Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File:                     YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier:          B+8zMlggkQYs6r87GV0rjcxbKau/87ik4YlhvUS0S4s=
Subject key identifier:   DD:78:6F:CB:AF:B5:4B:8B:06:4C:07:A4:0B:10:2A:56:B1:7E:36:B4
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer:       /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial:       01A133D9AEE2EF9D8A81DCFC2FD313BFAF49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number:          1974
Signing time:             Tue 13 Oct 2026 06:01:06 +0000
Manifest this update:     Tue 13 Oct 2026 06:01:06 +0000
Manifest next update:     Wed 14 Oct 2026 06:01:06 +0000
Files and hashes:         1: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: GfX9snDSM/HZz6pqMufICXYzTkyHHAjFfVT//v2tFD8=)
                          2: ds0HwgnE1wK4tusqij2iDAo4C4w.roa (hash: AV7GAfjJkTxxVqb/RhgxTIb2SMDdBmXXWKpB5XXq9g8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:33:d9:ae:e2:ef:9d:8a:81:dc:fc:2f:d3:13:bf:af:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
        Validity
            Not Before: Oct 13 06:01:06 2026 GMT
            Not After : Oct 14 06:01:06 2026 GMT
        Subject: CN=dd786fcbafb54b8b064c07a40b102a56b17e36b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5b:f6:e8:68:af:d4:92:cf:a7:06:1e:30:e6:
                    d8:4d:16:83:01:83:3b:18:1a:14:80:84:44:f8:fc:
                    04:1a:d8:f6:10:74:30:4e:66:40:ff:9a:5b:a7:92:
                    4b:34:2a:b1:da:02:f3:40:e0:55:8b:4c:12:57:7a:
                    f0:dd:12:1a:3b:69:f2:fa:3a:15:b1:f3:8f:b3:28:
                    05:2a:f0:ee:ff:af:0e:d5:8c:37:a5:ba:1c:55:94:
                    c4:25:37:a1:c9:74:f0:c4:63:c3:5f:e0:b3:6d:25:
                    38:a9:12:b2:83:9c:ff:f2:f6:1b:b5:7b:19:85:2e:
                    0b:e6:57:64:3f:f0:7d:d7:93:4d:20:e1:ac:0e:cf:
                    71:60:88:e4:bb:a5:11:bb:a2:d1:d2:7d:88:c6:0a:
                    1b:f7:f7:83:13:86:99:69:78:70:9f:5e:81:8e:9a:
                    fd:67:20:41:b2:b5:56:4d:88:c1:0b:9a:e4:1b:7c:
                    f3:a8:86:a2:97:a0:8a:6f:f4:5b:08:1f:db:fe:a5:
                    db:e6:40:a2:eb:bd:50:d2:3b:7a:18:4d:09:59:8c:
                    d3:5d:8a:69:b4:c6:4d:98:ce:5a:30:e2:c8:5d:40:
                    5a:72:9b:4c:5a:e4:ff:72:4e:6e:1b:3a:cb:e4:e8:
                    1c:39:33:75:46:95:32:09:d1:34:c6:a4:d5:d2:7e:
                    9a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:78:6F:CB:AF:B5:4B:8B:06:4C:07:A4:0B:10:2A:56:B1:7E:36:B4
            X509v3 Authority Key Identifier:
                keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0a:e3:16:91:7d:69:4d:11:e9:a4:1e:94:34:fb:d2:23:ce:
         29:b3:36:d5:84:16:fa:cd:63:9a:6a:9b:01:7b:f7:77:0f:5d:
         20:38:8e:aa:05:7d:51:06:08:84:1a:d8:e2:7e:17:bc:ed:b2:
         f1:02:f5:82:f8:55:96:5b:5f:5d:12:a8:4a:cb:b6:6c:07:e4:
         cc:ac:81:4f:e1:c3:d5:b8:bb:87:18:a5:3a:3c:70:4b:13:0d:
         90:a1:b2:1b:93:80:c8:39:5e:6f:1e:4a:9b:c2:05:54:4b:6a:
         da:cb:84:90:94:f4:c5:73:19:aa:30:ae:df:4b:ee:09:15:81:
         9c:ff:4c:71:62:83:09:b5:99:2e:79:96:03:f9:03:03:b5:41:
         9a:2b:47:d1:d0:2c:cb:a1:53:7f:ec:7a:df:bc:3e:58:19:90:
         87:cf:a3:35:98:cf:36:f1:25:f8:b4:fa:a0:4b:b7:cb:c5:80:
         5d:c9:c0:24:a2:83:ad:3e:ad:82:56:ce:fa:f8:33:60:d9:a5:
         66:1e:ab:b2:07:bb:58:d1:f1:6f:6a:39:77:ec:d2:5d:6b:1a:
         78:ec:f9:0c:4c:19:63:34:74:7d:7a:fe:e9:b0:5b:6b:71:bc:
         19:72:6b:50:f4:95:33:e8:98:c9:c5:cd:c3:17:20:8e:97:c0:
         7e:ca:7a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 14:36:04 2026 by rpki-client