Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File:                     yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier:          mtwe4jQOHzVqQgiRJAPMFZTkvhB71V3L+4ClNIEkHK8=
Subject key identifier:   68:C3:3E:57:7D:0A:8F:96:F1:8A:12:D4:A9:3D:0D:34:A9:08:C6:FF
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer:       /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial:       01A1306A805B31C5857DB1CE7B0421D97DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number:          08ED
Signing time:             Mon 12 Oct 2026 14:00:48 +0000
Manifest this update:     Mon 12 Oct 2026 14:00:48 +0000
Manifest next update:     Tue 13 Oct 2026 14:00:48 +0000
Files and hashes:         1: HrcUui0miVrUYtzzMrX-U9gOlCo.roa (hash: UAsUsT7UI6Qc5HNmPWo/d7Tyc/aSJ+uqpouXt12HmG0=)
                          2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: LSNoAvmqR5v9mTLd3u+AZ1rYE6sYf9MSl86dXBNPt1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:6a:80:5b:31:c5:85:7d:b1:ce:7b:04:21:d9:7d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
        Validity
            Not Before: Oct 12 14:00:48 2026 GMT
            Not After : Oct 13 14:00:48 2026 GMT
        Subject: CN=68c33e577d0a8f96f18a12d4a93d0d34a908c6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:14:bb:bd:96:a9:bc:14:40:cb:8e:7e:96:
                    3a:ac:71:6b:71:7f:03:ba:34:b4:a1:81:0a:aa:ee:
                    0d:2d:5d:e0:7d:4d:6d:13:68:2d:d9:2e:dc:82:86:
                    5c:0b:89:26:99:5e:c7:b1:9e:02:86:c8:0b:0d:51:
                    48:d3:bd:9e:32:4e:52:1d:a0:a3:b1:ba:cd:e8:a8:
                    35:53:ad:e8:f8:8d:86:ae:a9:2e:3e:99:c7:30:55:
                    a5:c9:d5:24:b2:72:38:64:96:78:f9:9e:5a:18:a5:
                    92:0a:38:33:9c:d6:54:7a:5f:71:e7:b6:8c:c6:36:
                    a4:48:23:81:c3:7c:c7:02:d9:e8:74:b4:ab:fa:e5:
                    22:d4:c1:64:57:31:6d:3f:96:82:81:af:d8:41:12:
                    37:b0:5c:8d:a3:ae:07:2f:27:ad:d7:8a:29:d7:bf:
                    2c:b3:1d:6b:ea:a3:bc:b7:c3:f7:72:1c:97:e4:20:
                    14:b3:3d:51:c2:c4:e1:d9:74:43:bc:99:a2:e0:7d:
                    ef:ef:7a:ba:0b:af:77:36:f4:af:81:09:e6:69:c7:
                    3f:80:0a:06:ec:c6:3b:b5:94:bd:08:6f:50:c4:dc:
                    c2:24:3b:b3:5d:23:a1:e4:e9:be:ff:18:10:81:a4:
                    c4:2e:cb:ac:bc:08:30:77:0b:d7:36:2f:8a:c2:9e:
                    ad:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C3:3E:57:7D:0A:8F:96:F1:8A:12:D4:A9:3D:0D:34:A9:08:C6:FF
            X509v3 Authority Key Identifier:
                keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:db:c1:3f:3b:c4:80:2f:c4:3e:fd:b1:a9:ae:7c:f6:97:a6:
         c5:6d:31:5b:71:4a:80:4d:b6:3f:82:b4:53:80:20:11:91:95:
         c6:b6:8b:ee:52:37:7f:e6:b8:0e:6f:26:92:37:85:55:1d:55:
         98:a5:e7:43:79:ae:64:f3:4c:07:9b:7a:21:c0:e0:ef:73:07:
         25:c9:a4:53:f7:5e:46:77:8c:05:ef:27:a5:09:f4:17:4b:ed:
         5c:47:4c:61:85:b0:79:e3:9d:63:46:a6:1a:38:42:d9:15:f2:
         59:9d:34:68:90:7b:35:2a:54:93:1e:99:69:6a:ae:49:c6:b1:
         39:02:67:dd:a2:ca:d3:14:fe:05:47:3a:bc:8e:a5:d0:5b:b0:
         06:50:8e:b7:7c:8b:cd:86:e6:76:c3:ca:21:b2:7d:e2:15:a1:
         ae:0a:a3:9d:14:34:63:c2:08:8b:d1:d3:02:2d:46:6c:84:8f:
         03:9c:6e:04:27:e3:74:f2:ef:53:69:86:49:bd:b0:f7:7d:e7:
         48:06:9d:ba:3b:71:b2:bc:af:e9:e0:94:6d:83:ad:c9:28:d4:
         ba:7c:0a:ab:b4:2b:16:9b:69:dd:08:4d:ac:d5:0e:0d:21:7f:
         11:0f:8b:cf:b6:62:74:c7:1c:ac:d1:17:9e:cb:92:3c:ed:51:
         6a:f4:d9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 17:28:21 2026 by rpki-client