Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
File:                     Y0JgC_HMkhaub-FpoenVQYrZOiI.mft (raw, json)
Hash identifier:          PFDumasm548NlesIOtxVUQxZJEvkoZg06ESWPAjTpTk=
Subject key identifier:   D9:44:74:3C:82:62:1C:6A:E1:D6:FC:79:E0:F9:A1:A8:F9:44:FC:B6
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Certificate issuer:       /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial:       01A1238B4431A0609C2B2BA43E28BEB20925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
Manifest number:          10C7
Signing time:             Sat 10 Oct 2026 02:01:31 +0000
Manifest this update:     Sat 10 Oct 2026 02:01:31 +0000
Manifest next update:     Sun 11 Oct 2026 02:01:31 +0000
Files and hashes:         1: 51U34o8JYb8CQVhcBv2qFWgAPgs.roa (hash: xu3fMRX2q3+Mv4t+1E/L+4OKYLdaxsUvme7/Xi7jOeA=)
                          2: Naj_hbjSCfJxAXzUztYdICw-HJU.roa (hash: oHxNo2orkmmjEzObI45+SgF12BlHV9OAFLzlNY9SiB0=)
                          3: Y0JgC_HMkhaub-FpoenVQYrZOiI.crl (hash: Y5iOeYHya82x5loe3aTXXMUyFNy2Ti+PRE3GHMKOUBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 00:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:8b:44:31:a0:60:9c:2b:2b:a4:3e:28:be:b2:09:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
        Validity
            Not Before: Oct 10 02:01:31 2026 GMT
            Not After : Oct 11 02:01:31 2026 GMT
        Subject: CN=d944743c82621c6ae1d6fc79e0f9a1a8f944fcb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:d3:8a:d6:a4:2e:bb:e3:07:68:ab:7d:56:
                    a6:7d:27:b4:4b:d8:33:8d:8f:b9:35:da:8c:fc:93:
                    9f:e8:4b:2d:09:f3:6d:27:e3:da:1f:f8:b5:a6:c1:
                    e8:00:a5:34:90:bd:8e:ba:80:fd:ba:9d:50:8b:8d:
                    f5:df:73:e4:94:11:fc:ab:05:7a:b2:f3:8e:b1:99:
                    50:22:48:cf:61:12:6d:c4:7d:3a:1c:17:10:90:5c:
                    b9:a3:91:7e:c0:02:09:c8:12:50:15:b3:d1:8c:3a:
                    d1:9b:c3:85:da:3d:d1:6a:02:31:85:d4:08:7e:26:
                    39:24:62:bd:61:12:c9:1e:b4:cf:06:3a:e8:2a:5f:
                    6d:e0:25:de:76:09:04:d8:f8:8b:45:f6:20:0f:4b:
                    a2:48:da:e2:ad:b2:09:f7:7a:56:70:5a:8f:93:65:
                    b3:b7:ed:fb:16:93:e7:a4:15:78:60:38:40:3d:b7:
                    7e:0b:64:52:a7:2a:a2:cb:49:27:2e:77:c6:41:92:
                    55:17:44:f3:d3:50:b6:8d:49:62:b7:d8:88:90:76:
                    ce:7d:f4:fa:69:c7:f1:0c:2e:48:8b:71:c9:b5:f6:
                    2a:c7:c4:04:2c:e9:f9:72:f9:36:60:72:66:1d:8f:
                    c0:60:ab:f6:01:aa:08:49:cf:b1:49:59:ca:69:a2:
                    d2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:44:74:3C:82:62:1C:6A:E1:D6:FC:79:E0:F9:A1:A8:F9:44:FC:B6
            X509v3 Authority Key Identifier:
                keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4c:d5:e5:5e:11:24:32:54:fa:44:f8:f6:08:eb:b3:ff:4c:
         2e:6d:fd:45:5d:7f:d2:00:29:44:43:b8:3d:31:d7:3f:f1:5e:
         27:c6:0f:b8:a4:d7:36:dd:a3:28:5d:1a:33:6a:0b:00:14:be:
         80:5d:47:54:f4:43:41:b7:90:3a:5f:d8:96:d4:2a:18:c5:1a:
         11:99:f6:06:6a:57:de:61:c0:b2:34:13:8a:2d:c6:59:9b:d7:
         b8:9d:b4:ec:45:9e:34:f6:30:f2:f8:8c:76:6d:ec:c8:f4:2e:
         ba:be:99:4f:b1:64:31:59:10:c6:fa:d7:80:2c:57:66:a3:16:
         4f:11:30:0c:ea:08:db:3e:27:15:78:d8:67:af:68:22:0a:48:
         44:63:95:8f:31:01:db:6e:5e:22:d1:5b:5c:0a:c0:7d:7d:e0:
         e0:7f:ab:f8:7f:8a:ab:98:c8:92:7b:ad:98:13:cc:f5:6a:b6:
         38:90:6d:46:75:b4:dc:fc:a6:52:ca:4c:d9:de:ba:3c:72:36:
         b2:aa:23:12:17:3d:0a:4f:1b:73:98:fa:df:8f:dc:f3:5b:f9:
         aa:17:48:d6:be:88:e8:0b:77:51:c7:7f:ed:65:26:74:75:42:
         2d:4c:40:3e:04:66:02:7e:51:02:5e:c1:04:d8:df:e6:c0:a5:
         9b:77:af:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:33:46 2026 by rpki-client