Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
File:                     dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json)
Hash identifier:          XmK9hfCzwOpxlsLkwoC8O6lk89d6o8cieyXsnka3Jqs=
Subject key identifier:   39:D4:76:A7:7E:79:1F:54:4B:9D:E5:40:56:0E:64:E8:68:1C:5D:6D
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Certificate issuer:       /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial:       01A11D511EE1AE2C1EF47DA806A234082C03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
Manifest number:          1A27
Signing time:             Thu 08 Oct 2026 21:00:17 +0000
Manifest this update:     Thu 08 Oct 2026 21:00:17 +0000
Manifest next update:     Fri 09 Oct 2026 21:00:17 +0000
Files and hashes:         1: EXopuR5ESiK7_JfMXbRvvwemOwM.roa (hash: /csuVRW3pPg52UWTPGC8VigLMZFh8XPz4sQJGV29ruU=)
                          2: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: U5uzpkNwukiUUgfsBcq1CDAuEUvknBx6yx+Lq34WQeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1d:51:1e:e1:ae:2c:1e:f4:7d:a8:06:a2:34:08:2c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
        Validity
            Not Before: Oct  8 21:00:17 2026 GMT
            Not After : Oct  9 21:00:17 2026 GMT
        Subject: CN=39d476a77e791f544b9de540560e64e8681c5d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:56:b9:cd:d4:5e:cc:7b:3a:39:7a:89:a5:
                    c5:f9:4d:4f:ca:06:e1:56:b9:dc:58:e3:8f:12:ad:
                    e2:28:06:5e:c6:cb:c6:b7:12:ef:7d:6c:f0:9c:78:
                    f1:99:a5:41:99:b1:68:bb:83:45:50:3d:d5:49:d7:
                    22:80:e6:60:cd:d9:81:21:60:a8:9d:3d:52:aa:46:
                    4c:c8:68:ea:e7:a9:5b:1a:cb:64:cf:b0:cc:ea:96:
                    3e:18:b6:44:54:da:4f:ca:ff:df:cc:c5:37:50:71:
                    ea:de:ec:31:b7:6d:18:d4:20:e8:51:56:a7:ca:eb:
                    e6:7a:de:57:3b:35:66:56:93:6f:91:c0:a3:ce:ea:
                    4e:7f:2d:e5:34:4e:46:5b:cf:9e:2e:56:2a:06:44:
                    cb:8d:4c:ab:d6:a1:3f:9a:b5:ec:97:7c:da:92:31:
                    80:5c:00:d0:9d:4b:cb:45:c7:23:55:05:94:69:44:
                    05:91:ef:54:ba:f7:04:db:f2:4f:93:ed:ad:ff:d2:
                    56:b8:d3:c7:99:1e:67:09:f6:02:55:dc:97:82:cb:
                    2e:49:1f:84:be:f3:42:92:6f:26:92:70:70:5d:b7:
                    1c:4a:89:19:65:c9:bb:14:d8:b1:f5:92:e3:0e:c5:
                    4b:a9:39:be:7f:17:af:12:78:91:dc:c9:49:fd:9b:
                    5e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D4:76:A7:7E:79:1F:54:4B:9D:E5:40:56:0E:64:E8:68:1C:5D:6D
            X509v3 Authority Key Identifier:
                keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:cf:6a:25:1e:65:b2:62:29:72:64:5a:1f:f1:c7:8a:1a:14:
         ea:16:b0:97:34:f2:27:cd:5f:56:ba:11:79:1d:a1:b4:c2:79:
         23:cd:c5:b7:18:4b:23:22:c1:de:3f:e2:07:7b:fb:ca:f9:9d:
         f5:6c:ff:72:8f:4b:8e:51:3c:d1:0a:dc:a1:69:b0:73:0e:f2:
         1c:4b:20:ec:25:5a:51:49:0b:6b:f0:64:dc:69:cc:e4:ab:45:
         36:f0:e6:04:49:0f:60:54:34:88:33:0a:4d:94:14:0d:12:10:
         40:5d:bc:67:0f:c4:59:7e:21:dc:78:71:fa:7c:34:e9:64:0f:
         c9:b6:69:e6:16:c2:1a:e3:b8:09:f6:64:e2:04:b8:67:22:13:
         03:f3:56:17:1d:b7:7a:60:34:b0:55:73:82:ea:5e:6e:58:62:
         d6:e5:d8:3a:61:db:67:c7:e4:ec:51:c9:60:08:16:8c:d4:a6:
         91:60:da:cd:97:e1:58:c6:fc:b6:26:85:5c:b7:65:37:98:98:
         f7:46:74:5b:bb:61:ac:4e:53:27:a0:04:c6:a9:7f:8c:cf:36:
         2f:c1:48:c6:5c:38:b4:1d:81:06:62:18:ab:fb:1b:77:5e:16:
         b5:a6:83:39:4f:5c:38:2b:7f:0f:91:55:69:f7:57:9c:f6:b1:
         87:7b:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:09:33 2026 by rpki-client