Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.mft
File:                     RY-8K-wAmQ5cw7QhdHwFV6jtu_8.mft (raw, json)
Hash identifier:          TYj/u0SlPI7H39/jAOShuGnEAf/5/IaMnZlcUAGoxJI=
Subject key identifier:   F0:FB:B7:11:63:54:CE:5D:FB:4F:45:F6:CB:B5:BA:AA:8F:B9:A5:82
Authority key identifier: 45:8F:BC:2B:EC:00:99:0E:5C:C3:B4:21:74:7C:05:57:A8:ED:BB:FF
Certificate issuer:       /CN=458fbc2bec00990e5cc3b421747c0557a8edbbff
Certificate serial:       01A0DCF2DC19F394695EABA28068FE828C7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.mft
Manifest number:          EC
Signing time:             Sat 26 Sep 2026 09:01:38 +0000
Manifest this update:     Sat 26 Sep 2026 09:01:38 +0000
Manifest next update:     Sun 27 Sep 2026 09:01:38 +0000
Files and hashes:         1: 8vX1WdlmM8tymTaEX4AMsj1Yp1U.roa (hash: wdVLNmwDr0kbfoI7x7yvRxbo7hOTDr5XiPVUT8cP3+4=)
                          2: PUjKVuvXyy_Bmuww0cD28b0h0YU.roa (hash: 2Hrc6A2H1DaOZgvfa2sIx+XtUdZTXzHJ1TKysCf+RYU=)
                          3: PvcdpObefkzVah2If1vGVRM5pPw.roa (hash: E2SK6HlEkywPIAxJejC343dtDicPwBaW8NfPI1M31po=)
                          4: RY-8K-wAmQ5cw7QhdHwFV6jtu_8.crl (hash: cS4Eg0kGTxO7GWpFHTu2vDzByLaVrR2I03tCSMMUxWo=)
                          5: v8lfLOKHVZnkrdD-G0CENmIoGFY.roa (hash: +aHQYF/Vd4+YgYybVszc6iY/MnmjqAxgJRPynynFvpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:f2:dc:19:f3:94:69:5e:ab:a2:80:68:fe:82:8c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458fbc2bec00990e5cc3b421747c0557a8edbbff
        Validity
            Not Before: Sep 26 09:01:38 2026 GMT
            Not After : Sep 27 09:01:38 2026 GMT
        Subject: CN=f0fbb7116354ce5dfb4f45f6cbb5baaa8fb9a582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:da:f1:8a:23:b1:76:5c:1a:1c:2c:a6:06:cf:
                    3b:ef:47:31:61:0f:62:4c:17:e3:be:53:47:ab:94:
                    4c:1b:72:d1:1d:44:ab:2d:17:62:49:e1:a4:f1:0d:
                    b6:10:44:87:a3:a4:f5:21:00:0e:17:c1:0f:45:b7:
                    c4:49:e1:fa:ce:f1:85:f9:c8:72:65:22:6d:5f:a4:
                    d2:0e:e3:ae:d4:d5:0d:19:00:9f:c9:69:1a:13:49:
                    bb:d6:8d:bc:92:7f:5d:9a:85:ab:99:89:d8:3c:d6:
                    34:92:7c:e6:1c:6d:f0:51:fc:7e:b8:5b:c2:1f:2b:
                    34:de:9c:60:1a:0b:3b:0f:c2:01:4e:f6:79:e8:c2:
                    0c:b5:fe:e3:d7:a4:8e:f0:d8:8a:b9:36:53:70:81:
                    61:95:56:88:36:03:27:7f:b2:5d:95:52:a8:7a:b9:
                    cd:30:64:ec:7f:c6:c1:ad:4f:ec:39:3b:06:f6:ee:
                    dd:d4:98:28:46:67:6a:6f:79:de:b8:86:cb:34:1c:
                    da:28:f2:ae:62:37:41:a5:ce:9f:88:2e:6e:e7:a5:
                    5d:76:3a:1f:75:f5:c4:53:3a:b3:2c:63:61:29:db:
                    b5:cd:32:63:3c:a2:34:70:11:17:1b:24:69:46:58:
                    6b:db:5c:28:8e:f8:be:27:23:f4:71:6a:ac:00:f8:
                    92:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FB:B7:11:63:54:CE:5D:FB:4F:45:F6:CB:B5:BA:AA:8F:B9:A5:82
            X509v3 Authority Key Identifier:
                keyid:45:8F:BC:2B:EC:00:99:0E:5C:C3:B4:21:74:7C:05:57:A8:ED:BB:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/RY-8K-wAmQ5cw7QhdHwFV6jtu_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:33:ff:34:ee:06:87:21:f7:a2:40:34:65:31:ac:b9:86:c7:
         5c:8d:7a:43:a7:45:b7:a0:3b:d1:2a:32:c2:2c:c2:c6:27:98:
         4e:5b:82:eb:a0:eb:7b:1a:6b:83:75:a7:00:fc:f5:bf:11:00:
         8e:f2:63:bb:c6:b5:43:56:48:76:c3:fe:db:c1:90:2d:a1:5d:
         bd:30:33:07:41:a9:78:35:da:3c:2f:81:54:4e:47:ab:ee:ae:
         42:f8:7a:03:6e:35:ca:af:b8:4c:85:81:a1:de:62:c5:4b:51:
         d1:8c:f7:f0:f9:da:74:07:c2:1d:a9:22:58:c0:5a:3f:99:ce:
         60:b1:34:59:64:02:b2:9d:21:01:b9:0e:a0:f3:93:0e:4e:bb:
         27:37:f6:cb:4b:67:d4:ff:d4:ef:1d:0c:46:4d:16:be:8c:56:
         ba:7f:ff:12:31:d7:9f:3d:c5:97:6e:56:b4:a8:58:2e:7e:fb:
         5d:b3:df:0b:7e:b9:87:21:22:a5:a1:44:83:0f:7c:cb:10:b4:
         16:09:8c:c8:d0:93:e2:7c:6a:02:4f:ab:d4:ad:b6:7d:f8:30:
         e9:49:19:41:b8:16:6e:1c:34:66:d3:cf:f6:26:f3:6d:d3:60:
         ff:5b:60:77:1f:ef:be:35:9f:0c:4e:00:bb:1a:c2:50:6a:66:
         8e:c9:01:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDc8twZ85RpXquigGj+gox+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OGZiYzJiZWMwMDk5MGU1Y2MzYjQyMTc0N2MwNTU3YThl
ZGJiZmYwHhcNMjYwOTI2MDkwMTM4WhcNMjYwOTI3MDkwMTM4WjAzMTEwLwYDVQQD
EyhmMGZiYjcxMTYzNTRjZTVkZmI0ZjQ1ZjZjYmI1YmFhYThmYjlhNTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNrxiiOxdlwaHCymBs8770cxYQ9i
TBfjvlNHq5RMG3LRHUSrLRdiSeGk8Q22EESHo6T1IQAOF8EPRbfESeH6zvGF+chy
ZSJtX6TSDuOu1NUNGQCfyWkaE0m71o28kn9dmoWrmYnYPNY0knzmHG3wUfx+uFvC
Hys03pxgGgs7D8IBTvZ56MIMtf7j16SO8NiKuTZTcIFhlVaINgMnf7JdlVKoernN
MGTsf8bBrU/sOTsG9u7d1JgoRmdqb3neuIbLNBzaKPKuYjdBpc6fiC5u56Vddjof
dfXEUzqzLGNhKdu1zTJjPKI0cBEXGyRpRlhr21wojvi+JyP0cWqsAPiSxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPD7txFjVM5d+09F9su1uqqPuaWCMB8GA1UdIwQY
MBaAFEWPvCvsAJkOXMO0IXR8BVeo7bv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlktOEstd0FtUTVjdzdRaGRId0ZWNmp0dV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTkt
OWM1ZTFkZWIyYzMzLzEvUlktOEstd0FtUTVjdzdRaGRId0ZWNmp0dV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTktOWM1ZTFkZWIyYzMz
LzEvUlktOEstd0FtUTVjdzdRaGRId0ZWNmp0dV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTP/NO4G
hyH3okA0ZTGsuYbHXI16Q6dFt6A70SoywizCxieYTluC66Drexprg3WnAPz1vxEA
jvJju8a1Q1ZIdsP+28GQLaFdvTAzB0GpeDXaPC+BVE5Hq+6uQvh6A241yq+4TIWB
od5ixUtR0Yz38PnadAfCHakiWMBaP5nOYLE0WWQCsp0hAbkOoPOTDk67Jzf2y0tn
1P/U7x0MRk0WvoxWun//EjHXnz3Fl25WtKhYLn77XbPfC365hyEipaFEgw98yxC0
FgmMyNCT4nxqAk+r1K22ffgw6UkZQbgWbhw0ZtPP9ibzbdNg/1tgdx/vvjWfDE4A
uxrCUGpmjskB+Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 17:27:12 2026 by rpki-client