Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
File:                     ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json)
Hash identifier:          H6d/c5h3gpiTSx1CxmKaZO1gImaiEiX/dvPMQNUSE3I=
Subject key identifier:   C0:08:41:2E:09:66:B1:9C:CD:8B:B3:96:F3:6E:C3:DA:92:16:FC:12
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Certificate issuer:       /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial:       01A0D38328F3058516AF87D8EFA5C2ECDF73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
Manifest number:          13D7
Signing time:             Thu 24 Sep 2026 13:03:03 +0000
Manifest this update:     Thu 24 Sep 2026 13:03:03 +0000
Manifest next update:     Fri 25 Sep 2026 13:03:03 +0000
Files and hashes:         1: 16Fc5-LnF5siMEpZnuR4lKcQNuI.roa (hash: /DFWjdkQzHlEBKOGD6xuczzfIPaMRVwEIuK9rhvSJyI=)
                          2: II2FD1f4xCm3D1NbPKz8FS6h0Jc.roa (hash: 7LsFeRZGlNF+Y+qphYoLdVC4raU4LnXBUOFidUeAFTk=)
                          3: XO1viMFitX_oQoNKUBYNw7H6D54.roa (hash: jVh+iUQm/gwRWI08v+pcXmrPul1qy5rkSN9bPBWuSAg=)
                          4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: uGNjZrwy/Yh/Azc6M4noizQL0WiL6pubpFLwWEDyElo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:28:f3:05:85:16:af:87:d8:ef:a5:c2:ec:df:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
        Validity
            Not Before: Sep 24 13:03:03 2026 GMT
            Not After : Sep 25 13:03:03 2026 GMT
        Subject: CN=c008412e0966b19ccd8bb396f36ec3da9216fc12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e5:87:1e:f0:18:31:7f:a0:f4:40:50:54:5a:
                    af:fe:35:d1:40:34:29:f2:58:ca:26:52:3c:e6:79:
                    73:fa:30:74:3c:3b:98:d8:2e:04:bb:43:58:6f:ae:
                    0f:8b:95:30:48:86:b2:b5:82:c6:9c:91:f6:3e:c5:
                    9b:91:e4:97:3a:e3:88:a5:0a:bb:b8:09:f5:de:e9:
                    a4:47:76:0b:22:fa:20:f7:8e:4b:4e:6e:2b:53:cf:
                    47:44:09:83:6e:8a:29:a5:72:47:66:b8:34:99:b8:
                    15:46:ba:37:20:28:8b:65:d4:24:29:ca:c9:d7:19:
                    9e:08:23:bf:f4:2f:64:f3:05:1c:a6:8f:e8:f8:1e:
                    fb:04:a9:43:82:53:d8:70:38:34:55:7e:25:4f:63:
                    28:5a:68:66:93:82:c5:93:b1:4b:0f:d6:4b:0f:61:
                    7b:ef:dd:82:50:9a:95:ad:e1:f4:ab:91:f6:4f:c8:
                    5d:be:00:d6:c3:49:fc:97:ce:dc:7e:8e:49:03:73:
                    15:c1:06:a0:57:4a:44:22:f4:cb:78:69:a9:e1:c5:
                    cd:1e:91:af:d9:b3:4d:f3:62:bc:94:0c:5d:fd:bd:
                    e7:ab:86:db:7d:68:f9:e5:55:79:93:a5:95:45:bd:
                    cf:a7:58:25:5e:44:93:f9:7c:e3:6c:f2:cc:3e:21:
                    7c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:08:41:2E:09:66:B1:9C:CD:8B:B3:96:F3:6E:C3:DA:92:16:FC:12
            X509v3 Authority Key Identifier:
                keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:0a:52:d5:c4:78:bc:18:62:52:c8:96:44:8d:c4:16:f5:8f:
         50:7e:c7:44:31:7f:84:3b:22:31:84:26:81:94:f2:ef:a9:cb:
         7d:6a:ed:cd:04:cd:a3:a7:b6:ad:b2:45:72:93:df:fe:94:8c:
         68:19:ab:b6:36:46:4c:bd:f1:03:dd:55:8b:2b:31:f7:82:37:
         29:3a:0b:21:1d:c4:a8:66:f5:22:b7:77:48:b2:11:fe:68:81:
         12:32:8a:6d:91:76:80:23:5e:9b:07:6b:5e:a5:40:af:1d:f4:
         0c:a8:88:66:a1:8a:5d:b7:a2:ed:0a:71:92:9d:24:a9:ad:19:
         8c:3d:75:79:23:ef:e3:42:f9:e8:9d:83:48:4b:41:83:8a:8d:
         40:86:bc:28:44:83:35:69:60:96:9e:33:fe:07:fc:8e:b8:5a:
         a5:df:4d:00:1c:0d:db:2d:f6:80:d3:b5:84:00:6e:9e:5e:29:
         64:7b:8b:ad:dc:f9:e6:ca:7f:aa:4c:ae:56:5b:06:e2:91:0d:
         c4:ad:07:97:b6:bc:3c:21:48:e2:27:88:60:6e:9c:b6:17:9e:
         b2:a4:a5:eb:14:70:6f:5e:4a:e5:21:4e:15:a6:56:d3:22:3f:
         65:32:84:26:5e:e5:9e:30:8a:de:5a:c3:6e:71:42:ff:68:68:
         43:da:92:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:17:41 2026 by rpki-client