Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
File:                     rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json)
Hash identifier:          igkdOemXvGEl97wZdTxuhzDriYNLtkxuFmSUNkWn3+M=
Subject key identifier:   FD:E1:F3:94:13:1B:B3:EF:E0:AA:08:2C:C8:DD:2B:F0:2F:2F:6C:93
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Certificate issuer:       /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial:       01A0DDCEC0A91FFC9D27AEF67B61546C9379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
Manifest number:          0CC2
Signing time:             Sat 26 Sep 2026 13:01:49 +0000
Manifest this update:     Sat 26 Sep 2026 13:01:49 +0000
Manifest next update:     Sun 27 Sep 2026 13:01:49 +0000
Files and hashes:         1: pfwLznvoYJJqfRCh4o2zmPQohuE.roa (hash: AfFbs4eSFCbfML477ZQsZuVVVQdsY3hUFmoLGoZMXTY=)
                          2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: JewUJMhS8ogdX0TDBSWhENz6Mvo149JEJcRmaXpBTJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:ce:c0:a9:1f:fc:9d:27:ae:f6:7b:61:54:6c:93:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
        Validity
            Not Before: Sep 26 13:01:49 2026 GMT
            Not After : Sep 27 13:01:49 2026 GMT
        Subject: CN=fde1f394131bb3efe0aa082cc8dd2bf02f2f6c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5c:6b:70:6a:76:07:69:d1:88:1f:e9:34:97:
                    06:64:6c:2b:c6:fa:69:f7:f4:52:d1:7f:78:fd:5b:
                    38:03:d6:4b:e8:81:cd:b2:9a:fc:b5:70:c1:0a:8d:
                    eb:4d:5b:3c:59:a1:9a:9f:80:af:7c:20:4a:ce:ea:
                    03:75:1c:40:0f:66:18:03:17:2f:6a:0f:28:a8:28:
                    13:b2:aa:af:3a:35:0f:df:e6:fa:d8:ac:b2:e7:97:
                    b3:ca:85:49:4a:00:2b:73:a3:2a:b1:81:26:8a:4e:
                    e7:41:42:2e:0b:e1:55:09:64:73:04:5e:60:fa:b7:
                    bc:e0:ad:66:dc:55:46:31:29:8e:bc:3b:bb:b1:e5:
                    2f:8f:8e:89:ef:9e:c9:45:19:0e:0a:64:d1:11:50:
                    49:85:57:96:fb:60:d0:d8:9c:44:e8:07:f0:3a:e8:
                    0a:91:35:c5:cd:c6:80:1e:ef:a0:ce:79:0f:3b:df:
                    1d:96:0c:ce:d3:73:8e:97:c6:b0:30:01:18:91:d9:
                    e8:81:60:79:b8:cc:30:c1:26:07:b3:00:e2:24:c4:
                    79:f3:84:09:9d:5a:ad:79:b5:4d:55:5e:94:38:7a:
                    d7:bc:b8:f3:d0:8b:16:76:e6:f4:0d:29:d4:0b:c1:
                    ef:5e:2c:3f:e4:54:d6:d2:a1:81:6b:83:9a:92:e3:
                    79:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E1:F3:94:13:1B:B3:EF:E0:AA:08:2C:C8:DD:2B:F0:2F:2F:6C:93
            X509v3 Authority Key Identifier:
                keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a4:6a:eb:19:03:2f:9f:63:8a:3d:b1:cb:06:c8:65:db:3b:
         8b:c4:d2:31:14:f0:53:92:bf:43:08:ad:28:5d:8f:09:4e:db:
         14:9b:6d:bd:78:54:86:48:b7:b0:b9:61:c6:b7:f8:8c:e1:14:
         c1:1f:71:0f:f4:58:da:b5:97:dc:5a:d6:2f:fe:33:0d:1c:23:
         dc:21:98:9e:ce:f0:61:9e:1c:b9:5a:34:c0:59:42:69:f6:5a:
         65:b2:e0:2a:da:82:c7:01:0d:9b:fd:f7:91:37:3f:dd:52:dd:
         a9:49:72:c4:3c:42:3b:58:72:2a:2d:0b:7b:9b:e1:94:1d:98:
         0e:9e:65:4c:7e:07:1a:39:f3:44:b1:26:f2:5e:91:52:ed:51:
         05:1b:a1:98:24:9f:e5:73:58:71:fb:1c:e9:63:27:f5:5a:02:
         ec:88:7c:d3:47:9b:8b:6c:5b:35:a4:b7:d2:71:a1:cc:1b:45:
         04:6f:fa:ef:4b:da:87:10:10:69:52:6a:3f:a1:39:a4:23:30:
         99:10:89:98:ca:5b:80:6a:15:ad:73:fb:a9:16:01:13:cc:ff:
         49:b7:a2:3d:da:3d:d5:86:9f:2f:18:51:e2:71:88:59:13:4c:
         4e:49:e3:5a:4c:0c:a7:c7:49:17:5a:3f:8b:26:38:51:e7:4e:
         c0:d3:53:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:18:21 2026 by rpki-client