Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
File:                     yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft (raw, json)
Hash identifier:          Afszws9U2oEhs26mVbglzjvnIPZb6Ibt+rEzxQXf+zI=
Subject key identifier:   87:5D:3B:A9:14:79:9D:F5:C5:8F:96:48:A6:2C:97:45:DE:0B:75:44
Authority key identifier: C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7
Certificate issuer:       /CN=c9392c3276b243aff740a082c588fb73941ebbf7
Certificate serial:       01A0E13D86B2604D41A4BD6272295CFEC5FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
Manifest number:          09E7
Signing time:             Sun 27 Sep 2026 05:01:40 +0000
Manifest this update:     Sun 27 Sep 2026 05:01:40 +0000
Manifest next update:     Mon 28 Sep 2026 05:01:40 +0000
Files and hashes:         1: CDYJ5duT-YiN5vn4ue9hcM_s3OA.roa (hash: ZtL4bRFnSWFbHHuzOCLv1emqHa4TMbYiRtAD7J2vEiI=)
                          2: yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl (hash: Ds5qxfNJRdnBgs2tUpb2xuGzU+TDc2zWXHCOM3YLnXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:3d:86:b2:60:4d:41:a4:bd:62:72:29:5c:fe:c5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9392c3276b243aff740a082c588fb73941ebbf7
        Validity
            Not Before: Sep 27 05:01:40 2026 GMT
            Not After : Sep 28 05:01:40 2026 GMT
        Subject: CN=875d3ba914799df5c58f9648a62c9745de0b7544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:be:ee:94:7e:4f:6a:85:96:9e:c0:ef:9b:29:
                    c1:9e:79:ed:9a:bf:57:c8:65:4b:86:df:4f:bd:50:
                    1a:60:5f:ac:07:c9:5c:b3:9b:88:6b:f5:10:61:46:
                    3f:6c:41:ad:85:5b:2a:bf:8a:57:4c:15:52:11:23:
                    57:2f:2c:7d:40:b4:e6:1d:c8:32:f0:24:6c:10:39:
                    40:a0:db:cc:8b:64:a0:95:04:fb:9f:d5:64:94:b9:
                    51:ac:84:4e:c6:23:8f:33:18:51:af:3a:31:cc:de:
                    4e:7b:ef:97:42:dc:f0:89:0c:61:f3:fd:0a:98:38:
                    f2:f3:01:68:7c:74:9a:84:a2:0c:5e:cb:3f:43:25:
                    d1:2c:67:65:c9:44:d7:b4:7c:18:59:77:05:cf:93:
                    61:59:19:24:23:36:bc:ee:30:b6:d0:1d:f1:65:ce:
                    ec:73:41:ab:5e:b1:f5:44:80:ae:4c:df:67:9d:37:
                    49:3c:92:5c:93:21:7b:3b:7c:ac:80:ea:35:cc:4e:
                    7d:15:76:d0:26:aa:00:87:3a:f4:a2:2d:7a:4b:f3:
                    e0:ab:4e:6f:5f:b3:14:df:a8:a0:ef:4a:a2:af:08:
                    39:12:7f:c6:3f:03:06:ba:ce:4d:94:c3:dd:d0:2f:
                    57:bd:ea:76:6f:ec:1c:59:d4:fc:7c:23:6d:2d:66:
                    47:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5D:3B:A9:14:79:9D:F5:C5:8F:96:48:A6:2C:97:45:DE:0B:75:44
            X509v3 Authority Key Identifier:
                keyid:C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:0a:0e:9b:6b:2e:10:63:db:8d:ef:1b:74:40:d1:11:cd:78:
         7a:fc:0f:c5:6c:d4:e9:8a:22:90:97:e6:a4:5d:4d:95:83:db:
         c9:f4:49:27:c0:68:8e:d2:34:0d:08:6c:e2:f0:d8:c7:29:2e:
         1e:59:f1:49:81:ce:3b:2f:59:45:f0:00:5b:0a:a7:35:0c:e2:
         e9:2b:d8:12:40:23:93:60:8f:55:37:2e:67:8f:97:aa:99:5e:
         f6:4c:2e:3e:1c:76:59:d3:a1:05:fd:84:13:4d:74:20:c4:3c:
         b5:3e:c2:aa:fa:a6:81:42:81:b8:7b:27:9d:f3:ab:7d:68:46:
         3d:30:15:7e:c9:0c:d7:a3:10:82:3f:b8:8c:9b:b5:34:a2:4b:
         36:56:90:db:c4:35:db:0e:9f:cd:a9:c3:72:a2:20:94:00:21:
         b2:40:d5:fa:05:89:8b:8a:e8:a6:6d:86:c0:52:a8:f8:6f:b8:
         01:c4:64:c2:be:12:0b:d3:09:86:b6:d1:3c:02:ef:de:c5:fa:
         e8:82:18:40:37:e4:1f:83:4e:ae:f4:38:a5:38:77:c6:03:d4:
         ef:ba:59:91:ab:93:21:14:c1:40:fa:39:33:1c:ea:91:3f:78:
         9f:d3:ef:b6:bb:1c:29:b0:a7:9a:05:df:da:8e:52:c9:fb:03:
         9c:20:6c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:50:35 2026 by rpki-client