Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
File:                     YC8n-tkkUqJUswoGDtODsTx1jtY.mft (raw, json)
Hash identifier:          eTs0pXaXHJPjHyCAa/y6UYGUZ6/Rw8WR/++nLhdlqGc=
Subject key identifier:   64:09:A4:62:43:96:77:26:55:B9:62:BD:61:B2:D1:25:CF:EF:C5:F9
Authority key identifier: 60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
Certificate issuer:       /CN=602f27fad92452a254b30a060ed383b13c758ed6
Certificate serial:       01A11D882C9525B9218B9B6145176585B31E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
Manifest number:          0CF8
Signing time:             Thu 08 Oct 2026 22:00:25 +0000
Manifest this update:     Thu 08 Oct 2026 22:00:25 +0000
Manifest next update:     Fri 09 Oct 2026 22:00:25 +0000
Files and hashes:         1: YC8n-tkkUqJUswoGDtODsTx1jtY.crl (hash: JCMESyPCcmQHeWnjbI+f4Rwf5Hkq+slc09sosXUsT+w=)
                          2: yjdYp8YMAtj2_Dytxy6NEaoV14M.roa (hash: /wldluyAt2xqR07lomlO0CgTxaAUVhzs9ZM3VW1cPGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1d:88:2c:95:25:b9:21:8b:9b:61:45:17:65:85:b3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=602f27fad92452a254b30a060ed383b13c758ed6
        Validity
            Not Before: Oct  8 22:00:25 2026 GMT
            Not After : Oct  9 22:00:25 2026 GMT
        Subject: CN=6409a4624396772655b962bd61b2d125cfefc5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:04:fb:20:9f:36:e9:55:e7:52:d7:69:79:c2:
                    d3:3a:5a:09:2a:a4:d3:e3:8c:46:ea:a1:14:af:9f:
                    a5:77:a3:39:c8:9c:2f:78:d4:48:7c:51:d3:b4:7a:
                    4a:5a:96:d6:c1:b4:c6:e1:fa:fa:d2:fa:69:c8:1f:
                    80:06:1f:5a:79:c7:16:4c:6f:21:b1:36:b0:5f:79:
                    c6:de:c4:a2:fd:9b:f0:18:b6:73:68:8e:63:6b:ae:
                    2c:fd:4b:d2:a9:f6:84:4e:e3:5c:78:0c:f5:ed:e1:
                    16:c2:39:03:bb:c0:23:d4:00:ca:21:b2:35:6a:7a:
                    a8:95:62:f2:81:38:fc:61:33:ea:f2:c6:85:87:00:
                    7a:b8:14:24:4b:0f:33:6d:3f:66:de:21:38:4e:e2:
                    1e:76:6c:61:7e:f7:fd:a6:a2:a0:ae:48:a5:3e:f1:
                    40:78:57:91:d9:9a:e4:b3:36:d7:ae:8a:af:0f:39:
                    1c:19:87:37:2b:c6:6a:79:e4:ba:76:ec:96:60:71:
                    da:b3:2b:96:6b:a5:9a:12:38:f8:7f:bc:a5:26:88:
                    95:ea:2f:94:dc:05:86:49:be:ac:52:e4:02:d2:7d:
                    92:64:dc:cf:13:0c:87:97:d4:98:f7:71:1e:4a:61:
                    5a:b3:65:1b:41:cb:80:72:dd:24:b2:58:cc:16:c4:
                    7d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:09:A4:62:43:96:77:26:55:B9:62:BD:61:B2:D1:25:CF:EF:C5:F9
            X509v3 Authority Key Identifier:
                keyid:60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:52:f9:ea:1f:fb:27:b0:a0:6f:3f:94:24:e0:4a:ce:0b:35:
         eb:dc:c0:f6:53:0a:40:ff:75:4f:44:fc:1f:fe:6e:82:10:17:
         86:75:45:61:93:d9:e7:8b:97:b2:1e:7b:d2:b8:e2:36:15:e2:
         ab:8a:7f:61:07:b5:ab:1c:07:6b:b2:cc:f2:79:81:10:1d:be:
         c7:f1:a0:d4:14:f6:1f:fc:3f:37:b6:d1:e2:be:57:31:33:b0:
         5e:fd:0d:07:58:17:cd:f3:64:d7:e4:44:b1:ee:b0:09:11:f6:
         67:5f:fa:10:4d:f1:43:cd:88:30:3c:13:ba:a4:b3:cc:40:7c:
         2c:8a:a1:9a:29:26:33:85:12:43:97:02:40:25:da:d1:69:67:
         9b:33:7d:48:f8:d2:4f:9d:42:1a:50:62:02:5d:46:ba:c3:03:
         83:1c:a9:86:15:f9:d5:1e:5f:ce:ac:20:53:f3:aa:7c:bb:f6:
         f2:a7:df:36:ed:40:2a:29:26:89:96:e6:58:3c:4d:58:e5:7f:
         18:4f:05:85:c4:55:0e:94:23:b5:54:6e:30:c0:15:34:7b:13:
         8b:a9:9e:4c:fc:1d:e6:50:7f:26:de:09:e9:8a:e8:03:98:89:
         29:70:cd:ad:24:4c:e5:4b:33:ce:c0:90:6e:6d:09:eb:d5:9a:
         d5:ad:ea:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 04:45:25 2026 by rpki-client