Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.mft
File:                     yRi-Y90mFBusC0klaPaK8K3-8-E.mft (raw, json)
Hash identifier:          ooUumWDOzVpF9K+M8L6nHn6/02570NM+eH7PI46u3Vo=
Subject key identifier:   7C:E2:EA:13:74:D5:0D:C8:7F:63:AB:CC:34:45:5C:B1:43:EB:12:2A
Authority key identifier: C9:18:BE:63:DD:26:14:1B:AC:0B:49:25:68:F6:8A:F0:AD:FE:F3:E1
Certificate issuer:       /CN=c918be63dd26141bac0b492568f68af0adfef3e1
Certificate serial:       01A0D728137C8B5696A60539F9C7996930B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yRi-Y90mFBusC0klaPaK8K3-8-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.mft
Manifest number:          0110
Signing time:             Fri 25 Sep 2026 06:02:02 +0000
Manifest this update:     Fri 25 Sep 2026 06:02:02 +0000
Manifest next update:     Sat 26 Sep 2026 06:02:02 +0000
Files and hashes:         1: E8q-XyFOi2dBl2RvmUxvXJg1YGU.asa (hash: 3XtzyTPt7FY4YjjufzBgSB6mrAWr1BGgEnfAC89ctsI=)
                          2: yRi-Y90mFBusC0klaPaK8K3-8-E.crl (hash: yfZCB+vNdaZUwYXQniM0xUVkamPfdzphO1On93G+oAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yRi-Y90mFBusC0klaPaK8K3-8-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:28:13:7c:8b:56:96:a6:05:39:f9:c7:99:69:30:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c918be63dd26141bac0b492568f68af0adfef3e1
        Validity
            Not Before: Sep 25 06:02:02 2026 GMT
            Not After : Sep 26 06:02:02 2026 GMT
        Subject: CN=7ce2ea1374d50dc87f63abcc34455cb143eb122a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f8:c1:12:26:6d:96:aa:01:24:6c:24:f3:f8:
                    89:ca:4c:65:7a:14:50:17:a2:3d:fb:bc:35:ae:11:
                    3a:ac:ee:51:9e:9a:e7:3d:9e:9f:07:09:e5:18:d1:
                    ed:84:e7:99:26:0f:16:d2:08:db:76:f1:1b:ee:a9:
                    7f:25:99:d0:2f:22:94:3a:05:a8:89:f2:fa:55:b5:
                    87:80:67:c6:a7:8f:f0:d4:7b:b4:f4:a4:e3:9d:6e:
                    0b:bf:bb:24:57:43:13:7e:47:02:e3:d8:dd:24:54:
                    26:d2:44:60:ca:ab:d6:59:3f:a7:4f:e4:b4:9e:69:
                    1b:20:4d:d0:31:46:e8:0e:d7:45:20:e6:e3:0b:a8:
                    9d:ee:d5:92:ba:b8:53:15:84:9d:ce:d7:71:52:7e:
                    0c:e0:d9:54:67:39:e2:5f:d7:f5:40:8d:63:38:af:
                    77:e4:05:46:99:48:e2:cf:46:72:aa:c0:f7:6e:f7:
                    56:94:34:b5:06:88:85:bc:a3:81:b1:ee:13:56:55:
                    65:d0:ce:31:e0:1a:d4:22:40:2b:cb:a6:63:45:2c:
                    07:15:b5:47:f5:8a:bb:03:4b:dd:7b:f9:a1:01:c5:
                    d8:ea:b5:7c:71:1e:79:86:a4:4b:a9:7a:75:f5:19:
                    fd:4b:76:a2:8f:25:a4:f5:1c:3b:e1:61:f9:85:43:
                    c6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E2:EA:13:74:D5:0D:C8:7F:63:AB:CC:34:45:5C:B1:43:EB:12:2A
            X509v3 Authority Key Identifier:
                keyid:C9:18:BE:63:DD:26:14:1B:AC:0B:49:25:68:F6:8A:F0:AD:FE:F3:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRi-Y90mFBusC0klaPaK8K3-8-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b8:47:a3:b1:34:5a:c6:44:02:2d:54:cd:7b:82:60:55:b8:
         4c:34:52:dc:10:53:71:a9:46:5e:29:a4:03:8a:41:9e:fc:12:
         e1:ce:23:3a:ef:8b:c5:f4:0c:96:e8:4e:94:e7:4a:1a:aa:2c:
         d7:a3:8d:55:67:76:32:79:0a:78:90:72:b3:a4:fd:e8:71:b8:
         a2:45:d0:ed:3c:e7:1e:ae:6c:34:b9:56:80:d8:05:eb:08:9d:
         09:63:63:3b:00:79:09:a0:5e:26:f3:de:24:ee:8d:70:ad:b0:
         f9:92:c7:90:46:49:4f:31:cd:de:16:16:5e:68:7b:2d:65:7b:
         6c:90:5b:bf:5b:f1:2b:87:19:4d:77:d4:39:ed:50:0e:63:3a:
         93:f7:1e:3e:42:66:1c:f1:da:9a:7d:bc:cd:6f:00:98:72:e3:
         22:5f:f2:33:9d:8b:72:86:fd:6f:74:fe:e1:b0:90:0b:e1:27:
         7d:b1:54:d7:5c:1a:a2:9b:3a:95:7d:d4:94:87:46:61:73:62:
         c8:c6:ca:cb:18:bb:6a:a2:9c:66:57:d3:d9:d6:a2:2e:1f:53:
         fa:69:cd:b2:b0:6d:83:36:04:32:ed:e8:bb:9d:ee:45:e5:c4:
         1b:5b:95:f8:a9:8f:32:79:a4:c8:ed:47:f7:be:45:95:81:ba:
         b6:1f:e0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:48:28 2026 by rpki-client