Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
File:                     yFEG2q06lz_emJFPfMHM012Mw8M.mft (raw, json)
Hash identifier:          4hjJ18maAYe68uUCkcxogzqT0Muh566KKml1lLDRrJ0=
Subject key identifier:   50:33:7B:D9:59:73:12:BF:E5:81:AB:EB:A4:35:01:86:6C:E6:18:EA
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Certificate issuer:       /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial:       01A0CB2236357881A1A79113315EED0A5F84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
Manifest number:          1A6C
Signing time:             Tue 22 Sep 2026 22:00:11 +0000
Manifest this update:     Tue 22 Sep 2026 22:00:11 +0000
Manifest next update:     Wed 23 Sep 2026 22:00:11 +0000
Files and hashes:         1: 9-N6pNClbD9TW9GB1CAgMdzr4Tk.roa (hash: 5ZEJ2hAJfJWVHDDR0yYyaLfl4wYzvQGgrMUVflW8yik=)
                          2: dPHqIY7qbdPlJuiUMKI9vu705BQ.roa (hash: iEFUmiIqI94qx/d/ZIh+kjuR+jCUesRKMo6DZPKrgqY=)
                          3: yFEG2q06lz_emJFPfMHM012Mw8M.crl (hash: CWCySzejR+kJ+2xjcz9s8wWpZ7lJCrBvATArJTpMz7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:22:36:35:78:81:a1:a7:91:13:31:5e:ed:0a:5f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
        Validity
            Not Before: Sep 22 22:00:11 2026 GMT
            Not After : Sep 23 22:00:11 2026 GMT
        Subject: CN=50337bd9597312bfe581abeba43501866ce618ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:88:93:f0:af:10:07:e5:4b:76:34:44:d5:52:
                    bb:2e:12:c8:0e:d3:30:3a:f7:66:d5:e3:33:8f:54:
                    38:a3:4d:20:ae:ed:73:9c:1b:10:41:cd:ae:95:5a:
                    5f:ac:50:a7:1f:d9:4b:13:6d:1c:5c:8e:fa:9c:99:
                    f3:44:61:94:b1:0c:20:49:18:39:b5:9d:1c:de:72:
                    dd:2b:ea:71:5d:cc:7e:36:e9:bc:30:03:f3:9d:d6:
                    03:c4:c0:e5:98:8c:61:cf:d8:16:96:15:97:92:e9:
                    2b:23:ab:e0:58:e5:2d:b9:a0:35:16:67:d7:14:ac:
                    04:81:7a:2f:b8:15:4c:45:1f:c9:86:48:35:d1:7b:
                    9f:1e:73:3f:8f:e7:92:ca:22:7f:41:6d:a0:10:15:
                    a2:03:49:27:4b:35:6a:4b:4d:ec:ce:c5:35:07:38:
                    94:c1:59:7f:fc:37:6a:28:82:0d:ee:de:79:03:15:
                    74:8c:73:6f:e3:e1:61:3d:3a:38:cb:a6:ed:dd:b5:
                    08:a0:3e:3b:7a:30:8e:3c:4a:d8:e1:ff:f3:5d:4d:
                    f1:47:8b:f1:cb:d4:74:ab:fe:97:74:89:bc:52:6b:
                    5d:7f:5d:76:da:b9:2b:da:ee:f2:6c:0d:65:b1:ef:
                    f0:5f:31:5a:cb:90:cb:3f:78:b6:b8:40:91:17:51:
                    4b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:33:7B:D9:59:73:12:BF:E5:81:AB:EB:A4:35:01:86:6C:E6:18:EA
            X509v3 Authority Key Identifier:
                keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ce:6c:a9:4b:a4:c5:33:eb:ba:58:e1:1b:de:d2:a3:81:b6:
         dd:cb:8a:1b:17:b9:3b:59:00:81:52:49:c9:98:59:a7:30:46:
         5f:33:0f:8c:91:10:79:0e:4d:90:19:5d:46:ac:af:fd:ea:7c:
         3a:a2:33:f6:27:14:5e:48:cc:da:0f:e2:14:f8:51:85:78:b1:
         8c:8b:8b:d9:b5:e4:c6:86:f4:a9:70:6f:6e:8b:d7:df:db:8f:
         f4:65:2b:3b:76:30:ac:e6:d9:76:6e:8b:61:61:74:b4:43:5c:
         c0:78:44:f3:ef:56:76:23:7e:ee:ee:99:88:f6:dd:dd:4f:f7:
         80:50:9d:9a:c4:52:c4:16:46:a2:ee:70:f1:95:5b:10:0b:1c:
         50:bd:61:47:86:96:47:63:a8:30:8a:76:90:90:1a:06:dd:62:
         31:c8:bd:34:48:9c:e3:92:d8:ea:5a:82:cc:7f:00:04:9a:d7:
         a4:6d:64:b5:78:93:27:53:ae:9a:c3:68:b0:ef:a4:23:a9:33:
         35:a7:b8:c2:54:88:a9:0f:83:c3:85:6a:dd:29:02:b8:3d:c4:
         38:51:b6:6e:c1:82:b2:dc:89:15:ca:01:52:b7:c3:37:20:e9:
         76:54:d1:f9:1b:52:21:19:e7:27:b4:c6:a3:a9:c7:e0:13:fc:
         8f:f9:b3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:24:35 2026 by rpki-client