Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
File:                     YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json)
Hash identifier:          mGrMJ1i2AvgDRbc+DJIUNgiQAtv9IF0GOUil/kZN9Ko=
Subject key identifier:   52:8D:4A:95:2D:60:B1:C3:62:12:47:61:3E:7B:1B:B9:9B:1A:9A:5B
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Certificate issuer:       /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial:       01A0C8FD4850FD38CCA080861CFD3285DAE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
Manifest number:          1AE2
Signing time:             Tue 22 Sep 2026 12:00:37 +0000
Manifest this update:     Tue 22 Sep 2026 12:00:37 +0000
Manifest next update:     Wed 23 Sep 2026 12:00:37 +0000
Files and hashes:         1: 6Kp8Q7FDy8zVl6KS7XGPmtjTZrI.roa (hash: LSjD6nMfWSQxNszQ+KYKSl3MtwhSLODWVrEJPytMoHE=)
                          2: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: njmv034h5cj8LKEeQJSG3PiZbVyNIOBePt9MMq3Izhw=)
                          3: dBSDP6Gc4F0vUJietrVIlYi8x5w.roa (hash: 4uu2kwh2x9bYdXpys7yyeAfZRrt8ENd/az4lWpFmo5I=)
                          4: fRx6ZblhgUmoW4nsXZOeWFDGQN8.roa (hash: 5XgSJtsEhxAPMe27NNznGafb5NwSgPc5MwYm0JOVzkE=)
                          5: lFA8TCmOsUwcRT-IH5-xMnLIn9g.roa (hash: rLmZAKicjwEflAKkEb3bhMZ1sp7aW6UtUzE6SYNtwFo=)
                          6: pCNJAJU2R_Ey7VRPw_hxPf5bZjE.roa (hash: KbIRipx6ZRLe6wuu8/y9hOVzulQ9nb+SwsRwZvvvJjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:fd:48:50:fd:38:cc:a0:80:86:1c:fd:32:85:da:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
        Validity
            Not Before: Sep 22 12:00:37 2026 GMT
            Not After : Sep 23 12:00:37 2026 GMT
        Subject: CN=528d4a952d60b1c3621247613e7b1bb99b1a9a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:63:71:18:21:5c:00:3d:89:0a:83:32:38:af:
                    56:bb:0c:3d:93:4d:6b:a2:59:c3:6b:fe:7a:c6:49:
                    25:9d:83:a3:fe:b5:f1:8f:75:57:c0:c4:9c:f6:24:
                    a0:4e:35:eb:6d:8d:44:be:09:9f:65:48:2c:39:67:
                    23:88:bd:c5:e8:36:5d:60:4a:a8:c3:44:e3:04:14:
                    07:fa:c8:ea:dc:05:9b:76:9d:95:cd:4f:24:e5:42:
                    95:42:e2:17:aa:f3:45:2a:bc:9f:5e:29:e2:d0:f5:
                    d1:af:70:cb:f1:13:fc:22:a2:b7:fd:64:25:a1:11:
                    ac:89:a4:fb:85:2d:c9:f8:22:78:e9:b4:5d:09:20:
                    fa:dc:4d:58:98:c2:43:24:8c:4b:36:e8:f6:cc:c0:
                    c5:52:3a:a8:2a:60:3e:ff:52:71:04:92:3d:65:69:
                    30:2b:a9:5f:bb:f8:01:22:5c:b4:dc:38:c1:fd:87:
                    5d:03:36:36:13:54:f8:c6:1f:7c:61:90:ac:40:8b:
                    70:27:40:fa:ef:84:48:7c:e0:b2:d3:8f:81:0b:49:
                    46:57:f7:35:f8:b1:d0:0d:02:6d:ec:e1:33:72:b2:
                    77:72:9f:1b:3b:12:d0:29:14:bf:13:40:5c:1c:d0:
                    1c:90:99:dd:9e:5b:79:bb:65:85:d1:61:c3:49:bb:
                    ee:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8D:4A:95:2D:60:B1:C3:62:12:47:61:3E:7B:1B:B9:9B:1A:9A:5B
            X509v3 Authority Key Identifier:
                keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:22:77:2c:b2:fa:d0:0c:b9:71:7c:e2:05:0f:02:24:67:00:
         f5:d4:96:a5:d3:6f:ba:75:cf:b3:fe:47:7b:2a:97:b9:d0:10:
         d1:6d:fe:a5:21:53:e2:34:1e:16:e9:35:44:ae:c2:c1:24:5e:
         cc:a9:c1:23:9c:a5:c2:3d:90:0c:07:95:45:e7:06:eb:6b:f2:
         9f:ac:5c:e9:ec:7d:b5:bf:3d:b7:2c:ab:5d:71:6c:ef:60:70:
         40:12:a6:c5:da:3b:31:21:bd:d5:ce:35:27:d6:40:4a:46:f7:
         2f:9c:0f:e4:aa:8a:0f:da:0a:7f:ad:57:2b:76:01:41:79:15:
         6f:22:91:34:57:34:7b:cc:9c:16:9c:4d:a0:09:b9:f4:c2:9d:
         f5:d5:58:8b:93:71:56:2c:b9:93:41:a4:02:e6:d1:88:93:0a:
         0e:31:69:c5:54:5f:55:08:74:c7:af:e7:50:da:f2:42:2a:0a:
         a6:a2:9a:67:61:97:e5:60:5c:5d:5b:75:de:9c:e8:4e:fe:55:
         ba:73:15:91:c9:47:cb:d4:13:2d:41:23:6b:b0:ff:c6:02:af:
         81:fe:d8:94:b7:d5:98:9b:ef:88:6c:42:80:41:1a:e5:b7:62:
         78:3c:cc:68:4d:34:f8:0c:0d:74:1a:0e:e2:63:ad:64:db:fd:
         0e:87:fb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:47:51 2026 by rpki-client