Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File:                     yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier:          +p23LtvAWoSmqRGw3QL3shzQAR2hx89pU73EYLNkBVw=
Subject key identifier:   BE:9B:B3:5E:6C:28:0A:4E:03:72:34:71:D9:1B:D9:34:C1:96:B9:B7
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer:       /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial:       01A0CE5A79A38AF14C2CDDDD374DF096A7CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number:          0AC1
Signing time:             Wed 23 Sep 2026 13:00:30 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:30 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:30 +0000
Files and hashes:         1: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: KfuxjnB2ZcOhqxTEoOXcJffl/yd9HD2Ys+Rq76ggSqo=)
                          2: ykn6ra4wP0urmcyUyxV1FWZ2Kp0.roa (hash: IJ1D7ZuY9/uNKyGnyBgDEp0dSpIFh5mPiRSScoZkO+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:79:a3:8a:f1:4c:2c:dd:dd:37:4d:f0:96:a7:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
        Validity
            Not Before: Sep 23 13:00:30 2026 GMT
            Not After : Sep 24 13:00:30 2026 GMT
        Subject: CN=be9bb35e6c280a4e03723471d91bd934c196b9b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:68:a5:1e:35:4a:0b:84:89:bb:1d:b6:20:a1:
                    64:02:ab:cb:57:50:f6:86:34:cf:6f:59:7a:82:6a:
                    51:c7:69:9c:b6:d5:5a:97:e3:2a:da:67:6d:a1:15:
                    56:bc:5c:ce:e4:8b:60:49:f5:01:99:8b:a3:d2:0e:
                    9d:6e:34:9b:58:87:01:2a:c1:f2:6f:7d:7f:a0:8f:
                    2f:e8:d2:83:da:6a:26:a4:0e:41:f1:3d:cc:57:6d:
                    d9:6e:eb:d6:2c:53:d3:5e:b7:c6:95:f5:09:93:6b:
                    a8:68:b7:9e:fe:d4:60:ac:5d:48:d6:70:e9:c0:11:
                    99:7d:d4:5a:fb:83:9f:cf:4a:1a:38:3f:95:59:1d:
                    7c:2a:4d:ec:9b:0d:27:d1:71:48:5c:31:fe:84:81:
                    03:6f:7a:3a:50:ed:ed:69:5e:1c:e3:ee:91:ef:a8:
                    92:84:6f:80:71:bf:9d:b0:05:c5:66:03:22:81:92:
                    7e:a0:b4:98:1c:90:9e:e5:7a:7b:86:40:7b:72:40:
                    0f:ca:d5:e3:29:50:8f:09:9d:16:e6:f3:27:3b:3a:
                    75:8e:bb:5e:d0:cc:91:1f:7c:c2:47:ed:73:b1:cd:
                    f8:ef:5f:0d:5a:01:e9:66:ad:66:dd:fe:f3:00:32:
                    24:aa:16:34:ac:7a:3f:3e:b2:35:79:92:87:29:6e:
                    55:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9B:B3:5E:6C:28:0A:4E:03:72:34:71:D9:1B:D9:34:C1:96:B9:B7
            X509v3 Authority Key Identifier:
                keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:39:73:99:3d:ec:e0:46:ce:65:39:df:fc:ff:30:c8:c0:73:
         cf:4e:30:ab:19:e9:1c:54:a0:c6:41:17:7e:84:2d:86:ab:80:
         b9:8d:3d:2c:eb:f8:03:9d:fd:6e:22:6f:1b:5e:36:09:c0:c4:
         46:22:b5:e8:9a:03:d1:58:8e:f6:1c:cd:72:dc:1b:42:0f:ad:
         11:fe:fa:73:43:68:ce:b3:f6:be:97:e5:62:4a:c7:e4:a9:c7:
         12:15:65:c6:7d:a7:b3:cd:c4:2a:28:b5:05:c3:95:2b:71:6c:
         fd:b1:61:e3:38:5b:53:2d:f2:3f:35:52:09:b0:41:9e:50:e8:
         56:e1:a7:68:c2:9f:51:ed:32:ad:c2:fb:11:b8:8f:c6:8e:65:
         af:bc:b8:0d:a4:3b:90:f7:90:e8:13:f5:82:35:47:e5:9c:19:
         87:c2:d5:46:81:72:8e:df:d9:3b:f0:99:ff:36:ec:df:d6:00:
         ad:c1:67:77:f6:f2:68:f8:13:25:5b:f1:d8:d2:f0:e8:89:71:
         ba:61:87:21:a6:f6:80:a4:22:fa:c5:d1:05:a0:0f:c8:f4:1f:
         d0:bf:01:eb:38:ea:fa:71:31:3c:a0:7b:73:8c:27:e0:44:50:
         76:49:56:da:50:92:8f:c7:77:26:8a:8a:c7:ef:08:02:32:0f:
         d9:37:72:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOWnmjivFMLN3dN03wlqfLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YTRiYmQ3OGFmMzYzZmE1YmVlZTYzMmU4YmRjNDhiNjI5
NzM0M2MwHhcNMjYwOTIzMTMwMDMwWhcNMjYwOTI0MTMwMDMwWjAzMTEwLwYDVQQD
EyhiZTliYjM1ZTZjMjgwYTRlMDM3MjM0NzFkOTFiZDkzNGMxOTZiOWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2ilHjVKC4SJux22IKFkAqvLV1D2
hjTPb1l6gmpRx2mcttVal+Mq2mdtoRVWvFzO5ItgSfUBmYuj0g6dbjSbWIcBKsHy
b31/oI8v6NKD2mompA5B8T3MV23ZbuvWLFPTXrfGlfUJk2uoaLee/tRgrF1I1nDp
wBGZfdRa+4Ofz0oaOD+VWR18Kk3smw0n0XFIXDH+hIEDb3o6UO3taV4c4+6R76iS
hG+Acb+dsAXFZgMigZJ+oLSYHJCe5Xp7hkB7ckAPytXjKVCPCZ0W5vMnOzp1jrte
0MyRH3zCR+1zsc34718NWgHpZq1m3f7zADIkqhY0rHo/PrI1eZKHKW5V2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6bs15sKApOA3I0cdkb2TTBlrm3MB8GA1UdIwQY
MBaAFMiku9eK82P6W+7mMui9xItilzQ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8yNDZiNGQtNGQzZS00ZTAyLThjMDct
YWM2OGE1MGQwYzk5LzEveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8yNDZiNGQtNGQzZS00ZTAyLThjMDctYWM2OGE1MGQwYzk5
LzEveUtTNzE0cnpZX3BiN3VZeTZMM0VpMktYTkR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzlzmT3s
4EbOZTnf/P8wyMBzz04wqxnpHFSgxkEXfoQthquAuY09LOv4A539biJvG142CcDE
RiK16JoD0ViO9hzNctwbQg+tEf76c0NozrP2vpflYkrH5KnHEhVlxn2ns83EKii1
BcOVK3Fs/bFh4zhbUy3yPzVSCbBBnlDoVuGnaMKfUe0yrcL7EbiPxo5lr7y4DaQ7
kPeQ6BP1gjVH5ZwZh8LVRoFyjt/ZO/CZ/zbs39YArcFnd/byaPgTJVvx2NLw6Ilx
umGHIab2gKQi+sXRBaAPyPQf0L8B6zjq+nExPKB7c4wn4ERQdklW2lCSj8d3JoqK
x+8IAjIP2Tdy3w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:09:28 2026 by rpki-client