Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
File:                     yyVmhD4D1jmkYLG9hr9pwcOfixE.mft (raw, json)
Hash identifier:          dCV5wXoHNzd5UYcIkr67SwbKtGPos4Rz6ple/GncUJA=
Subject key identifier:   A5:E1:DB:E2:C5:85:0F:DE:EC:0F:8D:A7:C7:76:7C:14:6B:E6:77:FB
Authority key identifier: CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11
Certificate issuer:       /CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
Certificate serial:       01A0BD9E0049A86D6DE707ACEB4DD0488750
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
Manifest number:          16BA
Signing time:             Sun 20 Sep 2026 07:00:43 +0000
Manifest this update:     Sun 20 Sep 2026 07:00:43 +0000
Manifest next update:     Mon 21 Sep 2026 07:00:43 +0000
Files and hashes:         1: fX_U5i8_505QcoxrQlZ0CvkYmQI.asa (hash: aVCE2GeGq3K644sCZQdXHhaAtDF/U4Oz4kWE7lxH4VQ=)
                          2: yyVmhD4D1jmkYLG9hr9pwcOfixE.crl (hash: qnBH4NoNs4MyQZWlBI/mkmRwa9Ly1hn5Me5EQTmlUis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:9e:00:49:a8:6d:6d:e7:07:ac:eb:4d:d0:48:87:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb2566843e03d639a460b1bd86bf69c1c39f8b11
        Validity
            Not Before: Sep 20 07:00:43 2026 GMT
            Not After : Sep 21 07:00:43 2026 GMT
        Subject: CN=a5e1dbe2c5850fdeec0f8da7c7767c146be677fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e3:6e:55:f1:2a:f7:bb:33:88:a1:01:ee:50:
                    1d:1f:be:85:a6:92:31:6a:39:fc:dc:69:1c:91:6b:
                    e0:d1:0b:cd:ba:0b:77:2e:a0:af:76:7b:df:30:54:
                    e5:d9:0f:0a:ba:5d:0d:0b:87:2c:dc:c8:a2:b7:39:
                    24:1f:b4:ea:c0:53:3c:57:03:38:8e:b8:c8:6d:f6:
                    04:30:85:29:2f:c7:21:8a:6a:25:cb:75:0c:db:48:
                    a2:3d:97:35:33:a4:2b:53:b5:d3:6d:dc:b6:82:43:
                    f1:ab:40:a0:ac:a1:ff:cf:e6:56:15:b8:51:df:b1:
                    0e:10:77:44:cd:be:71:29:e5:3d:79:83:ad:8e:35:
                    8a:34:56:c4:6b:a4:ef:30:8c:31:14:0a:01:ae:7b:
                    34:5a:00:06:c7:79:68:37:c8:ee:67:3f:0a:91:42:
                    db:7a:d4:de:92:47:db:d4:62:6b:a6:0c:e5:55:6f:
                    66:f1:c1:8c:b3:4d:a3:a3:9e:f7:0d:b3:46:30:57:
                    07:39:e2:81:d7:2f:90:c8:c2:02:1c:40:ac:68:de:
                    3a:28:7d:e7:26:48:63:79:a8:20:1a:8c:30:42:06:
                    47:6b:68:c7:8e:e3:71:30:8a:92:20:4d:e4:88:8d:
                    84:b6:49:58:ca:4d:ad:c5:8f:e8:2f:f5:b2:64:06:
                    75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E1:DB:E2:C5:85:0F:DE:EC:0F:8D:A7:C7:76:7C:14:6B:E6:77:FB
            X509v3 Authority Key Identifier:
                keyid:CB:25:66:84:3E:03:D6:39:A4:60:B1:BD:86:BF:69:C1:C3:9F:8B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVmhD4D1jmkYLG9hr9pwcOfixE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e7a32c-73f1-467d-98df-06b8128988f8/1/yyVmhD4D1jmkYLG9hr9pwcOfixE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:45:22:ac:35:d3:57:ad:e2:f6:ac:30:5f:2a:ec:85:25:7b:
         35:14:b2:0b:00:e6:e5:c8:f9:5b:30:59:7e:1d:ca:d9:28:f7:
         d8:2b:47:e1:8a:f3:54:ee:3b:c6:e5:86:c5:fd:c3:ab:7f:a8:
         12:69:f1:4c:7f:ce:d8:3a:5d:19:72:33:65:f0:d3:c0:68:0e:
         0f:ab:1f:f7:0f:cf:67:1e:d2:14:e9:6e:f4:1c:09:87:a3:61:
         23:a2:2d:ef:44:cc:d8:98:61:74:3b:e6:3e:f5:62:1a:95:1d:
         6f:0a:20:ad:dc:02:d5:06:ec:f7:9d:7c:d5:bf:21:d0:2c:3d:
         62:5a:87:dd:32:e9:ed:4b:2e:e9:ce:13:e9:c7:4a:e8:13:50:
         37:3a:2f:d5:a4:ff:29:e9:49:06:9d:6b:c6:01:9f:07:d9:2a:
         54:ae:64:57:cb:98:6d:a6:76:bb:27:12:a2:b7:8f:94:dd:a5:
         05:fd:c7:3f:09:c7:ba:95:ff:2c:f0:26:cf:14:15:00:92:26:
         6f:fc:13:17:90:f9:ab:9d:28:cc:9e:24:d2:90:8f:74:33:ca:
         52:bd:72:b0:87:aa:0e:59:e8:db:27:d7:39:73:b4:69:2d:5c:
         06:86:08:ff:0a:6b:23:97:3b:73:ef:13:88:e2:98:f4:49:2b:
         66:aa:06:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:54:27 2026 by rpki-client