Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
File:                     YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft (raw, json)
Hash identifier:          oZjawtLX2owXIxn/cq0dGCVxJxrLsfymIqcHmW4Sdlc=
Subject key identifier:   46:5C:EC:BA:31:40:49:2F:DF:BD:A2:4A:AB:45:ED:02:34:67:34:9C
Authority key identifier: 60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F
Certificate issuer:       /CN=6050099e335409db03ac1133d164f02a0d5dc66f
Certificate serial:       01A14A9836B232868AED8680CA2ACF242CB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
Manifest number:          0F54
Signing time:             Sat 17 Oct 2026 16:00:51 +0000
Manifest this update:     Sat 17 Oct 2026 16:00:51 +0000
Manifest next update:     Sun 18 Oct 2026 16:00:51 +0000
Files and hashes:         1: YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl (hash: IkrEep53u71Jr6XovnY8hICugKuPjY0hR5XL2t+0cV8=)
                          2: e2fLwwNnC7_gQ85Q33UfXuK3PBc.roa (hash: GaXv8AkKDgccbaFAmhisldDeR5nblYKbBIpd1n6r6Ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4a:98:36:b2:32:86:8a:ed:86:80:ca:2a:cf:24:2c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6050099e335409db03ac1133d164f02a0d5dc66f
        Validity
            Not Before: Oct 17 16:00:51 2026 GMT
            Not After : Oct 18 16:00:51 2026 GMT
        Subject: CN=465cecba3140492fdfbda24aab45ed023467349c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b0:02:1b:f8:5d:0e:a6:09:eb:8a:ea:13:bf:
                    f6:42:e5:ca:44:13:23:21:a3:77:42:1f:d5:7f:e1:
                    7f:7f:40:1e:2e:32:dc:25:66:a7:f7:5c:df:22:f8:
                    d6:5d:be:c3:fb:44:a1:ea:57:c6:85:84:ad:ca:f6:
                    61:ac:ea:d2:45:e1:e4:7a:6c:99:c7:cd:79:0e:b7:
                    1b:ff:2b:c6:f1:7b:3a:7a:b8:69:d2:07:55:1d:72:
                    dc:ac:2c:ae:cc:bb:3b:e0:c5:15:7b:e0:bf:4a:6e:
                    7d:03:e9:11:31:9f:a8:00:d6:56:10:7a:d5:fe:4f:
                    aa:dc:81:5d:e9:2a:1e:03:76:8e:a8:cc:e0:08:32:
                    1a:0b:01:43:ca:9b:ee:0d:54:0c:b7:f4:ea:bf:30:
                    34:04:ca:a7:21:ed:d1:2c:8c:13:bf:55:e0:c4:8c:
                    96:d5:de:9e:c4:40:4e:63:97:27:c5:7a:1c:39:bb:
                    7e:e5:d1:6c:ae:c6:e8:d1:9b:57:ec:18:91:08:b6:
                    fd:38:ce:ba:c6:b7:14:c7:e3:d7:c9:6e:cb:27:ca:
                    41:af:42:ea:32:06:82:94:e3:b8:c1:72:a1:d7:e8:
                    13:77:10:38:ed:2e:90:1e:54:0a:a2:43:ce:a2:2f:
                    8d:8e:dd:61:a6:0d:51:2c:d5:5d:f8:d0:8b:c1:c5:
                    91:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5C:EC:BA:31:40:49:2F:DF:BD:A2:4A:AB:45:ED:02:34:67:34:9C
            X509v3 Authority Key Identifier:
                keyid:60:50:09:9E:33:54:09:DB:03:AC:11:33:D1:64:F0:2A:0D:5D:C6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFAJnjNUCdsDrBEz0WTwKg1dxm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0c55d2-c89c-46d6-ba35-4c65bd33d6f6/1/YFAJnjNUCdsDrBEz0WTwKg1dxm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:1f:6c:67:06:a6:45:96:52:e6:71:67:13:30:ac:23:6e:86:
         7b:ec:68:ff:d0:c1:7f:c9:38:8a:74:4e:d2:f8:43:e8:ae:2b:
         aa:26:79:c6:38:5e:65:f7:b6:a3:d7:fd:28:f6:7a:a0:92:16:
         e9:38:e7:67:aa:80:55:18:2a:dc:0f:10:18:40:86:9b:36:29:
         08:97:48:99:e0:e9:13:61:9a:71:e3:ad:7d:5c:1e:fc:af:4d:
         f5:b6:86:a3:34:d5:52:93:3b:71:50:e8:56:5e:c3:b4:14:bd:
         83:e2:51:33:ca:73:39:5c:19:c9:be:9c:9e:e5:ba:79:f5:d6:
         25:95:35:3a:02:d4:b3:d7:47:d5:f1:10:2f:f5:50:f4:a5:12:
         ab:49:73:9f:f0:6a:f1:e4:f5:61:60:11:b1:a6:69:26:8b:a2:
         9e:10:d4:85:09:49:d3:df:3c:3a:11:81:51:92:4e:53:3f:13:
         e6:61:07:cd:a8:10:95:aa:f8:95:0f:1a:a9:20:d7:21:97:3e:
         f0:e3:e2:a8:7c:a2:6c:73:53:d8:1d:5b:3d:73:01:b6:d4:a2:
         d7:e4:02:15:a9:24:4a:7b:0f:b3:b9:09:a8:43:13:1a:b2:ec:
         21:be:9d:6a:dc:87:e9:4f:dd:53:b2:c0:45:bf:57:4a:c8:86:
         28:99:8f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:46:18 2026 by rpki-client