Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
File:                     y9_OOlNV-GH9xIwyASx4ydr5paQ.mft (raw, json)
Hash identifier:          IC08u6ZGMZZXpqkcjRUhiygHimqtCSZgaTN9DQ0OyMg=
Subject key identifier:   50:A0:3A:71:96:C3:90:17:A0:06:C5:06:DE:64:F6:35:D2:6F:61:09
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Certificate issuer:       /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial:       01A0D9BAE7322D99AF41E426B0C42D1754CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
Manifest number:          1A69
Signing time:             Fri 25 Sep 2026 18:01:39 +0000
Manifest this update:     Fri 25 Sep 2026 18:01:39 +0000
Manifest next update:     Sat 26 Sep 2026 18:01:39 +0000
Files and hashes:         1: 0hZDbxJrYBFNWkvmSImZbnA7DGo.roa (hash: 57YJGR/yDb+wDZGdceoc2Xq+t08LwYTEo56m7ozgeUc=)
                          2: PTk-Qm4SRO2CGZKyMh3pPECOku4.roa (hash: iHUYxSng1eYpsnCjK8T+uznexsa7QiF4CgUQAgbQr4k=)
                          3: UmiyGlAKeVSGM9owvAHcbjgh7iE.roa (hash: 9qPTC4+fv8bleeF17R0jz4ih1d6GM3RKI4JmMBNNV6k=)
                          4: XKQ33UaszWr3UcKOxkCn_h2IO0g.roa (hash: u7DgA9+pxN/MkyUzWxvuGfSEIEQmvUWyH2yknFwZpng=)
                          5: wruoJGCkndyJjRWEP8IowcC6dp8.roa (hash: 7qigFPgc4Oa1kf4DmFoQRYwnWdqHGod1Ik5fQyi6ptA=)
                          6: y9_OOlNV-GH9xIwyASx4ydr5paQ.crl (hash: 6M0SGRzV1oaMdRl+Dg5pJJ6DIUpDaBxgt1zYBUv0Yuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:ba:e7:32:2d:99:af:41:e4:26:b0:c4:2d:17:54:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
        Validity
            Not Before: Sep 25 18:01:39 2026 GMT
            Not After : Sep 26 18:01:39 2026 GMT
        Subject: CN=50a03a7196c39017a006c506de64f635d26f6109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:13:c2:09:fd:9e:d9:9a:67:26:56:63:b9:
                    78:df:88:62:29:d5:f8:eb:19:8f:31:07:95:16:56:
                    f9:15:1f:ab:8a:c6:ac:f6:d3:76:66:62:56:46:10:
                    5e:01:6a:07:c1:ff:7f:2e:69:8d:41:91:50:73:59:
                    24:9a:15:b0:aa:0f:b4:1f:86:49:c8:4a:84:b0:36:
                    68:8d:fa:6e:2e:7f:bd:8f:4d:c9:f8:19:5f:b4:a4:
                    0e:cd:6f:3e:e9:6f:0d:5e:6f:24:ed:25:65:22:29:
                    e4:09:5a:33:b8:d9:10:4d:fd:7b:33:dd:c8:ec:c2:
                    4c:97:91:da:c2:c0:46:01:fa:90:e7:a2:24:f9:74:
                    71:21:df:27:96:01:71:a0:8a:48:70:4b:b0:40:15:
                    b7:32:df:87:ba:2d:39:05:33:6f:41:1e:10:c0:c5:
                    b6:5d:1a:86:ed:37:2e:12:08:82:1b:24:f5:9c:d4:
                    fc:7e:e4:27:65:2f:88:7d:7d:9b:89:89:9e:36:5d:
                    59:e5:79:ba:6f:3d:ac:a7:44:79:de:d0:cb:bc:23:
                    0f:8b:07:04:9c:bc:1b:cd:47:58:b7:bf:f2:36:49:
                    5e:c2:42:84:eb:71:46:4d:5d:94:d8:6a:46:7a:e6:
                    07:37:a3:81:fa:99:06:02:ca:4a:80:7d:12:2e:21:
                    73:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A0:3A:71:96:C3:90:17:A0:06:C5:06:DE:64:F6:35:D2:6F:61:09
            X509v3 Authority Key Identifier:
                keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:22:fa:e0:51:cd:ad:d3:80:c1:c6:77:80:09:78:59:ad:da:
         de:dc:92:53:35:b9:fd:a3:29:97:b4:03:3d:bd:61:d6:ec:11:
         02:c8:48:31:79:6f:f9:e7:0f:2b:3b:4b:9b:d6:34:c0:c3:81:
         44:9e:48:9b:87:7d:06:19:40:86:ed:66:fc:c1:82:eb:ff:e9:
         9a:b2:b9:41:07:9b:6a:d0:2d:c9:eb:1c:4b:97:86:45:f7:4f:
         b0:d0:dc:32:01:bf:59:26:3b:75:d8:ae:66:d0:a0:5e:8c:7b:
         69:22:a7:a9:1f:e3:6a:66:72:3c:1b:68:f6:05:02:5a:cb:7f:
         42:a7:6b:ff:ef:10:5f:98:84:1a:ee:0a:64:24:02:18:ed:c2:
         d1:8d:32:ef:f7:ac:7f:ee:f3:3b:d3:d5:b4:9c:76:7c:10:b6:
         3d:f8:62:79:a9:3d:5d:f5:46:d6:3a:90:55:6e:93:ce:9f:b9:
         45:ea:10:8c:07:be:61:ef:62:98:44:8c:05:54:2c:99:b1:f8:
         8a:11:a7:0f:52:88:1f:0e:39:73:e6:e0:83:8a:34:9c:3c:66:
         8f:a4:2f:0d:59:b1:7e:cc:2e:9d:c0:1f:54:35:46:2d:75:6c:
         d7:e3:25:f0:cb:83:7e:11:ba:e5:ce:c6:ed:90:0c:ae:29:98:
         a5:d9:b6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:36:43 2026 by rpki-client