Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
File:                     yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json)
Hash identifier:          bweuH918C05Oq2R458acq3Zu8gt0NaKsJMm6vfSIgF4=
Subject key identifier:   E8:9F:61:0F:DD:F7:24:93:EC:5B:B8:31:14:4C:BD:7A:48:98:D4:6B
Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
Certificate issuer:       /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Certificate serial:       01A10DA739AE0F95C8A037A7A8D134989DEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
Manifest number:          1710
Signing time:             Mon 05 Oct 2026 20:00:25 +0000
Manifest this update:     Mon 05 Oct 2026 20:00:25 +0000
Manifest next update:     Tue 06 Oct 2026 20:00:25 +0000
Files and hashes:         1: xJ9oLhi0jZ3bx5rEVTQJ-Dbq8Ic.roa (hash: 8Hl158eCXhXx4gFRUokLsBxI0i7haKKmOz5b/bBgdPg=)
                          2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: Rw4wuCeELSJknDPo8aYSbkes0ih0D3V3vdK9AyhTfU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0d:a7:39:ae:0f:95:c8:a0:37:a7:a8:d1:34:98:9d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
        Validity
            Not Before: Oct  5 20:00:25 2026 GMT
            Not After : Oct  6 20:00:25 2026 GMT
        Subject: CN=e89f610fddf72493ec5bb831144cbd7a4898d46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:19:91:33:6e:bc:ac:97:61:e0:a8:3b:0f:69:
                    d8:f8:38:8a:2c:7c:30:a7:0c:ae:15:e3:ed:c4:9e:
                    cf:b9:bf:e3:99:0d:8c:cf:45:5d:d6:3a:bd:fb:9c:
                    4c:e6:dc:b2:37:58:2c:14:c7:f1:2f:a6:2a:f8:23:
                    f1:64:f4:4c:0f:52:94:7d:ed:7d:cd:6c:91:1d:a5:
                    34:a2:78:da:dd:4a:5c:e6:06:3b:10:2d:fe:9b:f3:
                    eb:a6:aa:64:52:b2:6d:35:78:63:77:fa:ef:2e:fc:
                    af:16:cd:8b:00:51:4f:a4:0e:8f:b0:8f:7b:09:dc:
                    2c:98:31:37:00:a4:b4:5c:08:dc:60:39:ba:56:7d:
                    c1:35:c0:5d:ae:d4:f0:35:28:9b:fd:f1:df:af:a5:
                    88:df:c5:11:d4:de:ae:59:23:04:c6:10:a7:02:7f:
                    2b:84:3c:92:a6:8e:0d:2f:10:4a:8d:d8:04:3c:86:
                    e5:0e:2a:ba:f6:b2:7a:7d:a0:95:16:5f:3a:e2:69:
                    4b:c3:c1:8f:ef:6c:01:00:6e:00:c5:2c:0c:c4:da:
                    e0:46:e9:59:f9:9a:f8:63:6d:14:96:89:20:34:90:
                    35:8c:d2:08:db:65:40:0f:1a:ab:7c:ca:80:dd:a2:
                    48:fc:51:aa:87:7f:28:59:cb:8c:50:b0:61:f6:f3:
                    1f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9F:61:0F:DD:F7:24:93:EC:5B:B8:31:14:4C:BD:7A:48:98:D4:6B
            X509v3 Authority Key Identifier:
                keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e8:08:6d:64:b4:c4:53:ea:8d:15:86:56:e3:06:c4:dc:54:
         32:6b:e3:47:d2:ba:fe:93:48:ed:31:de:bc:79:68:56:a6:50:
         a4:32:fe:0e:57:f7:6c:a5:07:5a:cc:7f:2e:34:86:2e:01:de:
         fd:93:0b:8d:6b:09:1d:a1:80:3b:d0:5d:e9:37:14:e7:3c:68:
         f7:cc:16:62:b1:d1:31:90:40:8c:1d:3d:82:b6:1f:4c:84:92:
         90:e9:5a:aa:6a:5d:6b:44:80:fa:d6:3f:68:2c:ab:00:34:89:
         79:57:ee:c3:68:0e:46:d2:65:75:5d:ac:d1:33:e3:ef:0c:e5:
         cf:78:9e:16:86:18:77:bd:ef:b3:ea:b7:ba:bc:7b:9e:b8:9c:
         07:5c:0c:79:57:81:bf:13:0f:62:bb:78:f0:d6:d5:d9:3d:82:
         ca:00:c3:86:73:e6:89:d3:b4:1e:f8:0a:ca:02:50:dc:e3:5a:
         2e:11:36:9a:ca:e0:1a:48:d2:02:be:94:ea:f2:3b:54:65:89:
         22:c5:24:97:78:b4:b9:8f:23:5b:5a:ef:5b:4a:96:31:52:2b:
         7f:5a:ce:bf:8e:2f:c9:a0:96:15:f9:fd:89:80:92:e2:3c:86:
         18:fe:a9:ce:dc:8f:cb:2d:a0:8e:f1:b4:b2:9f:21:6a:fd:fa:
         39:0e:5f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:12:21 2026 by rpki-client