Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
File:                     YoVOil7h3sifJbKnhZAj_7Ejufg.mft (raw, json)
Hash identifier:          +aiczr5zh+UZ7IcFk75XvEp6PWXPTp505V+p4AXYWNM=
Subject key identifier:   A8:D8:4A:E7:F1:96:5D:3E:40:38:B9:56:9E:E8:2A:91:43:DD:8E:42
Authority key identifier: 62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8
Certificate issuer:       /CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
Certificate serial:       01A102803BD853E6D55F7B072078F1EDA202
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
Manifest number:          0A0D
Signing time:             Sat 03 Oct 2026 16:02:00 +0000
Manifest this update:     Sat 03 Oct 2026 16:02:00 +0000
Manifest next update:     Sun 04 Oct 2026 16:02:00 +0000
Files and hashes:         1: YoVOil7h3sifJbKnhZAj_7Ejufg.crl (hash: NheC8YmTFi86l204auq9RNHXFJxOlh/W5DTwVJWdImA=)
                          2: isOSymizWXOcC4S89abLh_Td0W4.roa (hash: ZSx/++lxhtzVvGMFIOdk3/EWMp5zvQTOhZYOai4ono8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 16:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:80:3b:d8:53:e6:d5:5f:7b:07:20:78:f1:ed:a2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62854e8a5ee1dec89f25b2a7859023ffb123b9f8
        Validity
            Not Before: Oct  3 16:02:00 2026 GMT
            Not After : Oct  4 16:02:00 2026 GMT
        Subject: CN=a8d84ae7f1965d3e4038b9569ee82a9143dd8e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:19:29:b5:e7:23:b7:c9:dc:06:43:61:d5:16:
                    25:40:b2:ff:1b:48:f2:c8:10:ce:30:c5:e7:7e:4f:
                    d4:78:42:00:d1:a6:0f:22:b9:9f:5d:dd:6a:90:9d:
                    21:76:b2:33:8f:1d:40:32:a2:8b:7a:e2:4a:12:55:
                    7a:94:fd:6c:23:7b:c7:8c:1c:3c:8f:22:8b:ac:38:
                    4b:33:67:9e:6e:09:08:1f:0f:65:d1:f4:6b:cd:d1:
                    03:60:89:44:37:dc:cf:d0:09:eb:6c:a2:4e:cf:32:
                    81:38:25:a9:6f:6a:d6:ec:65:7e:6e:76:ff:bf:99:
                    74:eb:f1:3a:b2:5e:ab:28:bc:88:d4:ee:45:b1:4b:
                    55:83:ce:81:dc:60:59:82:3b:bc:b9:c4:38:83:cd:
                    c8:22:8b:4e:b8:2b:63:4d:13:e3:8e:6c:9a:1d:67:
                    54:b0:b3:f2:93:4a:25:fb:18:74:a1:8e:97:2d:b1:
                    aa:22:f4:3b:cd:79:65:cf:dd:a6:ed:63:76:fa:2f:
                    0a:21:aa:ba:b5:7c:83:b8:20:7c:b8:7b:f0:c9:d2:
                    c3:dd:ca:00:26:b3:0c:f9:6f:e2:9c:7d:25:62:79:
                    89:3f:ac:d2:03:65:72:ab:2e:fd:64:dd:cb:29:66:
                    a5:00:ff:12:d3:60:b2:7a:c2:e4:c3:5b:52:ca:77:
                    d5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D8:4A:E7:F1:96:5D:3E:40:38:B9:56:9E:E8:2A:91:43:DD:8E:42
            X509v3 Authority Key Identifier:
                keyid:62:85:4E:8A:5E:E1:DE:C8:9F:25:B2:A7:85:90:23:FF:B1:23:B9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoVOil7h3sifJbKnhZAj_7Ejufg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f61d3d-890d-4926-8f38-35b1c5b8ad34/1/YoVOil7h3sifJbKnhZAj_7Ejufg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:fc:2b:dd:88:3c:3c:bf:7b:26:7a:61:ba:1d:a7:3e:9d:0a:
         6c:2c:89:be:bc:09:fc:7b:dc:cd:72:f5:92:dd:b8:75:fa:71:
         3f:f0:7f:ef:5a:02:d8:76:e0:8e:d4:4e:7f:4e:ae:24:d6:7f:
         c2:72:03:2e:96:d2:f9:1b:50:78:94:39:61:bd:22:bf:9e:1f:
         a9:47:8d:b5:46:ee:c7:34:be:ed:76:e6:de:f8:98:22:19:e3:
         7c:ea:bf:95:cf:c5:f8:87:81:c7:83:7f:66:a0:77:f9:2a:9c:
         48:4e:fa:ba:4e:d3:79:f0:24:ed:f5:aa:fd:c0:7e:fe:64:e1:
         17:3f:17:bf:80:d0:62:0e:f7:33:9b:22:d0:e1:ec:b2:6b:7a:
         bd:f7:60:0d:18:8b:74:d2:f6:c9:73:26:a4:ee:e2:59:2a:ed:
         db:5c:2c:a6:1d:c2:d2:3e:fc:a4:58:36:f0:d5:37:7a:11:a8:
         d9:5e:a8:19:d7:aa:38:16:4b:88:e5:42:b6:8b:3a:84:db:79:
         46:8b:5a:5c:8a:49:1d:48:a8:8d:b0:61:7c:af:8b:c8:77:c9:
         67:54:f9:c2:73:6d:e8:15:02:20:c1:9c:db:76:0f:fc:9b:8f:
         a7:b2:4e:77:14:a9:7a:1a:57:2f:79:3b:c3:84:ae:48:b6:5b:
         7d:ec:ed:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:59:12 2026 by rpki-client