Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
File:                     yda1mpPjJAg_vKQjfkfp9evzcas.mft (raw, json)
Hash identifier:          uakvgkx2fIuhNczHjwtcUUUDpXA12NKI581v/SXm9zA=
Subject key identifier:   4E:98:79:8F:D2:61:7A:03:B9:8E:17:0E:E6:4D:16:51:45:5D:33:FD
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Certificate issuer:       /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial:       01A0BE79ABC5204D84CE45800288ECB90465
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
Manifest number:          1A89
Signing time:             Sun 20 Sep 2026 11:00:39 +0000
Manifest this update:     Sun 20 Sep 2026 11:00:39 +0000
Manifest next update:     Mon 21 Sep 2026 11:00:39 +0000
Files and hashes:         1: FBCGTG64vLpl2gDVPvanQJATgB8.roa (hash: axM4/0Pr+RIyWyZE+LhS3ebRSN92aTrPRUXzdJeL/U0=)
                          2: Gqg2-sCdeAnxIxjnCqOjFkh4pyY.roa (hash: fXnPA1IUb+WwCmX8j2rz10mUAQFbNKLaEL207SLATEk=)
                          3: Xh_fZpcuD-kXAKnMm-XCgP1QCcM.roa (hash: E/KI5295u2flUvuXh7zmO0XDhUT77Ekqi6kGos1unAA=)
                          4: cdMwDxOwsmOgnXKtKxgQS9EwG5s.roa (hash: 9KAJy5B5/gYF9JmztZmHa3vCIGRv+J2QDYi/xV8zpFc=)
                          5: w9cLMtPbCYYrwoKERp06IPmC2bE.roa (hash: ey9n1gs4fwmE4LkooDwQ9cZLvMTfaqnyxO7TGDUAj68=)
                          6: wywpQzax_4ZtKoz9uAZxDjtcPmw.roa (hash: Q0w8drpmsGxodbGwxBVJJ2K2KkXwUZiHuoYb5PWlT/8=)
                          7: yda1mpPjJAg_vKQjfkfp9evzcas.crl (hash: Bh092qCeiOxDGdijCvhnbthLHntrFRgjNiQqAeoYP48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:79:ab:c5:20:4d:84:ce:45:80:02:88:ec:b9:04:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
        Validity
            Not Before: Sep 20 11:00:39 2026 GMT
            Not After : Sep 21 11:00:39 2026 GMT
        Subject: CN=4e98798fd2617a03b98e170ee64d1651455d33fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:07:97:04:9e:6b:d7:4a:96:20:b1:0b:34:
                    97:bf:1b:6c:db:dd:42:5c:82:9d:da:88:a4:c3:b4:
                    a7:71:f7:ad:8d:ea:77:aa:db:8f:71:24:1c:c9:98:
                    6b:20:92:d4:e0:1f:0d:76:09:c1:61:b3:38:e8:ae:
                    9f:d2:82:08:53:b4:e2:41:ae:55:43:66:db:d9:28:
                    25:44:d8:de:87:0e:af:f4:59:a1:23:4f:50:db:52:
                    99:5b:d3:e2:4b:a2:53:f3:58:46:40:22:2c:8c:d8:
                    90:d8:a1:55:bf:8c:01:68:aa:a9:99:3d:99:61:7b:
                    5b:eb:e0:ed:b6:19:61:fd:54:d3:21:fd:68:5a:42:
                    2e:aa:48:01:fa:6a:90:94:8a:ed:bd:3d:a4:6b:65:
                    7f:59:d2:27:bd:5a:7b:df:da:2d:5a:ca:bd:48:99:
                    96:7a:c8:81:38:43:1d:bd:8c:2d:43:b5:1d:d2:ab:
                    48:d1:b1:45:d9:e5:5e:d9:ee:d1:c9:04:b6:05:0c:
                    d4:53:79:56:e8:0e:0a:70:d9:b8:8a:4b:d2:88:85:
                    d5:18:ea:01:66:36:10:74:0a:d9:66:14:a6:ff:08:
                    25:a7:6d:3b:b0:06:a5:84:d4:b1:65:8d:c3:ae:d0:
                    09:1c:0f:84:3f:85:6e:01:ec:73:fb:de:3b:a0:89:
                    1e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:98:79:8F:D2:61:7A:03:B9:8E:17:0E:E6:4D:16:51:45:5D:33:FD
            X509v3 Authority Key Identifier:
                keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:50:3c:ed:20:f1:4f:9d:70:f8:f3:34:42:f4:b9:cc:b0:45:
         c6:50:7c:d3:93:35:f4:8f:68:ad:d3:fd:e3:8a:13:36:36:45:
         00:a1:4d:18:83:53:91:45:b2:2d:c9:ab:f2:77:67:23:51:c5:
         fb:44:53:ac:83:0a:94:51:81:10:20:a7:70:dc:e9:96:8b:e6:
         13:29:1c:19:cd:cf:f9:fe:c8:f4:c1:ef:9c:13:ae:f3:cc:52:
         94:2c:fc:02:dd:0a:e9:40:ff:ce:b6:f4:0f:28:8c:13:d3:59:
         c1:a5:22:17:c3:1e:c3:7f:f5:55:d0:85:c0:47:a2:0f:23:65:
         4f:69:b0:83:10:64:1a:b2:d6:ee:bb:2f:4f:99:11:cb:28:fb:
         15:2e:bb:f3:0c:ad:3f:f2:a5:f1:9e:76:1e:2c:27:8f:1e:1a:
         ee:46:df:d5:44:06:46:d1:b4:c9:ee:43:1d:48:68:3b:c7:7e:
         a1:0f:6d:46:b2:6f:d9:c4:aa:7f:4b:24:56:54:26:0c:e4:bd:
         99:7d:55:95:52:ba:75:b2:2c:16:ef:19:84:58:63:e5:78:e7:
         f4:d1:e4:62:ce:c0:48:6c:89:2a:f4:db:6e:e4:d3:58:6e:38:
         30:69:b8:e3:2c:d2:0c:1f:a7:10:f7:40:bb:1d:bc:d9:6b:89:
         d6:2a:97:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:40:36 2026 by rpki-client