Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
File:                     y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft (raw, json)
Hash identifier:          VUx94RBmZxT3diO8EWHXZe5NgSH6csUL11t/BkmrV0w=
Subject key identifier:   A9:F9:01:6C:12:05:F8:7F:B6:D3:3C:0F:1A:38:B8:44:C9:13:09:2B
Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
Certificate issuer:       /CN=cbf74cd846493138f522c57c0065b5c60512dd09
Certificate serial:       01A132C6D13012A940A27EAC156AD69CE525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
Manifest number:          19AC
Signing time:             Tue 13 Oct 2026 01:00:52 +0000
Manifest this update:     Tue 13 Oct 2026 01:00:52 +0000
Manifest next update:     Wed 14 Oct 2026 01:00:52 +0000
Files and hashes:         1: 7wFOH7ecwAxbcPrjKMH8DMVlPm4.roa (hash: oDFpn/TpGeL3vgneJ/VQgGBHX/EOeGEzI4ysPf7pfaY=)
                          2: QLOd9vMTP4FPhghSPou0JbJuhUE.roa (hash: RwuImmn6QOcjTBNhpw2cK0vTsfjOTjWE/72ESbcTKQg=)
                          3: Y-pJ0zt5xFwsfApM5zD_msTaIqQ.roa (hash: a+YKFLuDobsKmaDDpSgIi2ckC2hwZqdDdY5fKql5U+8=)
                          4: oBXcY9E5U1GBb72h8m09mGmm-Vo.roa (hash: 9fw2PFDyEVoaxUE4CEIY7mthU2LIqsQo2HGJzEoheK4=)
                          5: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl (hash: k6PIyooUkGk3d6Ni8ujzW2RIjsyvbc074+JvCx3uqxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:c6:d1:30:12:a9:40:a2:7e:ac:15:6a:d6:9c:e5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09
        Validity
            Not Before: Oct 13 01:00:52 2026 GMT
            Not After : Oct 14 01:00:52 2026 GMT
        Subject: CN=a9f9016c1205f87fb6d33c0f1a38b844c913092b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e9:b3:fe:77:51:28:b6:a4:06:03:1f:1b:d4:
                    e0:69:af:81:24:91:22:f2:31:bb:34:1c:96:c5:07:
                    b8:a4:cd:d9:5f:44:96:97:4c:20:04:fb:5f:54:d0:
                    92:a8:f6:56:40:b7:e1:38:10:36:9e:fb:83:bf:29:
                    b4:04:a0:52:54:2a:a3:b2:77:e3:85:bb:20:a3:49:
                    67:e7:af:4a:69:c6:65:f8:ab:71:b8:ef:af:f4:4f:
                    03:6a:94:1d:be:1e:bb:1a:ce:f8:eb:5a:f7:d6:59:
                    df:e6:fb:87:a2:1f:7f:ae:3d:a7:3b:48:80:87:91:
                    f6:85:30:f2:e8:13:0a:5f:b9:65:f7:d5:2d:03:5d:
                    d7:09:5b:05:d6:56:12:55:ce:63:09:8f:a8:00:c3:
                    30:40:cc:11:3d:a9:ce:6f:cd:40:75:98:0a:73:c0:
                    3e:88:8b:ce:8d:09:b6:97:05:3a:cf:21:7f:1a:27:
                    e2:b2:f8:f8:58:b1:64:51:76:96:b7:9f:a5:ee:b8:
                    63:20:8f:18:e9:9f:e3:a6:58:55:57:88:5a:50:33:
                    56:b7:74:6e:66:8f:7b:1a:3d:f2:62:9f:62:7e:d0:
                    bd:f1:2a:d1:88:4d:76:f0:b0:3e:2e:49:ad:4d:07:
                    a0:81:f4:30:78:19:85:71:6d:a7:b2:26:f8:fb:e9:
                    2a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F9:01:6C:12:05:F8:7F:B6:D3:3C:0F:1A:38:B8:44:C9:13:09:2B
            X509v3 Authority Key Identifier:
                keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:99:9e:45:14:19:c2:c1:a4:8f:be:3a:85:6c:d3:ee:8f:18:
         ba:1e:6e:9a:26:eb:7b:a9:05:aa:6b:7c:bd:bd:95:19:be:3c:
         c2:ce:a2:f0:91:09:b7:49:38:61:f0:7d:74:03:5e:5f:97:f5:
         99:1a:b0:60:96:ec:92:3c:65:64:1f:18:4a:17:55:22:83:5e:
         53:8c:e0:76:99:85:ee:42:5a:79:a2:1c:53:10:12:fc:80:9a:
         4a:04:25:f7:12:9a:3c:0c:aa:89:09:13:e8:0e:ff:6f:d8:aa:
         32:8d:ad:1d:c1:ff:3a:dd:0d:96:9a:1b:0f:a1:67:4c:75:40:
         81:4e:9a:25:26:f1:d0:21:6b:45:0f:ae:4f:96:f8:43:b1:c1:
         b2:01:b3:bb:d2:33:09:2f:3d:bc:84:54:44:b8:a0:17:07:af:
         22:3f:6c:5f:9c:29:30:4e:cb:47:d1:f0:68:38:d8:cf:d6:3d:
         1c:2c:54:8a:64:f7:1c:ac:dd:9c:bd:d1:fc:80:9e:66:41:60:
         52:34:d7:fa:30:e2:be:1c:e6:bc:fb:4a:66:17:51:df:cf:13:
         73:8f:41:aa:03:1a:f4:6a:d9:66:ad:d3:a3:22:e6:a8:e4:bd:
         54:c2:34:26:8c:72:19:63:f8:ce:ce:ad:dd:09:92:8d:fb:00:
         be:9a:ae:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:07:49 2026 by rpki-client