Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
File:                     yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json)
Hash identifier:          yXMpu5Cdo/CRHDv1f0MYS6c2AKNEccorLrKj0SPwhMU=
Subject key identifier:   76:1D:B9:7E:C6:9D:A5:D1:9D:AF:E6:E9:FE:AD:4E:1C:6F:C0:2B:1A
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Certificate issuer:       /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial:       01A13BCA44EB6BBB5454328DE9649FD7C5EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
Manifest number:          1268
Signing time:             Wed 14 Oct 2026 19:01:13 +0000
Manifest this update:     Wed 14 Oct 2026 19:01:13 +0000
Manifest next update:     Thu 15 Oct 2026 19:01:13 +0000
Files and hashes:         1: 7dhm2Zcd4Yp-TNCgcfPEdG07eU0.roa (hash: Ku59KYA/bpOTiSrNCRzEUdSrtiwxD1BQ8G4rzI5+xwk=)
                          2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: ERuIr3pvGaTCUXdTebhn1L/B89OpKf3xCZzig4WAoSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:ca:44:eb:6b:bb:54:54:32:8d:e9:64:9f:d7:c5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
        Validity
            Not Before: Oct 14 19:01:13 2026 GMT
            Not After : Oct 15 19:01:13 2026 GMT
        Subject: CN=761db97ec69da5d19dafe6e9fead4e1c6fc02b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:af:ed:3b:ff:b9:36:8b:d7:df:9c:7e:50:
                    07:bc:f9:b1:d6:0e:73:67:9e:bc:e2:39:fb:15:a3:
                    61:0e:36:87:5c:9f:6b:fc:df:ce:e7:ae:76:d1:5a:
                    22:87:39:37:3d:1c:66:1e:24:4a:fd:7f:8b:0a:6e:
                    77:ab:fa:a3:b4:91:4b:a4:92:26:8b:3c:74:a7:c6:
                    e4:80:6f:25:a1:55:65:33:bd:ae:49:2d:97:8b:6e:
                    64:51:6f:1a:73:92:fd:69:04:73:00:a1:cc:f0:6c:
                    aa:55:da:74:6a:b3:b6:f6:cf:d6:8f:cd:73:d1:1c:
                    94:d3:24:4d:6d:a4:fa:36:d2:38:4b:cd:20:03:67:
                    99:11:23:5f:51:6c:04:ca:be:73:18:d1:2b:4f:b8:
                    97:67:32:30:db:aa:2e:a4:ea:b2:16:c5:94:07:0a:
                    8c:7f:0c:ac:47:29:01:b9:73:e2:d8:8b:35:ea:b9:
                    00:0f:66:c4:70:f7:5e:f0:66:b1:f3:1c:3d:be:0d:
                    18:66:04:4f:f5:47:e2:c0:09:99:e2:bc:0a:17:f4:
                    95:82:9d:50:70:28:bf:e1:4a:16:8d:61:a7:a8:3d:
                    c8:29:7c:74:37:7a:09:41:54:c2:56:6a:27:27:53:
                    28:2c:80:b1:b9:4d:19:a3:fb:81:e8:53:5e:c6:c8:
                    8c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1D:B9:7E:C6:9D:A5:D1:9D:AF:E6:E9:FE:AD:4E:1C:6F:C0:2B:1A
            X509v3 Authority Key Identifier:
                keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b8:77:8f:fe:b8:08:47:7e:82:15:7d:d1:34:38:16:bf:85:
         c0:e4:8c:10:f5:02:d8:2a:fc:01:a3:f9:aa:e8:88:04:b6:ac:
         4d:d5:47:da:31:5e:d8:33:17:bb:3c:bc:1f:57:5a:28:cb:72:
         5c:7c:e5:75:f8:5b:62:7e:d5:54:bb:57:e3:23:99:87:ef:9b:
         51:28:1f:b5:dc:e4:81:aa:5b:c0:49:c2:61:70:00:53:f6:10:
         9c:db:c3:99:c6:4a:57:29:36:8c:18:7e:a7:8f:bb:d6:e7:13:
         fd:df:bf:28:36:13:c0:21:8c:ed:2a:83:70:07:8d:8e:c3:a0:
         81:bc:54:3f:a9:f3:a6:eb:2b:89:5a:0e:cf:ca:6d:ba:59:25:
         21:f2:81:fc:91:09:2c:8d:d7:84:e4:6a:64:b9:bd:20:5a:8a:
         9b:2e:02:30:8f:34:5e:82:45:f9:6a:06:b1:c1:da:b0:65:ff:
         0f:f7:cc:5b:2f:9c:0e:f8:2f:e0:f6:f7:3c:a4:ef:8b:92:8c:
         40:7d:43:42:5b:d4:eb:19:2a:52:a7:64:ac:64:e9:5f:db:8b:
         81:b7:bf:e4:0d:4d:98:cb:5c:9d:77:2e:eb:35:9d:0e:60:00:
         da:f6:ae:56:53:00:8c:ae:7e:e4:87:98:de:68:33:a7:1c:64:
         20:36:a9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:30:25 2026 by rpki-client