Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
File:                     Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft (raw, json)
Hash identifier:          cpHl4bEOSFnyvSAJzmVFzqOGgLbYOONGBZ49cKGGFuk=
Subject key identifier:   FD:E0:95:C0:16:FF:7A:0C:79:21:38:E6:A3:9A:F1:E2:06:AD:BB:66
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Certificate issuer:       /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial:       01A0D4CB91CB74A5687F1EDD0306DB1EDA7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
Manifest number:          0C2A
Signing time:             Thu 24 Sep 2026 19:01:45 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:45 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:45 +0000
Files and hashes:         1: 8iuryml04fmZQZih2yKLkb78hW8.roa (hash: dl916czGPtggSTrDPjUVhqgnNmY5i/HKL0IVfwG6bUw=)
                          2: AJEm0tpZ80PX3AOqTJlJZLLFZRo.roa (hash: 9niTFrHFWmF03337Z/JCr6D2zR0zYQdhet735YBvLGg=)
                          3: IzHBf-6JQHYiq0mQaX9LNODSrgY.roa (hash: QyUgoGmd9TYlb5SKtNXg1Y50O2LoAn5N5cOAKeGh974=)
                          4: Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl (hash: ElsW3cGSmeklyqZp9wCIKG/DV0xoaJLUzkhR1pe15M4=)
                          5: asMbjhi5n7R-4d1-brs9UkGUZm8.roa (hash: cmHCUp+gfJvKd0Y0CWwhr4SU5hBfJ/pd//G9MmHNJ9M=)
                          6: ccp8zm5l48CBMMmzIGnalUun-Ds.roa (hash: z44haiNc9m8K5F7QSyFq2IsEkays9vJP4wkOIVQCjsw=)
                          7: cg2x230-3Iq3Js9h5EnAAX7JARE.roa (hash: tnyzdBnOYXcXrLiFFvC1x//NGKCuvkSWE98rCps7Sxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:91:cb:74:a5:68:7f:1e:dd:03:06:db:1e:da:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
        Validity
            Not Before: Sep 24 19:01:45 2026 GMT
            Not After : Sep 25 19:01:45 2026 GMT
        Subject: CN=fde095c016ff7a0c792138e6a39af1e206adbb66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:13:8e:e7:78:fb:f2:d7:cf:e3:10:5b:2c:7a:
                    6c:78:9f:97:a4:55:d6:b6:20:e6:aa:be:bc:51:ee:
                    33:25:61:56:d6:c8:c2:5e:53:0b:a4:d8:60:63:40:
                    96:43:12:e2:62:12:93:f3:c6:0e:72:e3:0a:de:30:
                    29:f1:59:d8:ac:af:a1:67:fc:93:5c:a4:c3:81:55:
                    7d:bd:be:50:eb:88:44:35:92:b1:43:33:24:95:ca:
                    b4:c1:45:8e:8f:73:2a:43:5b:af:53:27:ae:36:8b:
                    d6:be:74:84:94:35:80:36:da:b6:c5:b0:3b:5e:07:
                    cd:58:7d:3a:3f:6d:ff:71:1a:a0:27:2c:94:bc:2c:
                    12:8c:1f:99:da:21:8a:85:c1:d5:4b:9a:46:9f:6e:
                    1f:83:70:47:d1:1f:a6:7a:a7:65:b0:d7:50:5f:66:
                    56:25:2d:e5:fa:ab:bb:07:da:e2:10:03:6e:b3:ab:
                    98:53:4e:73:5f:21:25:7a:a1:40:c4:9a:14:03:0d:
                    c0:67:34:fd:af:17:b9:a7:5c:32:b9:3e:e5:80:c6:
                    17:a6:7a:92:a0:90:6e:56:d8:9c:f5:ad:9f:a1:7d:
                    79:1a:44:dd:a5:d4:87:a6:19:d3:6a:b3:42:f7:ef:
                    73:2e:65:f4:01:4d:9b:c4:a0:4b:a4:8f:4a:8f:6c:
                    86:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E0:95:C0:16:FF:7A:0C:79:21:38:E6:A3:9A:F1:E2:06:AD:BB:66
            X509v3 Authority Key Identifier:
                keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f5:32:ef:71:5d:7d:1b:15:c2:12:04:6b:63:8c:d7:22:85:
         7d:02:47:c7:35:69:a7:a6:5c:67:f9:1d:84:99:1d:e0:0a:77:
         c8:c2:3a:ed:6e:36:88:ff:fd:8d:cb:94:51:f7:a0:9a:08:5b:
         a3:be:0e:ae:23:68:ef:88:f7:b1:1d:fa:7b:68:36:45:b9:15:
         67:3a:57:1f:58:72:49:0a:87:9f:24:8e:1f:01:d3:36:b5:71:
         9e:d4:37:87:bf:65:72:80:5d:e4:7e:a4:df:ca:ec:85:af:ef:
         48:ee:06:b8:44:33:ef:d1:8b:3e:fe:be:fe:75:6f:65:ff:5a:
         14:ab:12:5c:99:48:ce:12:35:ed:c8:e7:1a:b1:34:c7:70:60:
         5d:79:06:39:e9:9c:71:a2:47:77:ac:e9:d8:47:c5:29:9a:5b:
         6d:1c:6f:5c:33:8d:ab:99:c0:5b:4f:fe:81:da:08:1b:e8:5d:
         9f:e9:ef:10:79:6c:cb:08:10:8d:01:1b:2e:59:97:87:ef:1a:
         a9:fd:1a:f7:8b:8a:8b:62:c0:92:17:bd:5c:b6:8c:06:c8:90:
         a8:d8:c6:e8:03:9f:68:eb:3d:f4:1c:74:ec:dc:57:9a:88:a2:
         01:7e:49:6a:74:37:46:05:08:2a:96:05:12:27:45:a1:7d:b2:
         f1:4b:0a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:23:26 2026 by rpki-client