Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
File:                     yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json)
Hash identifier:          in87Yf/0D0Qh4h3gz4q2Av/Ua9Nykc3q9re9bVimWUw=
Subject key identifier:   0F:8E:27:50:8C:25:7E:3B:87:75:3C:34:5D:4E:AF:FC:FE:79:61:0C
Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
Certificate issuer:       /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Certificate serial:       01A0D98387AD7D88961DE9893D525FF2B006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
Manifest number:          1681
Signing time:             Fri 25 Sep 2026 17:01:10 +0000
Manifest this update:     Fri 25 Sep 2026 17:01:10 +0000
Manifest next update:     Sat 26 Sep 2026 17:01:10 +0000
Files and hashes:         1: F44bKH9OXVnCIoILdhGNkCfhXGk.roa (hash: tP7jtATuTlTRwvEpnqA6Mbeq855NS1jjX+L/+eC+Juk=)
                          2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: owJhPQaBBndY7eHu9bMpboZmUXOw8dwZGaDTVn/9xIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:83:87:ad:7d:88:96:1d:e9:89:3d:52:5f:f2:b0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
        Validity
            Not Before: Sep 25 17:01:10 2026 GMT
            Not After : Sep 26 17:01:10 2026 GMT
        Subject: CN=0f8e27508c257e3b87753c345d4eaffcfe79610c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bd:5b:4e:28:83:4f:ec:20:32:08:ff:34:f1:
                    a2:5c:28:b5:4d:5b:bd:9f:ca:e8:2f:42:20:91:b1:
                    14:26:e8:41:cb:a2:ca:6f:a2:c9:73:6f:40:ac:49:
                    4c:e2:b9:8e:07:83:04:cd:23:5a:4b:12:98:cb:99:
                    3f:35:38:bb:a0:f9:fb:04:67:a1:0f:64:12:ca:63:
                    50:5d:ed:95:9c:66:76:95:ea:15:eb:85:33:85:b3:
                    29:01:d8:b2:e0:de:15:77:3c:90:11:94:5e:bd:8f:
                    29:05:88:fd:21:f8:b5:52:1d:d4:86:a0:79:bc:34:
                    0d:62:ce:ba:8b:90:91:c0:ca:82:76:65:88:60:b7:
                    eb:3f:aa:0c:da:bc:2f:a9:78:36:a9:be:68:53:b3:
                    25:77:36:65:18:a4:23:d1:c8:66:33:f3:29:b9:77:
                    dd:6f:9e:34:f6:14:33:0b:68:f2:9b:3a:3a:ea:7e:
                    84:d0:46:eb:9b:2f:ea:d8:14:7b:cb:3a:cf:98:1d:
                    f2:ca:0a:be:44:4e:10:3b:04:05:8c:77:98:61:86:
                    23:f4:a6:70:02:ae:7d:fc:dc:11:15:8b:9a:2e:3e:
                    8d:4f:ba:c8:21:34:d1:8d:52:97:05:d9:4a:6e:74:
                    fd:26:8d:c5:fa:10:e5:74:c9:de:cd:2b:6a:5e:b6:
                    e5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8E:27:50:8C:25:7E:3B:87:75:3C:34:5D:4E:AF:FC:FE:79:61:0C
            X509v3 Authority Key Identifier:
                keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:78:7c:9f:65:fd:d4:ed:55:b1:62:55:a0:2b:85:a9:9d:a7:
         76:47:40:01:40:7b:3d:4c:9c:61:37:3a:4d:b1:47:ab:3c:1c:
         fb:53:77:79:92:52:8a:31:05:3d:03:71:73:f7:34:d4:77:3c:
         7f:63:b5:cc:52:80:6b:eb:72:71:32:b2:29:9a:ee:8e:5d:b9:
         1d:56:a5:a9:b9:ff:16:64:b5:1f:4b:26:c5:0a:85:de:f3:3e:
         01:15:2a:3e:b4:dc:ee:18:c6:bd:74:30:4b:24:28:c3:69:f9:
         91:ba:f2:86:5e:2a:1f:00:82:dd:0d:31:28:80:d7:18:33:25:
         95:f6:81:c8:c9:56:a8:10:78:db:6c:91:fa:85:3a:e4:22:2c:
         c4:b3:28:e7:d1:02:4d:5a:b2:3b:d8:b9:e8:ce:50:d8:a3:2e:
         59:b1:d4:0f:29:bd:59:c6:15:93:90:32:be:13:f4:c3:b1:64:
         91:89:2a:58:a6:77:10:2d:8e:85:9e:c8:10:bd:47:b9:f5:47:
         52:22:80:ce:69:b9:71:89:35:82:32:3a:54:b2:6e:ab:1b:01:
         c6:fe:b5:40:9f:d7:c9:93:6c:fc:bd:bd:88:21:0a:b2:9d:7d:
         e4:c8:11:72:b4:20:c1:6f:d3:62:eb:e7:82:cd:4f:f4:9a:8b:
         4e:c7:c7:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZg4etfYiWHemJPVJf8rAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzdhZjA5NTExM2RhZGQ1YmM1MWJkZWJiZjBhZDM0ZDZl
ZWRiNjQwHhcNMjYwOTI1MTcwMTEwWhcNMjYwOTI2MTcwMTEwWjAzMTEwLwYDVQQD
EygwZjhlMjc1MDhjMjU3ZTNiODc3NTNjMzQ1ZDRlYWZmY2ZlNzk2MTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl71bTiiDT+wgMgj/NPGiXCi1TVu9
n8roL0IgkbEUJuhBy6LKb6LJc29ArElM4rmOB4MEzSNaSxKYy5k/NTi7oPn7BGeh
D2QSymNQXe2VnGZ2leoV64UzhbMpAdiy4N4VdzyQEZRevY8pBYj9Ifi1Uh3UhqB5
vDQNYs66i5CRwMqCdmWIYLfrP6oM2rwvqXg2qb5oU7MldzZlGKQj0chmM/MpuXfd
b5409hQzC2jymzo66n6E0Ebrmy/q2BR7yzrPmB3yygq+RE4QOwQFjHeYYYYj9KZw
Aq59/NwRFYuaLj6NT7rIITTRjVKXBdlKbnT9Jo3F+hDldMnezStqXrblxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+OJ1CMJX47h3U8NF1Or/z+eWEMMB8GA1UdIwQY
MBaAFMo3rwlRE9rdW8Ub3rvwrTTW7ttkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjkt
ZWI2OGVmYzQ3NDhiLzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hZDZjODMtZTVmZC00NDE3LWJmZjktZWI2OGVmYzQ3NDhi
LzEveWpldkNWRVQydDFieFJ2ZXVfQ3ROTmJ1MjJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHh8n2X9
1O1VsWJVoCuFqZ2ndkdAAUB7PUycYTc6TbFHqzwc+1N3eZJSijEFPQNxc/c01Hc8
f2O1zFKAa+tycTKyKZrujl25HValqbn/FmS1H0smxQqF3vM+ARUqPrTc7hjGvXQw
SyQow2n5kbryhl4qHwCC3Q0xKIDXGDMllfaByMlWqBB422yR+oU65CIsxLMo59EC
TVqyO9i56M5Q2KMuWbHUDym9WcYVk5AyvhP0w7FkkYkqWKZ3EC2OhZ7IEL1HufVH
UiKAzmm5cYk1gjI6VLJuqxsBxv61QJ/XyZNs/L29iCEKsp195MgRcrQgwW/TYuvn
gs1P9JqLTsfHog==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:10:49 2026 by rpki-client