Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.mft
File:                     YmzaiC-KLTqUZufABPVEEO-Dras.mft (raw, json)
Hash identifier:          CwOIxA+Ct97hcpXDgoRDxzdFWSSvQ2Pmw++S0qdSHso=
Subject key identifier:   E5:93:1C:13:03:01:55:44:46:D3:2C:A4:09:EF:BE:EC:6A:35:2F:EB
Authority key identifier: 62:6C:DA:88:2F:8A:2D:3A:94:66:E7:C0:04:F5:44:10:EF:83:AD:AB
Certificate issuer:       /CN=626cda882f8a2d3a9466e7c004f54410ef83adab
Certificate serial:       01A0BEE73BD502BA40C3D48FF05AAE90F479
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YmzaiC-KLTqUZufABPVEEO-Dras.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.mft
Manifest number:          7C
Signing time:             Sun 20 Sep 2026 13:00:20 +0000
Manifest this update:     Sun 20 Sep 2026 13:00:20 +0000
Manifest next update:     Mon 21 Sep 2026 13:00:20 +0000
Files and hashes:         1: TaPTcaQHtpTiKk6L3LVp5BFOkXc.asa (hash: +3830vvKwcHUa2vT9pDGLDHYnV9hdJPoJoELEDn5XPg=)
                          2: YmzaiC-KLTqUZufABPVEEO-Dras.crl (hash: XQ8XV27ueWXN5reQXE95VXIgYloqf83lRZun2vUAH1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YmzaiC-KLTqUZufABPVEEO-Dras.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 13:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:e7:3b:d5:02:ba:40:c3:d4:8f:f0:5a:ae:90:f4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626cda882f8a2d3a9466e7c004f54410ef83adab
        Validity
            Not Before: Sep 20 13:00:20 2026 GMT
            Not After : Sep 21 13:00:20 2026 GMT
        Subject: CN=e5931c130301554446d32ca409efbeec6a352feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9c:11:51:fc:e5:35:ef:3a:cf:73:e6:9e:02:
                    5a:22:33:b8:6a:22:7c:7e:1d:7b:ed:44:59:32:6f:
                    05:81:b3:1e:65:e2:93:79:55:69:ae:13:03:1f:a4:
                    8a:47:f5:fd:b3:54:8f:5a:45:08:16:4d:06:5d:3d:
                    30:79:6b:e1:43:91:6e:94:d2:87:b4:f8:74:02:7e:
                    84:4e:95:c0:9d:29:43:d9:a3:d6:37:e7:8c:d3:d2:
                    dd:a4:3f:90:58:74:53:a0:fc:76:ff:1c:06:c4:de:
                    a5:2f:42:1e:a0:d4:73:0d:97:56:a0:66:b5:a0:85:
                    cf:43:3f:14:34:b1:b2:d4:03:76:6c:ec:1c:20:59:
                    c9:08:e9:0b:ca:4b:33:1b:d5:c4:c3:15:31:1b:4b:
                    46:83:ae:93:5f:d0:3a:1f:10:e8:64:e4:68:5e:37:
                    df:63:e4:a4:de:90:30:6a:56:30:2e:48:5b:06:9f:
                    24:19:e6:66:51:73:e4:bb:b8:5e:88:22:a0:15:4c:
                    b0:5b:8b:d3:41:4d:9f:4f:73:83:a2:01:6f:b7:d5:
                    d3:2e:0f:7b:12:ef:cc:5a:d1:c3:64:e8:f7:a2:18:
                    3c:43:59:dd:d0:72:fb:17:90:60:2f:8d:4f:e5:6f:
                    63:8a:88:c1:1c:02:54:a2:1c:e2:8e:dc:2f:ed:7c:
                    65:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:93:1C:13:03:01:55:44:46:D3:2C:A4:09:EF:BE:EC:6A:35:2F:EB
            X509v3 Authority Key Identifier:
                keyid:62:6C:DA:88:2F:8A:2D:3A:94:66:E7:C0:04:F5:44:10:EF:83:AD:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmzaiC-KLTqUZufABPVEEO-Dras.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5f810d-b2dc-4cc0-8f8a-87e52f2933ad/1/YmzaiC-KLTqUZufABPVEEO-Dras.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0b:2e:1f:63:d1:21:1c:0f:98:9a:df:cb:f9:16:08:41:4c:
         ba:e0:c5:a6:64:a7:04:79:1a:06:d5:fa:03:a3:35:29:d1:9e:
         37:c8:db:9d:bd:a7:3c:73:83:28:7c:b4:af:2e:cf:58:f1:97:
         45:49:4c:39:9c:19:eb:c7:27:00:1a:8a:a2:29:e5:49:34:84:
         e5:f4:73:fe:6a:d2:a6:88:ae:44:5e:f7:28:af:5a:f3:f9:91:
         16:65:b2:83:2b:80:c0:6c:1b:4d:2a:ed:68:85:d2:3d:53:a4:
         d5:d0:ac:be:fb:ee:12:23:fd:9e:a4:a5:c1:d5:ce:cf:6e:d0:
         3c:a5:d3:7c:db:83:a2:b0:6a:eb:ca:af:a0:23:8b:8c:db:eb:
         64:ca:16:e9:ea:32:8e:82:df:f6:1f:97:6c:c9:d0:4e:b0:1e:
         6b:ea:42:7b:df:89:a8:f6:b5:ee:a8:3b:98:e6:cc:77:59:b1:
         b9:c2:42:a6:63:a9:fa:4f:19:9e:2b:62:8f:4a:ca:cf:66:36:
         4a:4a:d7:37:19:d7:4e:30:75:22:9c:d2:f1:65:83:cf:4a:9d:
         7b:c7:01:55:0e:e4:85:57:83:8a:cb:d8:5a:be:51:2b:18:26:
         37:aa:f4:a9:b9:0e:07:a8:59:7f:1e:e0:48:91:38:66:c4:b3:
         f6:c3:4a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:15:11 2026 by rpki-client