Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.mft
File:                     RYYKw_LILnYscXB-YHYOM7mWLpY.mft (raw, json)
Hash identifier:          8aCa9JNNuztKMeX7rJS05cY4qYhmuQCQ07oZqcNEQAU=
Subject key identifier:   0E:12:A4:C0:38:DB:44:74:E2:28:F5:FB:59:C8:4E:1D:04:B3:CB:77
Authority key identifier: 45:86:0A:C3:F2:C8:2E:76:2C:71:70:7E:60:76:0E:33:B9:96:2E:96
Certificate issuer:       /CN=45860ac3f2c82e762c71707e60760e33b9962e96
Certificate serial:       01A0E3D1165C6FE2057A819DC06CD9A0FFB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RYYKw_LILnYscXB-YHYOM7mWLpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.mft
Manifest number:          020A
Signing time:             Sun 27 Sep 2026 17:02:05 +0000
Manifest this update:     Sun 27 Sep 2026 17:02:05 +0000
Manifest next update:     Mon 28 Sep 2026 17:02:05 +0000
Files and hashes:         1: RYYKw_LILnYscXB-YHYOM7mWLpY.crl (hash: VOqX/36ZIHkh8Eh61GaGzjC+AzNvOoHyLwOIWpIf344=)
                          2: mmEnZdJB5y2A5vx7a-IUKiFNSKo.roa (hash: h0AxjH15fpWyphKp2ONrmBwWqI/VqO79cDpaG7xwPAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RYYKw_LILnYscXB-YHYOM7mWLpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 17:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:d1:16:5c:6f:e2:05:7a:81:9d:c0:6c:d9:a0:ff:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45860ac3f2c82e762c71707e60760e33b9962e96
        Validity
            Not Before: Sep 27 17:02:05 2026 GMT
            Not After : Sep 28 17:02:05 2026 GMT
        Subject: CN=0e12a4c038db4474e228f5fb59c84e1d04b3cb77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:65:bb:dd:4a:35:6a:a6:88:29:9d:a6:55:
                    f1:25:f8:6c:f0:54:34:c3:07:c2:25:1c:52:52:8d:
                    4a:59:83:cf:cb:50:3e:25:8b:50:1c:7a:f8:cd:38:
                    b5:3d:4d:9d:08:1b:44:0c:59:f0:af:e7:45:36:1e:
                    44:6e:2e:c8:ff:f7:ea:00:3c:fa:7f:67:a5:32:5e:
                    c2:d4:55:5e:34:fa:ef:0d:de:12:a2:92:5e:80:96:
                    cb:b9:e9:44:d9:f6:3a:bb:8c:a9:0d:32:a1:43:24:
                    87:f7:78:b9:6a:b3:25:2d:9b:fc:fa:25:fb:a4:9f:
                    aa:c2:b5:71:8d:fd:1c:2f:c0:a7:7a:9e:27:66:8e:
                    c2:b4:33:11:74:f4:62:6b:cd:25:24:f8:ee:3d:5a:
                    49:84:04:27:5a:fc:50:1e:b9:07:a9:c6:1d:91:00:
                    99:be:b6:da:87:9b:d6:ca:a9:f4:f5:77:7c:ff:71:
                    eb:5d:80:a4:d8:7c:9d:16:21:5d:12:e0:8e:d2:10:
                    54:d6:1f:c3:ce:26:4f:49:67:b9:d8:e6:1e:69:5a:
                    69:21:12:78:3e:92:48:e8:0e:e2:52:bd:e1:37:f9:
                    d0:4b:86:d7:f2:88:2d:d9:90:37:4e:89:9e:d3:e1:
                    81:1a:f2:cf:50:f1:38:5a:f0:fb:92:e4:93:86:3b:
                    88:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:12:A4:C0:38:DB:44:74:E2:28:F5:FB:59:C8:4E:1D:04:B3:CB:77
            X509v3 Authority Key Identifier:
                keyid:45:86:0A:C3:F2:C8:2E:76:2C:71:70:7E:60:76:0E:33:B9:96:2E:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYYKw_LILnYscXB-YHYOM7mWLpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3e46eb-1ee5-4d00-9f06-c976463b7e0c/1/RYYKw_LILnYscXB-YHYOM7mWLpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:43:e2:d7:b2:71:a0:19:9d:bf:5d:da:ee:5b:cc:84:68:ba:
         94:08:33:25:1c:74:2a:86:06:ea:38:fb:d5:76:d3:74:07:9c:
         57:72:5d:d7:36:82:4a:4d:b0:78:96:4e:06:2d:2b:5c:11:86:
         fc:db:73:a2:52:70:0e:ac:19:ff:3e:66:69:8a:59:dc:5a:9a:
         f6:7b:15:ea:ac:98:89:32:f5:c5:3c:e2:d1:04:85:f0:fa:3e:
         99:be:9e:a0:0e:bb:75:29:1a:48:41:d2:aa:07:02:57:f5:61:
         d7:7f:b4:c6:65:f9:1e:fc:5e:74:e8:b8:1b:83:f1:6f:d4:30:
         72:f3:ca:77:53:bb:f2:38:45:65:f1:6b:8f:dc:34:6a:75:a4:
         7d:c2:af:88:4a:78:2b:17:25:5d:1f:05:f8:4d:9b:f3:a4:d6:
         b9:8a:8f:42:5a:1b:3b:58:e1:1d:58:d2:6f:08:58:47:f3:6b:
         f0:0b:92:2c:d1:7c:7c:8e:b3:bb:5f:32:35:e2:0e:26:df:fa:
         36:de:25:26:39:5f:ff:38:c3:77:33:8d:f2:39:ae:b4:42:67:
         ca:54:50:85:b3:4c:e7:ce:9e:a2:a1:86:1a:b2:9e:c4:60:c1:
         b7:f6:04:b2:df:10:f6:02:d9:90:9b:e1:72:ed:00:ad:67:41:
         71:8e:30:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDj0RZcb+IFeoGdwGzZoP+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ODYwYWMzZjJjODJlNzYyYzcxNzA3ZTYwNzYwZTMzYjk5
NjJlOTYwHhcNMjYwOTI3MTcwMjA1WhcNMjYwOTI4MTcwMjA1WjAzMTEwLwYDVQQD
EygwZTEyYTRjMDM4ZGI0NDc0ZTIyOGY1ZmI1OWM4NGUxZDA0YjNjYjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrtlu91KNWqmiCmdplXxJfhs8FQ0
wwfCJRxSUo1KWYPPy1A+JYtQHHr4zTi1PU2dCBtEDFnwr+dFNh5Ebi7I//fqADz6
f2elMl7C1FVeNPrvDd4SopJegJbLuelE2fY6u4ypDTKhQySH93i5arMlLZv8+iX7
pJ+qwrVxjf0cL8Cnep4nZo7CtDMRdPRia80lJPjuPVpJhAQnWvxQHrkHqcYdkQCZ
vrbah5vWyqn09Xd8/3HrXYCk2HydFiFdEuCO0hBU1h/DziZPSWe52OYeaVppIRJ4
PpJI6A7iUr3hN/nQS4bX8ogt2ZA3Tome0+GBGvLPUPE4WvD7kuSThjuImwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4SpMA420R04ij1+1nITh0Es8t3MB8GA1UdIwQY
MBaAFEWGCsPyyC52LHFwfmB2DjO5li6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUllZS3dfTElMbllzY1hCLVlIWU9NN21XTHBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zZTQ2ZWItMWVlNS00ZDAwLTlmMDYt
Yzk3NjQ2M2I3ZTBjLzEvUllZS3dfTElMbllzY1hCLVlIWU9NN21XTHBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zZTQ2ZWItMWVlNS00ZDAwLTlmMDYtYzk3NjQ2M2I3ZTBj
LzEvUllZS3dfTElMbllzY1hCLVlIWU9NN21XTHBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApEPi17Jx
oBmdv13a7lvMhGi6lAgzJRx0KoYG6jj71XbTdAecV3Jd1zaCSk2weJZOBi0rXBGG
/NtzolJwDqwZ/z5maYpZ3Fqa9nsV6qyYiTL1xTzi0QSF8Po+mb6eoA67dSkaSEHS
qgcCV/Vh13+0xmX5HvxedOi4G4Pxb9QwcvPKd1O78jhFZfFrj9w0anWkfcKviEp4
KxclXR8F+E2b86TWuYqPQlobO1jhHVjSbwhYR/Nr8AuSLNF8fI6zu18yNeIOJt/6
Nt4lJjlf/zjDdzON8jmutEJnylRQhbNM586eoqGGGrKexGDBt/YEst8Q9gLZkJvh
cu0ArWdBcY4wrQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 04:07:48 2026 by rpki-client