Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File:                     y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier:          /b336w9bxfyIkRTT75jAhF/HY0Wc599nu529nOpdhMc=
Subject key identifier:   BD:6F:CF:DC:6B:92:B0:C7:4D:73:FD:DF:FD:53:1F:A8:56:0C:87:1A
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer:       /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial:       01A11974D946BFBD72D2A4499146D96A26D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number:          1178
Signing time:             Thu 08 Oct 2026 03:00:50 +0000
Manifest this update:     Thu 08 Oct 2026 03:00:50 +0000
Manifest next update:     Fri 09 Oct 2026 03:00:50 +0000
Files and hashes:         1: YaqRyIn-AB_tvxqkStw-Njh6W2k.roa (hash: hXGurB4kvwUhGTKMC2eDgDWOU9jHumsHCcR8hZrvaLo=)
                          2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: V0qRt1QBBYx35BnfjrZv60pMQmokk5Qki3hk9/rvOcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:74:d9:46:bf:bd:72:d2:a4:49:91:46:d9:6a:26:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
        Validity
            Not Before: Oct  8 03:00:50 2026 GMT
            Not After : Oct  9 03:00:50 2026 GMT
        Subject: CN=bd6fcfdc6b92b0c74d73fddffd531fa8560c871a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e5:02:30:d7:9c:3d:dd:7b:6e:01:b5:a7:00:
                    a2:6f:d0:f3:0b:54:f3:b0:89:cb:34:be:f5:04:b6:
                    df:2f:1b:0e:6f:15:e2:58:71:89:45:2e:0d:18:1b:
                    3c:2d:2b:5a:bf:b4:4c:51:85:7f:a5:4a:54:6f:78:
                    ef:ff:49:95:c6:ca:95:5f:57:1a:5d:3e:b0:62:1a:
                    89:c3:88:b0:6f:b8:6b:65:ba:49:7c:d5:39:61:0e:
                    52:46:00:07:5e:72:d7:af:ee:27:72:8c:01:c7:81:
                    98:e4:1c:0c:3f:37:09:51:54:86:35:84:67:67:8d:
                    35:fa:9b:80:5e:3c:dd:f7:99:47:85:c2:af:84:9e:
                    49:fd:f5:19:6a:24:8b:98:89:dc:96:28:3e:8d:da:
                    47:56:a2:aa:a0:2a:8e:18:91:a7:90:21:82:1b:1d:
                    4b:eb:f5:c0:79:54:ef:bc:a2:8b:3f:c4:bf:26:a3:
                    7a:50:67:2a:16:3f:1d:97:10:bd:40:56:ad:71:bf:
                    67:eb:39:43:64:e9:eb:bb:fa:24:03:14:97:13:f8:
                    90:0e:1f:82:61:41:45:a4:32:c2:80:d8:ae:ea:54:
                    6c:51:74:a2:1e:f9:e7:88:33:64:4d:ef:e2:d5:23:
                    c6:64:19:b7:f8:5a:fb:21:d3:a7:53:89:68:9c:1f:
                    46:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6F:CF:DC:6B:92:B0:C7:4D:73:FD:DF:FD:53:1F:A8:56:0C:87:1A
            X509v3 Authority Key Identifier:
                keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:7a:fc:29:b8:76:a9:22:ca:7d:6e:49:18:69:25:e2:4e:31:
         fe:78:cc:f0:e4:1b:ca:51:3c:d1:0f:e6:c2:f1:69:50:a8:29:
         bd:e4:fa:aa:93:42:c0:bc:99:aa:0c:97:61:ef:9b:47:67:b0:
         87:ff:a1:4d:20:08:44:7e:89:1a:c6:f6:a5:51:2f:c9:bc:68:
         ae:7c:56:cd:9c:43:87:ff:be:60:44:07:64:57:9a:7f:d4:fb:
         e3:b1:af:d2:b0:3a:0b:ae:df:6a:8b:9e:94:5b:73:e7:d0:29:
         a4:ea:71:22:3c:42:4e:fc:37:8f:5a:3a:da:8d:c0:10:e7:f9:
         9d:78:47:1b:72:9b:14:73:fb:10:ca:17:c8:56:94:7b:0f:16:
         a8:1d:dc:cc:2c:4a:ca:d7:de:4b:74:b7:78:04:7f:af:73:29:
         c9:0d:bb:2d:76:3a:f3:a5:f7:85:ab:37:c2:5e:bf:6a:03:4b:
         7e:53:df:46:ae:b4:84:1a:ae:3a:8e:f1:95:04:02:8f:23:15:
         6f:9f:e0:a7:87:2d:f3:02:69:0b:54:21:cc:d6:a6:b4:1d:f5:
         87:a9:99:24:a4:95:6c:03:cf:b2:24:28:e9:14:22:0e:7d:2e:
         3c:7e:7e:38:a0:8c:49:eb:f3:20:23:5b:19:47:bf:7c:84:02:
         25:05:b4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:40:54 2026 by rpki-client