Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File:                     yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier:          AFUp+wCAdSOiwhxLno4gvUs/HusEPQri4HEKP9/IB3g=
Subject key identifier:   11:EE:35:68:62:FF:E3:C4:B1:1C:92:35:7F:A2:34:51:D2:64:50:09
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer:       /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial:       01A10AA6C0B0ED4120F03D9261E728A00415
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number:          10CD
Signing time:             Mon 05 Oct 2026 06:01:02 +0000
Manifest this update:     Mon 05 Oct 2026 06:01:02 +0000
Manifest next update:     Tue 06 Oct 2026 06:01:02 +0000
Files and hashes:         1: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: c8b94P7/uHuJ134rLN7o9EsUzG+yJM8KgsTFp6ptDG0=)
                          2: yZypMalDZN_1H34j86whs9HOsns.roa (hash: QTHAsSMIZiio2WTla/ss5QYgZ5yq+TMYt6pBCLwJH0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0a:a6:c0:b0:ed:41:20:f0:3d:92:61:e7:28:a0:04:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
        Validity
            Not Before: Oct  5 06:01:02 2026 GMT
            Not After : Oct  6 06:01:02 2026 GMT
        Subject: CN=11ee356862ffe3c4b11c92357fa23451d2645009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:40:84:b9:4b:ed:35:a5:9f:8b:46:73:c7:5f:
                    eb:eb:3c:2f:cb:d3:19:d8:f5:d5:a7:35:0a:3c:ff:
                    d7:8b:e6:7e:a3:78:d4:cd:34:18:a8:12:d2:bb:b4:
                    47:d4:6e:2e:2c:3d:ab:3b:16:39:b1:83:b0:55:98:
                    c9:43:79:e0:3b:f4:15:24:19:cd:62:85:2b:a6:7c:
                    51:40:21:4e:62:b6:41:71:54:2d:47:70:35:37:52:
                    e3:9e:a1:8c:7e:54:2c:37:59:b8:49:37:a5:bf:91:
                    aa:3f:ca:b1:80:49:23:c4:22:70:66:75:fb:be:27:
                    1e:0a:e6:a7:46:13:a3:07:39:ed:b9:a4:b0:ff:4b:
                    8d:b7:e6:47:eb:e5:84:59:17:b0:ef:22:c3:fc:2d:
                    1a:62:dc:8f:2d:fc:a5:45:54:93:06:f7:ef:9d:77:
                    cc:9c:6d:0f:83:88:56:01:6d:24:54:42:f4:d0:b3:
                    10:d8:af:4b:18:0d:59:82:4b:79:8b:3e:91:f3:5e:
                    9f:04:b5:c4:ee:9a:04:e4:76:d2:ef:84:42:7c:1e:
                    33:83:a7:b3:32:3c:15:3b:e1:61:5f:f7:19:a2:aa:
                    4c:86:0e:ec:ba:d0:83:08:26:18:c4:32:9a:75:de:
                    8e:c0:ad:44:88:37:37:07:47:e8:88:f2:19:29:ff:
                    93:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EE:35:68:62:FF:E3:C4:B1:1C:92:35:7F:A2:34:51:D2:64:50:09
            X509v3 Authority Key Identifier:
                keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:81:31:f8:d4:89:ed:23:6d:f0:2e:d3:58:ce:e1:c8:2d:30:
         0b:db:f5:d4:96:bc:f6:18:61:31:45:a7:41:17:de:e2:f5:69:
         d5:78:d2:5e:c7:40:10:59:e0:6c:64:87:0a:9b:0c:e8:00:d3:
         7b:3c:f9:6d:09:19:55:c2:de:a6:5c:ba:c6:84:e7:39:4b:38:
         0f:49:65:7f:e4:f2:67:3b:4f:a5:00:01:ec:24:ec:e3:92:c0:
         c6:67:03:01:c1:6a:ac:e3:4a:63:ac:16:dd:9e:4b:34:49:66:
         58:5f:6b:ea:55:d5:b1:07:d8:7b:aa:ae:1c:86:ad:a4:75:32:
         31:06:6d:91:f0:40:14:08:c4:de:21:74:e1:a6:92:7d:62:18:
         6f:26:bc:41:fd:1e:cd:19:6f:57:7d:44:50:a3:57:19:64:34:
         8e:70:f6:40:22:69:12:a0:58:e3:2e:67:52:ea:ef:ea:ce:1f:
         f5:10:6d:67:0e:f4:1d:0c:91:15:b8:78:6f:e3:5a:fe:f9:0d:
         32:3d:2f:8e:cd:a1:ba:e4:25:e7:d0:d5:bd:55:04:79:cd:bc:
         4a:04:c5:c3:d2:16:a7:d6:d7:51:8a:ac:0e:eb:b4:5c:b3:32:
         94:c0:73:0f:05:ee:6a:62:19:3c:d2:93:8d:37:d8:4a:be:95:
         15:04:56:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:15:09 2026 by rpki-client