Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File:                     yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier:          /eJByr15+BgC1Mw5JKG0MRGwh+T8XCHMn0z64DwtAp4=
Subject key identifier:   14:CD:85:47:23:84:B8:65:F7:D7:5D:AA:8A:25:4B:8E:55:12:1C:7E
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer:       /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial:       01A0C5FCFBBEAF00E1A5AC9D2878D04843C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number:          07BA
Signing time:             Mon 21 Sep 2026 22:01:26 +0000
Manifest this update:     Mon 21 Sep 2026 22:01:26 +0000
Manifest next update:     Tue 22 Sep 2026 22:01:26 +0000
Files and hashes:         1: Y5vED9_-DcGMaaxbEGOZus8MwVQ.roa (hash: G2iq16qjDO2AmE19u6Mdnenb3I/Kvxji/seB7NO5CFY=)
                          2: gKtjzQMB06yDauEd9zVELt-Geqk.roa (hash: ON0aCx2enNugObjEPugyFFI494d+5BTaKTrArKDjsJI=)
                          3: sLC5YO5xONWk4v-wyFAtQfaIubc.roa (hash: RnXdiuhlkryBeMlrPXhg5Tc0W7BvyjnuvWyXURl030k=)
                          4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: z3AZ48rUsuion6MtnXQrGX2J37oUZoVk2NGEnLMR/PY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:fc:fb:be:af:00:e1:a5:ac:9d:28:78:d0:48:43:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
        Validity
            Not Before: Sep 21 22:01:26 2026 GMT
            Not After : Sep 22 22:01:26 2026 GMT
        Subject: CN=14cd85472384b865f7d75daa8a254b8e55121c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:82:86:4f:8f:3a:fc:98:a5:a0:65:8e:a3:
                    cd:9d:4e:6a:5b:a1:c0:a1:d8:d4:c0:f8:f6:89:67:
                    37:b3:1e:02:4e:29:45:f7:d2:ee:c5:af:a0:72:ad:
                    f8:67:d5:e7:2c:2f:26:57:6f:8e:67:80:19:27:b6:
                    23:ba:31:8b:91:7d:49:05:87:6c:1e:e0:fe:ca:c0:
                    98:0a:f2:b0:ad:61:bb:90:b5:53:bc:16:30:75:91:
                    9b:fa:54:19:d5:31:c9:29:d5:5f:bf:66:2b:b9:6d:
                    c4:f3:9f:0f:be:1a:bb:85:28:25:50:92:19:b5:16:
                    7b:e6:0b:93:33:27:05:97:86:4f:cb:39:4f:a2:f5:
                    c5:b2:3d:7d:ea:05:c6:14:06:19:3b:ff:5e:41:ec:
                    04:58:47:6b:2e:4f:8e:aa:bb:a1:88:47:2c:05:0d:
                    da:fd:a4:51:6b:fd:54:72:d6:70:f5:f7:d9:80:30:
                    9e:11:81:5d:6b:86:93:cf:16:82:fb:1c:a4:3e:1b:
                    39:ec:8c:a8:ae:34:cf:8d:86:b4:f6:57:3b:e6:fb:
                    b4:e1:ae:b8:0a:03:b6:8a:ce:28:b9:18:b2:83:e3:
                    39:b4:ff:03:19:ac:7f:7c:71:04:06:d9:d9:f1:b0:
                    30:bb:ef:a6:5f:57:6a:c7:92:e6:f1:3b:7d:fc:26:
                    a0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CD:85:47:23:84:B8:65:F7:D7:5D:AA:8A:25:4B:8E:55:12:1C:7E
            X509v3 Authority Key Identifier:
                keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3c:6c:06:5d:81:af:17:c4:a1:21:6a:c1:de:14:06:e3:ef:
         61:3d:8a:9a:44:34:57:a5:ee:bb:df:5f:30:df:f4:82:6d:b7:
         e4:ff:e7:d1:c1:4d:f8:b7:f2:75:43:1a:45:15:05:7e:87:43:
         fc:b6:11:59:8d:bd:8d:9d:05:08:ea:04:46:c2:cf:8e:85:a8:
         5c:1c:3b:59:8c:82:70:0a:2c:f1:0a:d8:be:52:33:65:98:fb:
         20:d4:df:59:88:d8:84:39:2c:15:06:1c:0f:63:1c:d4:a2:ad:
         11:de:b2:25:dc:ee:b7:21:8b:22:30:f4:89:ea:1b:48:e4:77:
         f4:ac:a2:c8:b4:d6:c7:1c:ea:49:1a:25:9c:16:14:b7:03:f0:
         8a:20:d7:37:f7:eb:78:1a:b6:37:0c:2c:15:23:c0:8d:a7:fe:
         cb:b8:28:a2:d1:61:38:64:94:66:9a:43:c9:81:51:4c:c9:3d:
         68:4e:42:fa:27:91:5f:92:cd:53:a8:4e:08:29:92:1f:a2:b5:
         77:c0:e4:48:bc:06:82:a7:f6:31:60:5a:5e:5c:f7:4a:d0:83:
         dd:75:eb:ee:f0:85:bf:cd:08:2e:27:e2:23:d3:0b:c4:5a:6f:
         64:4e:5b:18:8c:5b:0e:bc:e6:6a:41:a6:16:87:ff:84:8a:73:
         22:57:9c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:52:13 2026 by rpki-client