Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
File:                     TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft (raw, json)
Hash identifier:          KQxETGI6qjtaNx7UNvhCLOCqdmSAa0OOZqewT3a3OKQ=
Subject key identifier:   92:DF:5C:28:3C:56:E3:5F:84:05:A9:2E:65:D5:F3:2B:74:45:F9:B5
Authority key identifier: 4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
Certificate issuer:       /CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Certificate serial:       01A0DA96C253FC4C2D4325E96ABABC5203F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
Manifest number:          02B0
Signing time:             Fri 25 Sep 2026 22:01:48 +0000
Manifest this update:     Fri 25 Sep 2026 22:01:48 +0000
Manifest next update:     Sat 26 Sep 2026 22:01:48 +0000
Files and hashes:         1: F3i7pvlCaVlLH03PBuARZVEC6Dw.asa (hash: FtQAM/wOBZf+OkMWx2MgLRzyqtUbtvx1ifNIr7aVQfc=)
                          2: TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl (hash: 8w3J9WB2zHSQKBAacdlyQoXoVwEaif58lcpTZkNCXbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:96:c2:53:fc:4c:2d:43:25:e9:6a:ba:bc:52:03:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d862e65e93d885c4f97449bcaebabc351de67d2
        Validity
            Not Before: Sep 25 22:01:48 2026 GMT
            Not After : Sep 26 22:01:48 2026 GMT
        Subject: CN=92df5c283c56e35f8405a92e65d5f32b7445f9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:5f:c1:90:c5:c0:16:70:3e:ed:4b:d8:be:
                    92:0c:ce:37:15:48:f4:fd:69:7b:fb:20:76:77:ca:
                    aa:2c:e9:f7:3e:fa:e7:b0:e8:14:4e:a9:19:a4:62:
                    d9:41:37:1c:10:28:9b:f5:9f:26:48:b9:3d:e2:77:
                    b2:c4:23:a7:85:7f:61:8f:23:54:7d:65:b7:e2:fe:
                    ed:99:52:7a:99:1d:29:b8:31:59:54:1b:6f:26:6d:
                    c0:3e:b0:0a:97:94:b5:b5:7b:61:c7:df:0b:ee:df:
                    91:01:ef:1e:c9:b2:37:64:e1:da:c8:27:68:48:c6:
                    48:7d:e3:e7:fd:23:37:14:45:65:1b:0d:6d:b2:35:
                    9f:3d:b0:1a:a3:c5:1d:dc:7b:e5:c9:ae:f7:b8:3b:
                    3b:6a:63:99:ee:7c:7c:1a:d1:1d:4c:53:0d:fd:48:
                    5c:ea:62:54:88:67:26:3a:80:63:c2:ff:56:b9:4f:
                    f9:3b:a5:45:76:38:8c:c2:5a:8d:10:30:df:13:b8:
                    2e:c0:cd:4b:42:d8:fc:23:e4:24:96:16:ad:61:eb:
                    6a:ad:84:37:f7:56:89:73:ac:87:1c:01:29:5b:a4:
                    1a:da:67:0e:3a:c9:9f:01:52:e1:28:eb:3f:3c:c2:
                    0a:0a:1e:42:26:ed:5e:6e:fa:63:e1:b4:ce:15:14:
                    e8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DF:5C:28:3C:56:E3:5F:84:05:A9:2E:65:D5:F3:2B:74:45:F9:B5
            X509v3 Authority Key Identifier:
                keyid:4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e5:7a:6b:7d:0b:b3:9a:cb:82:e5:2b:01:54:73:58:5b:3d:
         16:d3:1d:3c:09:7e:51:61:be:d7:ee:92:05:a1:14:86:86:06:
         1c:09:91:61:7e:76:fd:9d:04:97:20:6c:f8:0a:8c:05:76:9c:
         fb:51:b5:78:12:0a:44:fb:47:68:c8:e8:24:5e:bb:5a:43:29:
         00:8d:6e:7d:ef:e4:5b:5f:15:87:c9:2a:9b:47:aa:f3:b1:4e:
         10:ba:b3:95:84:0b:8d:70:e5:97:11:d9:29:8d:e8:3b:de:0d:
         d8:a1:c1:51:1a:64:fb:43:f5:50:20:a5:8d:07:bc:bc:40:79:
         22:78:e6:dd:98:65:b6:d2:34:3d:e4:17:66:f6:f9:a7:37:86:
         b4:59:18:9b:00:ab:da:a2:a8:bd:30:29:5e:72:21:38:d0:82:
         ec:32:d3:ec:52:10:6d:49:7d:47:11:c5:02:e1:f3:97:40:4f:
         8d:cb:c8:f7:7f:f4:46:c1:5b:6b:11:8c:9b:81:63:34:e4:4a:
         4c:49:69:76:12:8a:f6:ba:ce:72:b1:f0:f3:be:ef:2c:50:27:
         87:9c:c7:ec:18:24:55:4a:1f:43:1b:6e:6c:5e:20:e0:90:0a:
         f4:8b:d9:36:75:a4:ce:7b:e6:a9:cf:74:f9:ac:fb:ed:0e:32:
         28:af:be:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:41:56 2026 by rpki-client