Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/751881-6e00-4da8-badf-136dd2760d25/1/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.mft
File:                     yZ7pUPWy2FPRlgOyfzXjYcuoaJo.mft (raw, json)
Hash identifier:          IUGglHwqzgUO+kxwJyJUGFLPo4gsdSykue/pHtZDjHE=
Subject key identifier:   4B:07:C6:82:33:E6:A7:28:07:33:52:D2:82:77:35:B3:DA:43:56:4F
Authority key identifier: C9:9E:E9:50:F5:B2:D8:53:D1:96:03:B2:7F:35:E3:61:CB:A8:68:9A
Certificate issuer:       /CN=c99ee950f5b2d853d19603b27f35e361cba8689a
Certificate serial:       01A125AFD4F810057D5F86A75456D9A80CD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/751881-6e00-4da8-badf-136dd2760d25/1/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.mft
Manifest number:          0179
Signing time:             Sat 10 Oct 2026 12:00:42 +0000
Manifest this update:     Sat 10 Oct 2026 12:00:42 +0000
Manifest next update:     Sun 11 Oct 2026 12:00:42 +0000
Files and hashes:         1: V51Xd-EnU0YE3waPlZqnDLP6u1M.roa (hash: LAp4Bm3heyzVm498syilDbsxbhhgwhye7TCJj3AhSpw=)
                          2: yZ7pUPWy2FPRlgOyfzXjYcuoaJo.crl (hash: pvK+nhTyImvTGTujT5VbLvPHk9HrnSVhrcvukwvucRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/751881-6e00-4da8-badf-136dd2760d25/1/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/751881-6e00-4da8-badf-136dd2760d25/1/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:af:d4:f8:10:05:7d:5f:86:a7:54:56:d9:a8:0c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c99ee950f5b2d853d19603b27f35e361cba8689a
        Validity
            Not Before: Oct 10 12:00:42 2026 GMT
            Not After : Oct 11 12:00:42 2026 GMT
        Subject: CN=4b07c68233e6a728073352d2827735b3da43564f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:09:47:60:43:40:d3:cb:ca:12:f3:ca:af:
                    5f:ff:2f:88:bc:cf:4e:00:58:f6:69:5b:db:6e:00:
                    d3:76:a4:1c:20:35:a4:b9:13:e4:47:77:47:2c:47:
                    63:e6:36:42:cf:af:f7:77:e3:df:44:5a:04:b2:94:
                    57:85:6a:6d:8f:ed:bd:63:09:6d:32:1c:6c:39:4f:
                    14:99:ba:4e:85:7f:eb:6a:27:7f:1b:a6:62:f9:e1:
                    25:11:5b:0a:63:33:10:80:38:4e:b0:97:9f:37:d5:
                    bd:c2:23:20:55:47:a6:f4:01:2d:57:aa:c2:23:51:
                    66:db:58:d2:49:7d:ad:d7:d5:0b:18:aa:dd:1d:c1:
                    fd:a0:de:24:77:3e:a2:d3:89:0a:d3:d7:a8:f4:e6:
                    74:d0:3f:b5:99:15:fb:a4:c9:30:ce:3a:5a:40:1b:
                    bc:6d:38:54:5a:39:d6:ab:66:d7:25:d3:9d:31:05:
                    f2:24:00:df:d9:39:8a:af:02:52:e1:a5:41:68:31:
                    22:11:3b:63:da:b5:22:b9:d2:58:41:c1:0d:9a:a6:
                    f4:79:49:00:1c:f0:88:d6:2a:ee:1f:7f:79:06:b1:
                    bf:43:e8:dc:c9:6f:13:ad:75:06:91:57:be:13:3b:
                    af:01:ca:ef:f4:c9:5b:02:9e:2b:4c:05:3e:98:93:
                    82:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:07:C6:82:33:E6:A7:28:07:33:52:D2:82:77:35:B3:DA:43:56:4F
            X509v3 Authority Key Identifier:
                keyid:C9:9E:E9:50:F5:B2:D8:53:D1:96:03:B2:7F:35:E3:61:CB:A8:68:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/751881-6e00-4da8-badf-136dd2760d25/1/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/751881-6e00-4da8-badf-136dd2760d25/1/yZ7pUPWy2FPRlgOyfzXjYcuoaJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ad:44:10:12:b3:32:3b:c6:06:a7:80:37:95:89:b3:11:9d:
         7c:2d:62:74:f9:b6:b0:67:68:ae:af:24:9b:6d:70:cb:a4:dd:
         8d:cd:fb:2a:99:7b:8d:cc:81:a6:a2:f1:ee:d3:28:fa:19:1c:
         4f:c2:68:ae:03:ec:13:c3:4f:ba:48:b9:86:57:5f:40:91:f1:
         15:07:4d:5c:3e:6d:50:fa:1e:a2:98:7d:c2:23:86:ce:59:80:
         d9:0f:71:b9:bc:25:ca:e8:ff:a6:e8:46:fb:cf:80:68:68:ee:
         c1:b5:88:54:42:7a:58:ff:b1:b7:0f:e7:b4:64:9a:12:f4:56:
         82:89:50:28:0e:3c:b7:99:cd:b3:0c:ec:0e:68:9c:63:c0:2c:
         5e:62:02:ae:7d:b0:37:9f:87:f7:9c:86:36:f9:ff:cf:ad:da:
         1e:77:70:52:03:07:5e:0c:09:a3:a6:47:bd:7d:c9:65:b6:02:
         b0:5d:2d:c6:ab:45:47:49:27:be:76:0b:64:c9:54:da:b8:1c:
         ba:d4:5f:48:a0:3e:e4:2e:74:14:d4:d3:85:b0:c3:83:48:18:
         86:52:4d:67:1e:f2:6e:f0:e6:06:46:df:9d:e3:15:46:69:58:
         47:4f:04:59:f0:2c:3b:42:c6:fb:a2:cc:b1:c0:07:09:a8:07:
         71:9d:94:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElr9T4EAV9X4anVFbZqAzRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OWVlOTUwZjViMmQ4NTNkMTk2MDNiMjdmMzVlMzYxY2Jh
ODY4OWEwHhcNMjYxMDEwMTIwMDQyWhcNMjYxMDExMTIwMDQyWjAzMTEwLwYDVQQD
Eyg0YjA3YzY4MjMzZTZhNzI4MDczMzUyZDI4Mjc3MzViM2RhNDM1NjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlegJR2BDQNPLyhLzyq9f/y+IvM9O
AFj2aVvbbgDTdqQcIDWkuRPkR3dHLEdj5jZCz6/3d+PfRFoEspRXhWptj+29Ywlt
MhxsOU8UmbpOhX/raid/G6Zi+eElEVsKYzMQgDhOsJefN9W9wiMgVUem9AEtV6rC
I1Fm21jSSX2t19ULGKrdHcH9oN4kdz6i04kK09eo9OZ00D+1mRX7pMkwzjpaQBu8
bThUWjnWq2bXJdOdMQXyJADf2TmKrwJS4aVBaDEiETtj2rUiudJYQcENmqb0eUkA
HPCI1iruH395BrG/Q+jcyW8TrXUGkVe+EzuvAcrv9MlbAp4rTAU+mJOCOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsHxoIz5qcoBzNS0oJ3NbPaQ1ZPMB8GA1UdIwQY
MBaAFMme6VD1sthT0ZYDsn8142HLqGiaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVo3cFVQV3kyRlBSbGdPeWZ6WGpZY3VvYUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NTE4ODEtNmUwMC00ZGE4LWJhZGYt
MTM2ZGQyNzYwZDI1LzEveVo3cFVQV3kyRlBSbGdPeWZ6WGpZY3VvYUpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83NTE4ODEtNmUwMC00ZGE4LWJhZGYtMTM2ZGQyNzYwZDI1
LzEveVo3cFVQV3kyRlBSbGdPeWZ6WGpZY3VvYUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKq1EEBKz
MjvGBqeAN5WJsxGdfC1idPm2sGdorq8km21wy6Tdjc37Kpl7jcyBpqLx7tMo+hkc
T8JorgPsE8NPuki5hldfQJHxFQdNXD5tUPoeoph9wiOGzlmA2Q9xubwlyuj/puhG
+8+AaGjuwbWIVEJ6WP+xtw/ntGSaEvRWgolQKA48t5nNswzsDmicY8AsXmICrn2w
N5+H95yGNvn/z63aHndwUgMHXgwJo6ZHvX3JZbYCsF0txqtFR0knvnYLZMlU2rgc
utRfSKA+5C50FNTThbDDg0gYhlJNZx7ybvDmBkbfneMVRmlYR08EWfAsO0LG+6LM
scAHCagHcZ2UGg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:25:24 2026 by rpki-client