Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
File:                     ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft (raw, json)
Hash identifier:          dmfBP2OhBVHQFdpyTEvLdDG1fOo+lk3ACBJK9oKHldo=
Subject key identifier:   51:3C:A1:5F:91:57:C7:01:32:74:EF:D9:72:56:B3:0B:0C:C9:58:6B
Authority key identifier: CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4
Certificate issuer:       /CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
Certificate serial:       01A0EB89FF32690C62D3EBBA2310B8A3B310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
Manifest number:          1A79
Signing time:             Tue 29 Sep 2026 05:01:24 +0000
Manifest this update:     Tue 29 Sep 2026 05:01:24 +0000
Manifest next update:     Wed 30 Sep 2026 05:01:24 +0000
Files and hashes:         1: vrzaOZyt0yuGmEkZWTfpBfvU0FM.roa (hash: wM8w9UXwnJwWC//EoV2cIpFlr+CCNnYEJvvmregOsvI=)
                          2: ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl (hash: gL3kyms1aakdzY0w3vAKtC+jVx8OCtMw6BV3o5V+LxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 05:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:89:ff:32:69:0c:62:d3:eb:ba:23:10:b8:a3:b3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca0c2dacafdfa53997ed3b0a70dfbc270a933bf4
        Validity
            Not Before: Sep 29 05:01:24 2026 GMT
            Not After : Sep 30 05:01:24 2026 GMT
        Subject: CN=513ca15f9157c7013274efd97256b30b0cc9586b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:04:7d:d0:ca:bd:80:5a:1c:a9:ff:e8:33:3e:
                    de:22:27:d2:c4:7e:05:c9:10:79:a6:5d:59:24:a9:
                    34:ef:44:97:85:cc:26:29:e2:ad:6f:f9:55:41:b8:
                    6b:5c:bf:1b:12:e2:cc:87:36:c8:0b:19:eb:5f:bc:
                    cb:0b:b2:ee:3e:cc:ef:b0:2a:b0:10:ef:fe:fd:fd:
                    b0:d0:61:6c:43:39:80:0b:63:50:93:8b:a4:20:1f:
                    40:4d:98:e3:b6:c2:8c:15:6c:a5:40:e0:07:c1:27:
                    d2:87:b6:74:46:64:22:df:6f:a0:06:23:17:03:94:
                    36:25:e8:b7:f2:1f:f6:42:b6:92:39:a4:20:d3:a5:
                    ac:ff:32:71:30:e0:87:2b:04:3a:47:c8:b9:e7:a2:
                    28:64:85:9f:76:ea:e3:ce:0b:20:81:0d:3a:59:47:
                    8c:90:8b:af:ea:e2:87:9d:ef:48:4a:1f:67:e0:9a:
                    32:17:32:38:7e:2d:89:c3:c0:e5:a4:70:36:1d:ac:
                    be:ba:d5:3a:de:ca:ae:21:11:b1:ec:ed:b1:8a:1b:
                    83:03:1c:7a:9f:80:f5:13:a9:22:6f:45:a3:87:25:
                    8d:5f:51:2a:4a:c5:83:15:f7:76:9e:0e:7b:2d:9a:
                    2a:62:23:3c:bb:a3:c3:e6:43:c5:11:96:dd:4e:e8:
                    b0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3C:A1:5F:91:57:C7:01:32:74:EF:D9:72:56:B3:0B:0C:C9:58:6B
            X509v3 Authority Key Identifier:
                keyid:CA:0C:2D:AC:AF:DF:A5:39:97:ED:3B:0A:70:DF:BC:27:0A:93:3B:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/733598-74e8-47aa-8c8e-99ec88c47760/1/ygwtrK_fpTmX7TsKcN-8JwqTO_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:0a:d7:98:b4:92:8d:0b:4e:ad:8d:33:84:0a:2c:b0:13:f3:
         c8:da:29:01:39:9a:39:15:9e:72:d1:31:15:2d:de:46:1d:83:
         b4:8c:f5:e7:9d:9e:5e:99:bc:fe:f2:3b:2d:05:ea:6d:ca:f1:
         ac:e3:ea:53:23:c9:ca:a1:43:82:2f:e1:a1:cb:f6:b0:62:37:
         ec:10:11:9f:df:e4:93:f7:7c:ad:e3:c7:1a:0f:aa:1f:d7:0f:
         9c:4e:0e:8e:44:a1:66:1e:6c:c4:ab:23:df:40:5d:58:59:98:
         1e:b2:96:12:65:b9:a8:8c:93:a6:0e:ab:5f:83:b4:84:f7:50:
         49:01:f5:b5:4f:42:79:16:25:be:e5:7b:40:16:2b:82:8c:98:
         6b:41:47:cc:2f:13:82:e3:9a:ea:d6:3e:6d:ee:ff:ca:45:c1:
         ec:0b:8d:1e:33:7c:5d:5b:99:fd:62:cd:6c:0c:74:6f:db:b4:
         94:d4:d0:b9:f1:fd:e9:67:a3:00:a4:80:ac:36:ea:a9:d5:41:
         06:91:07:cc:40:f0:58:c9:2f:57:a7:59:ee:18:b9:3e:fc:45:
         ae:a1:7a:18:d6:69:42:38:ec:92:29:e7:e9:1e:b4:8d:5a:fc:
         42:05:26:31:74:33:14:48:42:41:42:94:5c:0f:f8:ef:65:c2:
         60:22:3e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:19:16 2026 by rpki-client