Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
File:                     yteUrGAc4lBbZfl1p9UWovAKWzE.mft (raw, json)
Hash identifier:          r2t+At4IVUiYBSwyakU6mV13fo6UoEcWupRMYsuw6Ps=
Subject key identifier:   E2:3E:1E:ED:A7:3A:1C:F2:85:DE:93:EB:03:B2:89:17:3F:65:C3:D3
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Certificate issuer:       /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial:       01A0F3E87B97268212CB31EC994A1233A32F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
Manifest number:          1A8E
Signing time:             Wed 30 Sep 2026 20:01:34 +0000
Manifest this update:     Wed 30 Sep 2026 20:01:34 +0000
Manifest next update:     Thu 01 Oct 2026 20:01:34 +0000
Files and hashes:         1: 7llwUQb2MWs6HplnXw9JJ1A5tmk.roa (hash: aiurRHfiE4dklL1f4bmak642G7m5NT5/fQUkQdcYZhc=)
                          2: PZTHXJOe6Rub2_B35Qp_XWm1nCI.roa (hash: ECesKQ6eT4CAViBPjtKG3epmntO2VSEJzUCQqkLEU1U=)
                          3: aFAces1pfL2Gf7A82Ua9HdY5M_8.roa (hash: ihoy12eYWp6w4F3+SZfOyRsI/MGwgD7ZEiY1ooLQCpo=)
                          4: hHr7Y0UynB44y_uXn0Cj4kqW7mo.roa (hash: wecTOMqFEhRZq5XHYAG33+1Fx0NIuyBCiv4Opf1IkrY=)
                          5: pNxj6kdZkMnJYCmMCjf3eYaPL2Q.roa (hash: TTBHabL5n03Hv3G+3nODRR9KvMRepVZdF4Y0GodkG3o=)
                          6: yoOlkunfyIDQIpu8hSJPuV67N8k.roa (hash: 3vGjw6ITVAmFgqvDm6vNVM3T1UQ++9p2OwqdlJ0wKCw=)
                          7: yteUrGAc4lBbZfl1p9UWovAKWzE.crl (hash: 7h/hNtqXUfueLrlSQyMnZs5HTp4JjD88EHjxMLTiROM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f3:e8:7b:97:26:82:12:cb:31:ec:99:4a:12:33:a3:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
        Validity
            Not Before: Sep 30 20:01:34 2026 GMT
            Not After : Oct  1 20:01:34 2026 GMT
        Subject: CN=e23e1eeda73a1cf285de93eb03b289173f65c3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:c4:2d:54:40:a8:37:05:5c:7b:8b:08:da:
                    5f:5a:9a:66:7b:f7:8f:f6:b6:51:69:84:3b:97:55:
                    e1:30:ff:04:d9:fe:ec:e4:4a:b7:43:c5:63:8d:03:
                    ad:85:27:41:a9:04:f0:70:ca:9c:a0:4b:85:51:74:
                    7d:1d:13:85:8d:a2:be:23:4d:7b:ea:7a:ea:9a:45:
                    39:6b:06:24:a1:6d:a5:22:fc:97:8e:98:87:c1:b5:
                    23:53:b0:d1:8e:bc:ea:07:87:ca:0b:45:55:1d:f1:
                    9c:5b:72:aa:69:e1:1b:ea:00:3f:f9:7c:5c:7d:9c:
                    40:15:ab:be:70:59:0a:ca:20:80:34:a6:a0:0c:c6:
                    1e:25:ed:03:8f:43:c5:d6:32:1c:41:5c:81:53:91:
                    3f:7f:8d:f1:f9:34:b6:32:7e:12:f3:f6:f7:2f:62:
                    2e:32:26:c0:a6:56:de:de:5f:39:7f:e9:0f:47:ee:
                    ff:a7:77:13:8e:9b:09:19:68:b1:df:95:34:8a:6c:
                    ca:b0:6c:3d:03:39:a0:b8:c0:98:28:4d:7f:1c:82:
                    eb:24:6f:69:14:e5:2d:65:35:19:9c:c0:50:e9:92:
                    1e:e3:f5:c9:f8:e8:61:ca:91:df:07:72:c3:2d:5a:
                    d7:17:d9:20:92:d8:d9:3d:64:b0:f5:e6:4d:82:98:
                    ff:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3E:1E:ED:A7:3A:1C:F2:85:DE:93:EB:03:B2:89:17:3F:65:C3:D3
            X509v3 Authority Key Identifier:
                keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:32:80:aa:c9:f0:83:28:07:0f:ad:f6:ec:01:8c:f8:63:2f:
         68:b8:d4:cb:95:06:65:f7:3a:6e:91:3f:58:fa:01:97:75:86:
         69:8a:2b:f8:b1:c6:17:51:d5:fc:0e:76:0f:2f:6e:11:fe:37:
         cf:21:05:96:cf:55:7e:03:5e:2e:b4:d3:2d:78:7e:2a:a8:84:
         c4:3d:1a:44:91:e2:fc:b3:b3:16:a4:5d:41:c8:c8:56:ee:91:
         cc:72:68:bf:cc:f5:fc:48:9c:fe:6c:94:ec:cd:a0:1b:b9:e6:
         f0:0f:31:8b:73:89:bb:dd:6d:76:75:1a:2d:67:9b:77:00:95:
         54:ca:23:cc:fb:a8:40:b9:90:eb:84:d0:8e:d2:67:c6:a7:de:
         7a:6b:9c:b5:ad:62:bf:2d:7f:0f:c3:37:81:75:6a:20:b4:eb:
         db:b7:e1:18:c8:e6:40:03:a5:0f:e0:15:b8:f6:73:15:8a:69:
         13:1f:80:8b:04:a9:d1:b3:af:bd:88:39:5e:32:7e:c7:d2:3d:
         c5:fb:95:88:d5:ff:b5:4c:b2:13:70:26:7f:a7:37:b4:4f:02:
         ce:53:43:d7:6c:11:42:26:49:7b:45:a4:c0:c3:de:82:b1:66:
         73:fd:67:78:89:eb:68:d0:c3:d4:5b:49:2e:0a:84:2c:f4:9d:
         ba:99:50:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 05:42:18 2026 by rpki-client