Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
File:                     YT0j8hITJ9kX1wjY_hUzgkVZWag.mft (raw, json)
Hash identifier:          4wFaJVZcbbAgVqofhQKkyIbrYc1iz2q1sTcdZfFZrMM=
Subject key identifier:   00:42:A9:98:37:86:B8:22:0D:98:1C:B2:37:AD:3B:D1:0C:1A:26:0F
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Certificate issuer:       /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial:       01A11B9A18D5DA398133BA78B91D616D1ED8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
Manifest number:          1687
Signing time:             Thu 08 Oct 2026 13:00:45 +0000
Manifest this update:     Thu 08 Oct 2026 13:00:45 +0000
Manifest next update:     Fri 09 Oct 2026 13:00:45 +0000
Files and hashes:         1: EymnM_3uw6bBqa2zU41hlqzwZ7Q.roa (hash: vvWH/t7ryv4C49LPruFDavH1zzwMA2a1qBwFbFJLWcM=)
                          2: FyKNqjFhrFH2OIgFRDsCv8BYs9o.roa (hash: tiDmKjN0UYas924OKqN2XsfQo8ti7C0ROoqNaCI+wEM=)
                          3: SQMkOh0lAhnLUEE_3rZZmavte74.roa (hash: snhMe8j8Fr+taJDX59zfUjo276EpEtnhIdyeRCqRDG8=)
                          4: YT0j8hITJ9kX1wjY_hUzgkVZWag.crl (hash: Bs/qAp3cpKrrHTx+E3Qoj33M7B2j7MBnTcUotNqynqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 13:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:9a:18:d5:da:39:81:33:ba:78:b9:1d:61:6d:1e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
        Validity
            Not Before: Oct  8 13:00:45 2026 GMT
            Not After : Oct  9 13:00:45 2026 GMT
        Subject: CN=0042a9983786b8220d981cb237ad3bd10c1a260f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e6:7c:ec:60:f1:a4:7d:1e:e4:96:2c:88:bc:
                    05:5f:9c:70:68:d7:90:8b:c8:3d:e4:15:56:a6:9f:
                    da:1d:d3:05:24:41:43:6e:54:f2:f8:a6:8f:fa:fe:
                    fc:46:b4:8a:0f:41:fc:6e:37:11:ac:9c:68:81:e0:
                    ec:08:74:ab:a0:46:10:14:25:fe:78:3a:7e:a4:02:
                    25:e9:4c:38:d0:10:ed:b3:01:dc:85:7b:46:fc:e1:
                    09:0b:76:a6:18:af:22:ad:ec:14:88:dd:0e:ee:d0:
                    7b:cb:50:b3:df:b3:ac:15:8f:d7:d0:44:6c:61:36:
                    15:7b:16:41:ea:e5:f6:41:2d:6b:a4:76:e5:87:06:
                    18:37:12:4d:6a:e5:c0:fc:97:fe:37:d5:cc:25:cb:
                    6d:54:28:e6:cd:08:44:a1:8e:65:14:0c:e7:20:54:
                    93:35:0d:28:9c:50:8c:04:cd:ad:d0:b2:66:39:56:
                    1b:f9:60:e2:e2:7e:10:43:a8:15:de:32:b6:74:06:
                    74:2e:04:30:31:f3:66:4e:38:a2:c2:f6:f4:36:50:
                    36:a3:d6:61:96:a0:ba:f5:3b:71:e5:98:60:b3:23:
                    f4:1d:4f:01:e3:db:23:3e:24:1e:69:a3:27:3b:a0:
                    06:b9:ac:e9:c2:92:94:39:73:8b:37:78:d3:4c:10:
                    f8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:42:A9:98:37:86:B8:22:0D:98:1C:B2:37:AD:3B:D1:0C:1A:26:0F
            X509v3 Authority Key Identifier:
                keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:43:27:a5:9c:91:a8:10:5d:d2:b9:0f:34:24:b2:70:f6:21:
         5e:38:d0:ad:ff:bf:42:c8:29:d6:d8:66:36:49:4e:db:33:84:
         18:70:b8:af:9e:3d:9c:31:da:29:91:49:45:8a:99:3c:d8:ea:
         f1:14:d6:45:17:b3:7d:13:dc:88:e3:66:a6:0f:0e:eb:c4:ad:
         45:5d:42:29:bb:ff:da:7b:1d:11:d7:87:20:3c:20:2f:7f:44:
         f9:5f:a0:9b:32:fb:25:6f:a9:7c:35:d2:1a:3b:a7:2e:80:1f:
         c1:32:04:cb:f1:99:12:cd:2d:d5:58:29:bc:e4:98:93:04:22:
         53:4e:6c:ba:31:93:7f:f6:bd:fa:fe:19:a0:55:b6:f9:be:97:
         d4:d1:f6:2d:69:cd:18:a5:bf:5a:1f:4e:e2:3a:c0:2f:2e:e4:
         bd:e7:50:06:0e:da:17:76:cb:02:38:96:ab:ed:c9:a3:45:e8:
         f8:ce:65:7b:cd:4c:c0:42:b0:ab:71:23:30:cd:58:ea:08:84:
         cb:cc:c1:e7:ac:da:e7:bf:92:bf:ec:40:68:1b:6b:32:ef:93:
         33:55:ee:40:20:68:1d:99:e0:50:6a:4d:7f:de:d1:1d:f5:2b:
         be:8d:fa:4a:31:51:ad:8a:fd:12:d0:33:06:34:d2:dd:0e:68:
         97:ef:82:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:22:35 2026 by rpki-client