Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
File:                     yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft (raw, json)
Hash identifier:          82jEM1AQ9ivcCKMmiad7jxo3XashcYlkHxRK38spaWI=
Subject key identifier:   E3:84:EC:92:67:34:62:E5:C9:62:FE:F4:92:D8:7A:82:E3:62:C9:05
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Certificate issuer:       /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial:       01A0EE8AD33FF0B3C3AAD9D2A1CB491B4FFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
Manifest number:          1A7A
Signing time:             Tue 29 Sep 2026 19:01:10 +0000
Manifest this update:     Tue 29 Sep 2026 19:01:10 +0000
Manifest next update:     Wed 30 Sep 2026 19:01:10 +0000
Files and hashes:         1: YMqsGPp_mbmCjWJLd9EJ8DM4L8A.roa (hash: TYDNZdeDcVMG8xtZmUsgp0p3WxwgGHDmOb5hVCRUc6A=)
                          2: eD5VOvbTEGKyk2FGGxuBVSBNR0A.roa (hash: Rl68HFZO+NzHdjcGZ7M/7lCLTV99GPY1FIFYCt0/pnw=)
                          3: yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl (hash: W9oG1DXFbzOalVGO66LgfzP6RZpr0WLZH7mOTg9atB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ee:8a:d3:3f:f0:b3:c3:aa:d9:d2:a1:cb:49:1b:4f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
        Validity
            Not Before: Sep 29 19:01:10 2026 GMT
            Not After : Sep 30 19:01:10 2026 GMT
        Subject: CN=e384ec92673462e5c962fef492d87a82e362c905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:54:2c:28:7a:05:13:5b:eb:e4:08:90:55:f8:
                    11:9f:db:7b:4f:9b:b2:2b:dd:e1:1a:93:1c:49:ca:
                    e0:84:b3:79:1d:31:fe:45:07:df:3c:d2:99:15:4b:
                    fa:d0:47:81:4a:0c:78:f6:42:24:8e:bb:3c:ec:fc:
                    39:7a:7f:a3:0e:8f:95:e7:5d:06:1d:20:12:90:d6:
                    59:b7:c5:45:00:6c:21:a9:a8:56:08:86:34:8d:28:
                    09:b2:55:92:68:f0:a0:72:3c:f0:e4:16:fc:06:81:
                    70:c4:f4:65:be:4a:55:30:c2:4e:54:cb:99:d7:11:
                    63:d1:de:86:e3:6d:0b:af:8c:a4:61:5b:7b:41:44:
                    ea:06:5a:d2:37:c7:ae:b7:24:88:d2:97:b1:e5:99:
                    4e:20:a2:58:38:f0:0e:88:35:2d:19:a1:cd:32:45:
                    03:9c:bc:28:05:fc:ab:fa:bf:93:32:83:b0:70:fd:
                    90:c0:c5:f8:9b:ed:71:15:7f:8e:a7:90:d3:da:e0:
                    51:30:ec:d2:0c:09:95:e7:1b:70:35:83:48:c5:6b:
                    dd:80:e6:4b:ed:49:b5:f4:f5:9e:42:84:d7:b1:3a:
                    c2:5c:77:1d:7f:d3:07:df:3f:e2:d5:04:0b:e3:66:
                    70:61:a9:d5:20:70:75:29:2d:cd:32:ee:e3:48:b2:
                    60:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:84:EC:92:67:34:62:E5:C9:62:FE:F4:92:D8:7A:82:E3:62:C9:05
            X509v3 Authority Key Identifier:
                keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:9e:bf:21:e4:3d:22:c8:9f:1a:b6:f2:04:6a:d0:6a:13:ce:
         67:63:cd:a7:6c:21:8a:81:6d:27:b4:c8:bc:1d:27:67:79:e8:
         ab:fb:c1:ed:11:69:71:6a:7e:b6:62:73:ad:96:bb:40:4d:5e:
         92:b2:d6:14:f5:e0:51:12:4f:35:8e:fc:93:79:80:60:58:1f:
         99:e5:9a:7c:03:e8:b3:0c:de:31:a8:c5:37:ac:8f:19:b6:24:
         98:63:49:ce:76:bc:34:d8:55:33:27:fb:0d:58:b0:5d:68:c7:
         ee:46:b2:ac:55:a3:b2:5a:5e:ca:01:21:b0:0c:35:a2:1a:88:
         0c:ee:79:98:b8:f0:01:6d:c1:d8:44:eb:be:42:60:7a:ea:a4:
         b7:2f:0f:27:bd:64:5a:43:9e:7c:08:c3:5b:5e:f6:3c:34:23:
         f5:c3:4b:b8:33:50:13:1e:a5:06:9e:c7:5d:ab:7b:20:10:dd:
         c0:a6:86:47:1e:90:b3:bf:20:24:e2:9f:9c:5d:da:b7:52:f1:
         1a:5e:e0:f8:53:57:b0:1c:28:ae:cd:fb:3b:85:3e:a0:44:d0:
         d3:57:6e:29:7b:ee:4b:db:32:f8:7d:83:fe:40:de:df:7c:fa:
         fd:e7:d6:8b:f2:c5:a5:97:3a:e2:64:38:c4:65:f5:90:8c:d2:
         42:fb:5e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 03:50:48 2026 by rpki-client