Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File:                     YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier:          ylHWWU/jVNqTMNn8EzAdbLS8gZ6NP8eeRafF8YlVr+I=
Subject key identifier:   22:4E:B3:A9:C5:F4:DD:14:10:8C:33:C2:32:4C:D6:54:DD:84:41:1C
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer:       /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial:       01A0CB59D0D94F271C863EF048C0423CD6BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number:          1A6A
Signing time:             Tue 22 Sep 2026 23:00:56 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:56 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:56 +0000
Files and hashes:         1: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: lg3e3uxqzdNruS+EZ1A7wwQ8z7GZXLoXXUoFQHtvh34=)
                          2: zk24Xibi_69XM4miradQH_-zfVo.roa (hash: 8vWhGhRcVD9hGye0zCP9w/L6uhcw5ZBizDAK5O4GtQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:d0:d9:4f:27:1c:86:3e:f0:48:c0:42:3c:d6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
        Validity
            Not Before: Sep 22 23:00:56 2026 GMT
            Not After : Sep 23 23:00:56 2026 GMT
        Subject: CN=224eb3a9c5f4dd14108c33c2324cd654dd84411c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:29:fb:fa:a7:29:87:3f:b1:ec:fa:a6:25:e9:
                    7b:96:91:80:53:a2:40:48:27:3e:41:d4:f8:7c:4f:
                    fb:e6:f6:f4:26:d4:7a:01:de:dd:f4:dd:ee:80:84:
                    8a:cf:bb:73:95:1d:95:85:f9:63:b3:9a:c8:8a:c3:
                    a4:d5:15:3c:f7:fa:fd:d9:ba:ee:f0:f3:84:4d:7d:
                    03:f5:41:24:58:21:ae:98:be:bb:7c:0d:0d:3b:10:
                    c6:f9:c2:d0:3e:b5:42:e3:88:0f:04:10:87:19:78:
                    47:c8:eb:fe:dd:bf:10:09:8f:42:72:cb:ed:d3:1f:
                    24:6c:7b:66:89:b4:e2:0e:13:b0:44:cd:8b:66:4c:
                    25:f3:31:5b:8b:6c:fc:76:36:db:eb:33:77:a9:2b:
                    8e:be:69:d2:af:91:71:ad:08:de:ba:c5:01:35:b0:
                    a5:d8:86:40:5d:d6:18:74:b9:53:d4:4e:17:f6:db:
                    5a:67:ea:36:b1:2a:f9:f0:3d:96:19:4f:75:62:7f:
                    9f:f1:72:f5:a7:f2:f6:19:c2:75:97:30:3a:99:a0:
                    6c:fc:e6:17:71:8a:20:d9:21:bd:01:8a:cf:83:76:
                    6e:da:58:9d:1f:6c:d9:a6:60:21:4c:87:20:87:b8:
                    df:47:ba:c0:89:46:51:36:50:f3:ed:42:73:68:19:
                    12:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:4E:B3:A9:C5:F4:DD:14:10:8C:33:C2:32:4C:D6:54:DD:84:41:1C
            X509v3 Authority Key Identifier:
                keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:89:e4:ac:4c:5f:59:f1:de:ad:43:3b:17:f3:44:c2:1f:bf:
         0d:ec:3a:3d:83:61:c4:e5:0e:6a:cc:d6:0b:40:09:b5:4e:87:
         0e:13:fc:1e:23:2e:1b:49:a5:8f:da:43:c6:5e:89:45:a1:7e:
         1f:aa:d8:2e:d1:29:a9:e2:53:96:ed:8a:4c:d5:84:2d:bc:72:
         9f:52:55:2b:2e:08:5f:aa:8b:85:7e:25:2a:65:96:25:26:29:
         b6:74:8a:53:60:b8:e5:c2:15:c4:d8:4b:d4:5d:e4:f6:1b:3a:
         71:af:52:dc:74:6e:5e:83:b1:02:05:17:ee:12:24:3d:d1:29:
         99:fd:40:b5:38:9b:34:2e:c7:f5:79:f2:6e:e6:fd:3d:aa:2d:
         0e:76:f4:80:4d:57:4a:56:0f:c3:c4:5e:40:42:95:e0:1c:98:
         a7:c8:f0:c1:7a:a6:db:44:f3:f2:6a:4f:c6:8f:ed:e7:6f:a9:
         66:bf:0d:97:ba:ec:af:bb:84:a5:68:fa:27:c3:7a:d5:10:33:
         63:cd:ae:59:4b:ce:c1:c5:5c:2e:6d:d1:67:42:67:83:79:2f:
         15:1a:19:c5:42:17:f4:0b:f0:59:65:0a:f7:cd:47:03:bb:9c:
         4e:87:48:51:eb:c4:34:e5:60:c6:5b:72:61:c0:25:1d:62:a2:
         4f:db:c3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:58:24 2026 by rpki-client