4=
Subject key identifier:   B0:F7:F5:38:45:EC:A7:23:78:99:81:47:95:D7:19:C4:27:E0:D3:49
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Certificate issuer:       /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial:       01A1DBA655BF38724E514A089E5280A9B826
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
Manifest number:          0962
Signing time:             Sat 14 Nov 2026 20:01:13 +0000
Manifest this update:     Sat 14 Nov 2026 20:01:13 +0000
Manifest next update:     Sun 15 Nov 2026 20:01:13 +0000
Files and hashes:         1: 6Mkl-omsDLx9m0bO1mz3oa6tBSo.roa (hash: Zk0U1/P1vQOMHHn2ahaAoT0XpDq9M1hljHTDc0qZE1E=)
                          2: AD3dL38ItgcaG-oFKVYv8zmfTus.roa (hash: DqDKMAFToDn+3i7WatsmOeHGyqsNBV2w2kEv4qRPVMY=)
                          3: JfzkG74hCuXipueYiQnJYRqjhXc.roa (hash: /UjZLGM2bizX+MblKNId48l/mey7CKbKk+KDmswLAkY=)
                          4: YKVAzkUEVjReyOCY709TY010vx8.crl (hash: 2F4Pxb4JIygTDQKQNINlIux9p8eWk+qSUW12jCL/Le8=)
                          5: jjAcTZsE6SWG5o6mtHHOl3_x8mc.roa (hash: nUynGoee1lekBHyQycCWjTotr3IB8hCilEBQKb53ky0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 20:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:a6:55:bf:38:72:4e:51:4a:08:9e:52:80:a9:b8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
        Validity
            Not Before: Nov 14 20:01:13 2026 GMT
            Not After : Nov 15 20:01:13 2026 GMT
        Subject: CN=b0f7f53845eca7237899814795d719c427e0d349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ec:3d:88:00:c2:4e:4e:a4:b5:3b:cc:55:41:
                    b3:eb:d5:14:a2:89:f0:bb:c1:7f:f6:7d:5d:31:08:
                    cd:81:c4:1c:6d:69:49:c5:00:19:59:09:48:99:55:
                    ae:9b:7b:a3:ca:b6:3c:d0:f5:8e:87:2d:da:a6:c0:
                    63:e2:8d:da:18:75:49:60:12:17:75:46:ed:c2:a0:
                    87:97:74:a2:1b:b7:db:be:fc:93:5f:de:9e:d1:00:
                    04:bc:fc:27:5e:31:b9:d4:89:24:79:a7:58:9d:0a:
                    53:eb:ac:c5:de:3b:03:d2:b4:e0:42:ac:36:6a:3f:
                    e1:d9:92:be:b2:65:7f:c6:33:5f:c5:51:2d:8b:e4:
                    79:db:c8:b3:9a:bf:8f:7d:73:19:63:2f:e6:f3:9c:
                    c7:35:63:84:54:56:2c:84:ba:33:5b:34:a6:ab:d6:
                    87:91:44:88:3c:8e:df:a6:26:fe:ea:e1:67:15:45:
                    6d:ca:1c:74:2a:29:7f:0b:70:d7:42:ec:59:f0:6c:
                    be:0c:20:02:aa:e4:84:07:73:de:66:bb:7b:4e:4d:
                    c7:55:46:57:9a:f5:f8:49:a4:d0:94:be:67:ce:c8:
                    70:4b:ea:c9:b7:b3:cf:93:0d:b3:f6:fe:13:19:e3:
                    96:db:8f:a8:b3:59:f3:66:1f:86:1b:bd:af:63:22:
                    d7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F7:F5:38:45:EC:A7:23:78:99:81:47:95:D7:19:C4:27:E0:D3:49
            X509v3 Authority Key Identifier:
                keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:93:67:38:3b:15:8d:9a:d4:8a:f8:ba:aa:fe:cb:f5:98:73:
         4d:a7:3e:bc:09:d3:07:1f:b9:7a:b8:49:99:a2:a3:fe:5d:5d:
         f6:27:06:35:0a:7f:a1:36:9a:68:0e:39:52:bc:94:37:21:c0:
         a9:d8:22:e3:d4:7a:ca:8d:1e:99:7a:34:28:b6:a2:fb:78:12:
         99:6b:fd:ae:68:8c:2b:62:2e:c0:f3:c5:a4:b0:93:be:ba:e7:
         9e:ef:57:d3:b8:3c:65:09:d4:4d:4b:8b:58:aa:c2:f4:b4:54:
         15:e5:c7:6b:50:17:81:ce:00:23:d7:ae:56:9d:74:ff:b2:0f:
         d1:76:e5:95:33:f2:72:66:85:7f:a1:a6:fa:48:89:0c:6f:ec:
         56:e5:10:d3:e1:31:b7:b9:f2:23:d2:89:1f:ef:63:7b:48:e1:
         81:8c:98:ee:c1:44:1c:aa:ed:40:1a:b3:d9:de:b9:29:46:26:
         e2:f4:c2:df:8f:21:a0:3d:78:ef:f2:b0:9a:b8:1c:d4:d0:86:
         28:ed:91:cf:d3:5d:92:9f:0a:f8:fd:2c:4b:99:6e:bc:42:b7:
         e1:29:69:96:27:3e:5c:1d:a6:c6:8f:4f:72:cb:9d:17:fc:78:
         d1:80:ab:14:01:c1:74:cb:07:94:18:85:b3:86:f1:af:68:b6:
         1d:d1:ec:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:09:43 2026 by rpki-client