Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
File:                     YYzEbXHnhIl4SIlh17UauhVB88Q.mft (raw, json)
Hash identifier:          xSRjClbEyUi1OHEI2umR1+1A+r/LbUG22RlG6UfHsnI=
Subject key identifier:   72:8B:60:AA:E6:0C:56:0E:3D:1D:3E:D9:AC:22:DC:79:88:E2:8D:C1
Authority key identifier: 61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4
Certificate issuer:       /CN=618cc46d71e7848978488961d7b51aba1541f3c4
Certificate serial:       01A0D0129903FF03CD889D3AE602110974C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
Manifest number:          0975
Signing time:             Wed 23 Sep 2026 21:01:14 +0000
Manifest this update:     Wed 23 Sep 2026 21:01:14 +0000
Manifest next update:     Thu 24 Sep 2026 21:01:14 +0000
Files and hashes:         1: 6rOwkiiwPMSDxttw83Oe03eKzrw.roa (hash: TUFJPMQ+agFJKUgYR8BN1zSkPDdsC9rfa9hlgnJj66I=)
                          2: NXzgYU-C6vYUH9piPE5IVfQUDws.roa (hash: 7H+XPAkztFsa8CV9iN0q4tQ4EIhX9svKu9hI+JunkN0=)
                          3: YYzEbXHnhIl4SIlh17UauhVB88Q.crl (hash: sn7etJlIiaTcmyuk5hIAJNwZn4cWhlkPgDuaYUWkWF0=)
                          4: q5tcHMC53hVldl9vmJfxMoSPLXw.roa (hash: iSEcJDYplK+Xu/KP8Xlxc71CNA1iyM93A92Fn+WGFtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:99:03:ff:03:cd:88:9d:3a:e6:02:11:09:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618cc46d71e7848978488961d7b51aba1541f3c4
        Validity
            Not Before: Sep 23 21:01:14 2026 GMT
            Not After : Sep 24 21:01:14 2026 GMT
        Subject: CN=728b60aae60c560e3d1d3ed9ac22dc7988e28dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:af:42:e3:0a:ce:3a:09:2b:72:e5:36:8f:40:
                    6e:46:28:2e:b4:89:96:fe:7d:89:52:24:93:27:90:
                    58:72:12:61:36:d4:c2:76:e8:52:ba:81:90:fa:18:
                    ad:b6:ba:77:8d:0c:00:9e:04:96:86:43:d9:6f:50:
                    7e:20:2f:b4:0b:60:c1:64:3f:28:a6:14:86:0c:42:
                    fe:a2:0f:30:0b:13:34:11:0d:67:c0:1b:8d:30:1e:
                    80:f4:91:9e:45:03:96:b9:8e:c5:fb:6b:a3:32:0b:
                    50:d3:32:42:3d:b0:da:f7:6d:b3:7a:fd:ee:a5:e3:
                    23:59:c5:4d:b9:84:83:d1:3b:94:82:a5:c1:df:4b:
                    16:93:b3:6f:10:00:20:e9:25:ef:9c:84:2b:8b:3e:
                    a3:f8:cb:2d:99:c3:07:ec:4b:8f:89:f3:cf:a0:1a:
                    f3:15:95:3c:53:3d:14:5a:48:bb:dc:88:46:fb:c2:
                    41:ea:71:0a:22:87:c9:7a:90:fc:f7:a5:27:f5:01:
                    9d:51:fa:ef:6d:9f:88:d8:11:25:ac:3f:0d:b1:88:
                    27:0c:a4:45:c8:f3:57:62:36:e4:5f:37:b1:2d:5a:
                    80:1d:38:8a:1f:65:45:67:58:a5:43:f1:70:46:13:
                    1b:f7:95:cf:94:f9:7f:1d:9f:41:33:19:cf:a1:f6:
                    9d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8B:60:AA:E6:0C:56:0E:3D:1D:3E:D9:AC:22:DC:79:88:E2:8D:C1
            X509v3 Authority Key Identifier:
                keyid:61:8C:C4:6D:71:E7:84:89:78:48:89:61:D7:B5:1A:BA:15:41:F3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYzEbXHnhIl4SIlh17UauhVB88Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/127430-d4e8-4da3-bea2-4ef19ccc57d0/1/YYzEbXHnhIl4SIlh17UauhVB88Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f8:5f:dd:c1:8b:b8:da:45:0b:b4:e5:02:b3:61:ed:56:ef:
         d5:f0:33:89:a5:69:cc:99:b9:9c:3f:21:3f:c4:95:a7:65:d1:
         18:91:33:5d:6b:c2:2b:21:15:c2:39:02:a7:8f:d2:60:52:b5:
         6a:ae:2a:4b:bc:1c:47:f5:72:ad:70:93:af:71:39:a4:4f:7f:
         1c:fa:2e:6b:31:f5:8e:5b:d6:2b:27:cc:7a:c7:90:7b:cb:75:
         cc:93:ef:31:85:c2:b4:ab:d3:a9:ec:0d:37:fb:62:ed:7f:16:
         89:7c:8a:3b:e2:38:ba:b6:82:c4:95:8f:9f:10:e0:cb:78:0a:
         4e:e1:1d:c1:b5:4f:6a:a5:8f:69:ca:40:5d:e7:26:29:bb:c4:
         79:9f:5f:1d:19:d9:19:4b:85:5b:b1:43:4e:28:03:12:5c:98:
         ee:1c:c9:fc:25:50:2e:43:70:70:0d:54:4c:9d:98:27:c0:58:
         8d:85:40:98:e6:a7:09:44:8f:ab:bf:78:22:f6:d3:0c:fc:03:
         7a:d2:b7:7b:aa:15:17:65:60:ee:3c:64:82:0b:7a:5f:1a:5a:
         f7:ea:6e:e5:04:2b:bb:0b:c8:5c:d4:70:3a:96:e2:c9:0b:94:
         55:45:af:e6:83:84:c0:c1:08:6b:e6:b8:c8:3c:5a:2c:8d:49:
         53:b9:c8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:09:57 2026 by rpki-client