Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
File:                     MYy__80hEn3jYoaXWY2wwtnhE1E.mft (raw, json)
Hash identifier:          HGgSNgkBtYcEdqVZK8Hvc80ZrkNpAYC3UhysQlTR0YY=
Subject key identifier:   88:83:55:36:B4:E0:E1:97:13:19:32:AA:69:80:E2:03:09:FD:D5:B5
Authority key identifier: 31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51
Certificate issuer:       /CN=318cbfffcd21127de3628697598db0c2d9e11351
Certificate serial:       01A0CFA49870A4B359AFB41C919527D24AEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
Manifest number:          139E
Signing time:             Wed 23 Sep 2026 19:01:05 +0000
Manifest this update:     Wed 23 Sep 2026 19:01:05 +0000
Manifest next update:     Thu 24 Sep 2026 19:01:05 +0000
Files and hashes:         1: D4so7F4iJQ3ao6dIXFSQYC-XGbE.roa (hash: gqWDVnk0tUa5bFlFT+UYPIPkFsYBe4H7LkGhaI+lIUo=)
                          2: MYy__80hEn3jYoaXWY2wwtnhE1E.crl (hash: 4TFmDKVTwZzB5FKzOSPInsNQSBB3ulLPXmTBl1TOVjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:98:70:a4:b3:59:af:b4:1c:91:95:27:d2:4a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318cbfffcd21127de3628697598db0c2d9e11351
        Validity
            Not Before: Sep 23 19:01:05 2026 GMT
            Not After : Sep 24 19:01:05 2026 GMT
        Subject: CN=88835536b4e0e197131932aa6980e20309fdd5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5a:8a:d2:57:53:09:02:f9:0c:d5:e5:71:46:
                    f0:a2:8c:60:2b:61:34:cd:de:cc:01:45:13:c5:f7:
                    a3:2b:2c:06:5d:38:0b:b9:b4:4b:d1:88:97:8a:8b:
                    63:ad:a6:0e:fd:d8:1e:83:65:db:8d:7a:1e:4d:35:
                    96:14:9c:90:dc:6a:ff:eb:3f:1c:ac:ec:12:cd:76:
                    85:25:57:88:58:7f:fb:d1:16:1e:b7:fd:52:16:e7:
                    df:45:6b:49:1f:c0:ae:1d:3a:02:2d:3c:2f:3c:d3:
                    52:ec:0e:3d:13:77:70:6d:55:3e:08:38:f0:24:62:
                    0a:b0:e9:7e:06:dd:6e:84:fc:70:ef:ee:67:e2:63:
                    38:06:79:67:eb:1f:00:90:5c:ac:4c:37:1c:4f:72:
                    94:c5:46:ec:4f:65:58:53:1a:c7:f2:f9:05:5a:5f:
                    77:96:19:87:78:56:02:f3:0b:60:c3:6b:81:4b:e1:
                    a6:24:7a:a4:76:5a:81:15:11:e9:bd:a9:ec:70:89:
                    d7:fd:5c:d4:fd:a8:92:2c:5b:e7:f8:24:3a:d3:70:
                    fa:23:b9:09:28:18:fb:d0:c4:1c:43:95:6c:f6:93:
                    e1:01:a8:64:1c:8b:b7:c8:af:da:a5:13:c4:6b:e2:
                    5f:3f:ca:2b:00:e6:e1:cc:60:9d:e7:cc:0f:45:28:
                    0f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:83:55:36:B4:E0:E1:97:13:19:32:AA:69:80:E2:03:09:FD:D5:B5
            X509v3 Authority Key Identifier:
                keyid:31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:35:ac:ac:54:ec:ef:28:61:a3:b9:de:e5:9a:47:2d:d7:0c:
         8a:67:6f:aa:36:43:85:92:43:d7:3f:04:64:13:dc:ab:4e:ca:
         28:26:3f:8f:83:73:c3:b1:22:29:29:8d:d4:fa:f8:80:e6:4e:
         16:6f:89:46:97:ab:a4:34:67:ad:0a:5c:55:a0:03:d6:ce:39:
         0a:04:3a:42:2c:04:84:a7:ac:ca:4f:4a:ea:2d:40:c0:45:9e:
         42:6b:d9:b5:00:00:f7:c9:24:bf:5d:a4:3c:bc:e8:04:a0:47:
         c4:6e:6d:0a:81:d3:f4:09:ee:95:32:6b:5b:5a:a0:4f:8a:d1:
         d7:30:bc:ef:3b:61:07:d3:f5:82:c9:a7:a5:de:f4:ed:80:3e:
         86:cd:15:c4:e7:e6:fe:68:4f:5c:bd:39:c8:ef:b3:12:16:10:
         14:dd:2d:46:5d:43:40:60:f6:1e:13:de:c3:50:3b:31:54:31:
         fe:bd:04:ff:7f:a7:89:e4:d5:ea:1b:18:7f:18:f2:1c:c2:b8:
         a4:40:29:6e:d7:1b:47:14:2a:05:6b:7a:3d:c7:b8:cf:01:43:
         ad:ec:ee:07:13:02:7c:31:04:b4:06:4b:f5:bb:36:7e:19:2e:
         35:77:66:ee:b9:95:fd:82:5d:22:69:a7:18:9f:e5:7f:f1:b7:
         5a:a5:2c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:58:13 2026 by rpki-client