Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
File:                     YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json)
Hash identifier:          MdfgIBQ4xMn7mZXUDWA34WJ11FjHkkhaiAHeVYfeeAU=
Subject key identifier:   80:31:40:A4:22:32:F9:55:58:7E:52:6B:C7:CF:AE:EC:00:E6:0A:6D
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Certificate issuer:       /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial:       01A0C4451F1C31DD66CED9CF0D607308EC86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
Manifest number:          1637
Signing time:             Mon 21 Sep 2026 14:00:59 +0000
Manifest this update:     Mon 21 Sep 2026 14:00:59 +0000
Manifest next update:     Tue 22 Sep 2026 14:00:59 +0000
Files and hashes:         1: 31l2AEY7GEWjc18V1qPVuLkYPL4.roa (hash: UXAOQ0yqtiNWFo6LMrL4Bcg9J7Sis3T1nNglAtR6do0=)
                          2: Ph_fyZXXEA_KZkq3dxSRm46f-KA.roa (hash: FQiPrpYnq25Fwdf/7qCgVXoo0TWP2gIi2ykHBjIvx7g=)
                          3: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: yQzYYzC+PwB7icAq2xmkEhdAI+Mm6ZDs7oENQUoM8BM=)
                          4: d0sqjC0DnA7TPG86TXH_6VUnLrw.roa (hash: dAXlo04GPkYNTgbHXlkPxOYRVbw/cGshX84MajMnTIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:45:1f:1c:31:dd:66:ce:d9:cf:0d:60:73:08:ec:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
        Validity
            Not Before: Sep 21 14:00:59 2026 GMT
            Not After : Sep 22 14:00:59 2026 GMT
        Subject: CN=803140a42232f955587e526bc7cfaeec00e60a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:2d:49:31:de:ec:71:84:d2:1f:ea:43:78:
                    b3:b9:fe:dc:f1:4a:ea:42:eb:26:29:7a:fd:cd:ad:
                    b9:c0:83:b2:52:06:97:58:42:9e:43:8c:d1:a5:cb:
                    5c:12:87:8e:58:66:c3:73:a8:0e:f8:7b:8c:2f:2b:
                    3d:fb:f1:74:19:12:b1:41:e4:c0:20:04:e8:50:e3:
                    5a:de:06:73:9c:70:32:7b:24:fb:ea:19:c4:d0:5f:
                    54:b0:5c:52:f8:10:0b:57:f4:46:0e:43:41:43:3f:
                    83:48:9c:2d:72:b6:bf:9b:4b:77:04:07:fa:75:60:
                    af:ca:c8:3c:6f:41:60:cf:9f:1e:a2:63:87:b4:bf:
                    1e:3e:f6:c6:36:38:1b:e7:fc:a3:ba:0c:7b:04:56:
                    07:21:8c:47:54:a2:0b:52:c8:48:07:13:27:59:41:
                    42:77:94:5f:c8:d9:e9:d7:28:e0:86:71:f0:cc:33:
                    d6:9d:a6:82:ab:17:b8:d3:9f:a2:0a:4a:38:14:5b:
                    8b:ee:7c:a0:34:49:dd:b4:4f:fe:a3:de:7e:37:35:
                    cd:63:78:d2:d8:da:8a:b4:bd:4b:ee:f6:14:e6:fc:
                    71:5a:d9:da:5e:9b:87:a7:75:8b:b7:8d:fd:13:02:
                    27:80:d8:fd:39:51:06:15:4d:24:68:6f:c9:56:0c:
                    11:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:31:40:A4:22:32:F9:55:58:7E:52:6B:C7:CF:AE:EC:00:E6:0A:6D
            X509v3 Authority Key Identifier:
                keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:1b:2a:0b:9c:fb:8c:00:0e:41:cc:ab:ed:f2:fa:01:64:7d:
         cf:f7:5a:2b:56:f0:fb:9d:a0:16:ee:8c:9a:a3:92:36:7b:e6:
         47:4e:d1:66:6a:3f:74:c2:3b:25:85:f2:16:a4:43:5d:23:8a:
         d2:99:64:c2:fa:d3:02:5c:34:58:cd:ac:30:4c:95:79:bc:0a:
         39:ab:6f:5d:9f:fb:a7:65:1a:ef:59:ef:db:b1:89:9f:08:07:
         d1:57:c5:6b:d3:a4:0e:df:92:69:a5:d9:b5:68:8d:8c:0b:80:
         be:97:4e:e2:e7:71:b1:fd:eb:8c:3a:d8:b1:21:4e:b1:0a:e5:
         b3:f1:a1:cc:27:b9:6a:25:9f:3f:07:2f:e0:2b:0a:4b:df:d3:
         9c:8a:91:c0:eb:db:3e:38:84:cb:fd:40:23:3d:f9:22:09:92:
         62:46:45:15:f5:ca:93:0d:4f:e6:bb:a1:a5:41:eb:53:90:d0:
         50:92:02:49:5f:03:06:f2:ff:0d:2f:ab:ab:a1:6b:5f:48:ad:
         b1:8c:3c:d6:16:a4:48:b0:a2:28:62:aa:a2:97:97:e2:1e:c3:
         9f:3a:dd:1f:5f:c5:0e:01:53:36:92:f7:f4:2c:31:d7:93:1a:
         b2:f5:80:39:06:3a:1f:9e:73:7f:cc:7d:21:98:c4:84:71:97:
         93:83:d2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:57:36 2026 by rpki-client