Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
File:                     yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft (raw, json)
Hash identifier:          5ht57/XtENLUUgnuWwnY6UF4t3iQuFubKNgYCLU0qnY=
Subject key identifier:   9A:34:15:21:50:19:6F:03:FF:14:D9:29:66:C6:36:E7:F5:AF:09:72
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Certificate issuer:       /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial:       01A0C5FC266CE10947320C2C01B57DB7BDB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
Manifest number:          0EC0
Signing time:             Mon 21 Sep 2026 22:00:31 +0000
Manifest this update:     Mon 21 Sep 2026 22:00:31 +0000
Manifest next update:     Tue 22 Sep 2026 22:00:31 +0000
Files and hashes:         1: E2zzXQ54xG7WLQ4EAWvDS5mcEy4.roa (hash: 1CmVUeU/gi0IzJZ7FqgYWAYmrsykqbvWe2Uux9ESnfc=)
                          2: M16a-01DtEnUChbTQJhjr1Iefi0.roa (hash: MvFHVj8+o4PtyZlfLnoWLUlGFyHMzdje5B5jzpVV+ao=)
                          3: fYFb1Y-NrescEZS13kBhzxAZwCo.asa (hash: PK8fg+eevsgYRUzK5CVwRm3AD9wujkCIUbycGA1SZNY=)
                          4: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl (hash: sVxRiWCSJUMO8jHt1aQcZt776F/+UrfB/PzABVDw98I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 22:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:fc:26:6c:e1:09:47:32:0c:2c:01:b5:7d:b7:bd:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
        Validity
            Not Before: Sep 21 22:00:31 2026 GMT
            Not After : Sep 22 22:00:31 2026 GMT
        Subject: CN=9a34152150196f03ff14d92966c636e7f5af0972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9c:e7:c2:fd:ce:b2:5c:a5:f2:ea:37:44:ee:
                    da:47:f1:4d:45:58:5c:58:ae:a3:cc:b1:13:b8:cc:
                    47:52:b8:61:93:5f:e6:47:ee:94:d8:53:3a:05:c3:
                    34:fe:1a:3a:1f:4c:6e:1a:46:ae:eb:3a:cc:ad:f0:
                    fe:5d:fe:17:38:2b:b0:56:5f:7d:e2:3b:04:15:ab:
                    f9:3f:1d:ad:d0:a4:fe:2c:58:f8:03:c1:9f:97:87:
                    8d:7c:54:e7:99:73:0e:4f:fe:22:a2:91:cb:45:bb:
                    80:db:63:bc:18:b0:1a:f1:85:ba:17:34:93:93:29:
                    47:c6:80:33:ae:f6:a2:7c:2e:44:51:9e:65:61:e7:
                    c3:08:c6:c2:e3:c5:1c:f0:ce:30:cd:9a:ff:77:f7:
                    08:29:96:db:6c:4e:49:bd:f9:47:8e:e3:69:5d:21:
                    c9:f5:24:da:ad:e4:71:24:40:56:6a:bb:b4:67:47:
                    b3:3e:86:70:57:e8:b1:0b:01:24:9b:e9:ac:4f:36:
                    86:bd:3d:b0:35:ed:df:07:5d:0a:11:de:da:f1:aa:
                    b3:19:81:18:d5:24:10:d2:82:e7:d9:4a:d1:1a:63:
                    05:24:06:94:d4:96:b4:07:21:89:7c:1e:43:ea:b4:
                    f4:7d:ef:17:fb:cb:59:f8:61:a6:7c:bb:e0:8e:bc:
                    b5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:34:15:21:50:19:6F:03:FF:14:D9:29:66:C6:36:E7:F5:AF:09:72
            X509v3 Authority Key Identifier:
                keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a1:6f:f8:96:7e:54:b9:fd:7c:dd:6b:04:87:2f:9a:1a:45:
         5f:54:aa:12:72:cc:45:eb:32:c8:b9:4d:6f:b9:5d:d0:02:cb:
         68:2f:89:6c:7f:4e:3f:88:1c:9e:61:0c:08:7f:a4:c6:3c:a6:
         a0:83:d8:f7:c0:32:13:e2:c7:01:44:e7:77:3a:19:3d:5d:0e:
         61:93:0a:b5:02:33:53:a1:13:c3:3b:b8:c3:7b:e3:96:bc:b8:
         d0:81:5a:c4:73:a1:82:50:b5:3a:f0:d5:e3:f6:d7:7a:96:ae:
         a5:b1:3a:36:bc:de:d2:25:2b:bc:41:42:73:a7:9f:c8:d6:2a:
         df:b6:70:41:54:6b:72:30:e4:fd:1b:0b:2a:f1:ff:c7:df:b2:
         b1:27:07:e9:da:ed:5b:26:be:70:a2:e2:de:f7:0b:ad:0a:06:
         42:f4:24:5a:dc:ae:c6:4a:23:61:4e:61:d6:75:6b:22:5a:bd:
         30:f0:e7:be:c6:11:e7:49:b0:73:ac:10:ea:95:07:9f:81:9d:
         c9:38:c1:58:87:19:60:e8:b6:d3:21:8b:c5:7d:91:e5:ed:43:
         71:2a:43:3f:dc:d5:db:5b:ca:63:86:e1:73:e2:7f:04:3b:f7:
         60:83:2f:88:9a:48:ca:3c:2d:f4:25:d0:bf:2e:b2:66:ca:b7:
         fc:e1:69:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:20:42 2026 by rpki-client