Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
File:                     yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft (raw, json)
Hash identifier:          8fslZaa0DEfsc1MNOTz7qfOVs3yLRUo3Ea5qG6mhXCE=
Subject key identifier:   9E:1B:FC:35:B6:B9:23:20:2F:BC:EA:48:80:9B:38:1B:6A:79:16:A0
Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
Certificate issuer:       /CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Certificate serial:       01A0DA5F38677A207E8E92ADA135F572C287
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
Manifest number:          1A76
Signing time:             Fri 25 Sep 2026 21:01:08 +0000
Manifest this update:     Fri 25 Sep 2026 21:01:08 +0000
Manifest next update:     Sat 26 Sep 2026 21:01:08 +0000
Files and hashes:         1: XE0uV5aWkakbXto1CgcBdZIztP4.roa (hash: Td1DQRkpx9SC0wJzCk6gDumqozx5Hu6He8/fRNyLpFI=)
                          2: YJ9HBfugKV0TxthqLm9MDPEsBq4.roa (hash: muct2cn0yyydW85h1pmTm+JomLouMfLTPtPtoA/rvMA=)
                          3: qBCwaPOh1kM_Brblbd-aN4oLWvE.roa (hash: UhhYSexpgw2WJktE7OGu7b0Flql+JwXaUYjyUOXWJqg=)
                          4: vTeQphfN2kOOEUbtX-iDOET61jg.roa (hash: d96uQbpZZgvCDIsBrz8d/YthfALSsMKs+VoyzsKFeiU=)
                          5: yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl (hash: J1kXbBYBa+CKmVTEJSCFtRC0UnqvaVY7tAdZ4rLj4R4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:5f:38:67:7a:20:7e:8e:92:ad:a1:35:f5:72:c2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1
        Validity
            Not Before: Sep 25 21:01:08 2026 GMT
            Not After : Sep 26 21:01:08 2026 GMT
        Subject: CN=9e1bfc35b6b923202fbcea48809b381b6a7916a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:39:33:87:78:91:46:91:08:fb:a3:09:e5:
                    f9:b4:3d:44:99:1d:ac:1d:da:5d:60:30:15:1c:6f:
                    e0:dc:5a:51:e9:4b:1c:a3:9a:be:0b:8a:cd:ef:77:
                    d2:d9:5b:d2:cd:10:30:88:ce:06:b3:d5:12:15:46:
                    20:0f:f3:45:80:fe:df:9b:32:de:d1:de:49:ef:15:
                    b2:00:a0:11:82:34:93:71:13:55:fd:49:54:3d:2c:
                    a6:85:a6:bd:1c:b3:5f:7a:eb:57:a5:a6:36:a4:89:
                    56:01:e5:a2:12:d0:eb:99:f1:a6:5b:9c:88:e4:1f:
                    dd:fc:7f:bb:4d:18:d9:46:44:ad:64:a9:a7:4f:f4:
                    25:21:1f:35:3c:77:2e:4d:fa:92:45:a2:19:12:25:
                    d7:82:3d:e4:1d:c3:af:35:29:46:40:ab:ed:df:9a:
                    e2:c7:85:e7:65:f1:7e:04:6b:74:ff:d3:be:fa:35:
                    f8:bf:23:36:5f:98:2f:ad:7c:2a:dc:f9:77:13:4b:
                    7b:18:0b:92:ac:c4:80:89:3f:88:88:90:17:41:c1:
                    82:d9:4b:e7:8a:5d:d7:3d:d2:10:d8:a1:b1:2c:0f:
                    4b:09:a3:c7:3f:25:2c:1d:aa:79:84:22:81:c8:06:
                    2d:6d:b3:de:a4:e5:87:9f:00:ea:01:25:5a:96:4a:
                    56:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1B:FC:35:B6:B9:23:20:2F:BC:EA:48:80:9B:38:1B:6A:79:16:A0
            X509v3 Authority Key Identifier:
                keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a2:66:ce:5e:5f:4d:97:d5:ff:c7:34:c5:37:1f:c5:28:3c:
         c9:14:0b:32:c0:e4:ca:a4:e8:3e:b2:bf:9e:8f:11:2c:b6:bb:
         c7:48:79:4b:7a:19:12:2e:28:64:6f:4e:9a:e1:1e:ca:e0:32:
         2e:69:9c:53:b1:83:f2:e2:ae:e1:be:d8:a1:41:74:55:d8:1b:
         9e:b7:21:76:cf:fa:61:12:ea:7b:67:49:f8:14:41:75:eb:13:
         d1:cc:60:d7:3d:08:01:a0:1b:62:10:96:de:0e:f3:ad:bf:e3:
         c1:bd:cc:e8:20:71:3c:df:5b:be:f7:e9:8e:e6:65:d4:03:94:
         03:35:2b:df:a1:fd:3a:2a:12:a3:d0:fb:9a:c3:96:a7:ad:d4:
         80:07:60:3e:d8:e3:08:e6:85:12:b4:70:19:d5:af:f1:e4:4b:
         a6:6a:15:96:eb:1d:0a:a6:70:94:73:ae:21:a8:8b:bd:72:4c:
         8d:e5:1c:2f:35:f5:af:85:62:86:5c:b5:9a:79:45:4d:14:88:
         06:eb:bb:39:e0:a9:62:73:cc:f9:18:2c:9d:e9:1c:0b:34:b8:
         f8:3e:ef:5f:a3:0d:14:b0:8c:d6:7a:5e:30:25:21:e3:4a:f8:
         9f:ad:07:f1:d0:7b:0f:21:5a:92:ba:19:9b:4c:8f:37:62:6e:
         67:f9:5d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:12:26 2026 by rpki-client