Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft
File:                     ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft (raw, json)
Hash identifier:          tCKjLoUT5VmarYm0Shi3t5QDYTaTbXBVYdrXdNILBJ4=
Subject key identifier:   6D:2F:A3:44:22:73:6D:43:71:E5:BB:28:92:64:DA:F1:5F:53:DF:34
Authority key identifier: CA:46:2B:5A:0B:B9:4B:FB:60:10:3C:DB:47:F8:F7:3F:F8:54:BD:7F
Certificate issuer:       /CN=ca462b5a0bb94bfb60103cdb47f8f73ff854bd7f
Certificate serial:       01A0BD66CA33A6EBF9E4082AC6BD488C61E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ykYrWgu5S_tgEDzbR_j3P_hUvX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft
Manifest number:          7F
Signing time:             Sun 20 Sep 2026 06:00:25 +0000
Manifest this update:     Sun 20 Sep 2026 06:00:25 +0000
Manifest next update:     Mon 21 Sep 2026 06:00:25 +0000
Files and hashes:         1: ykYrWgu5S_tgEDzbR_j3P_hUvX8.crl (hash: Wuh5CLtIzluRMmMFPCNFMRfyIGiZlyFukIeat3YQQog=)
                          2: z4jSNTQXcMmCspjrIlFpHfl6FSI.asa (hash: HC4VZ6EQp42dSfiAeX0/EE2K5gXr9+fsZFToTEQUfVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ykYrWgu5S_tgEDzbR_j3P_hUvX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 06:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:66:ca:33:a6:eb:f9:e4:08:2a:c6:bd:48:8c:61:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca462b5a0bb94bfb60103cdb47f8f73ff854bd7f
        Validity
            Not Before: Sep 20 06:00:25 2026 GMT
            Not After : Sep 21 06:00:25 2026 GMT
        Subject: CN=6d2fa34422736d4371e5bb289264daf15f53df34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d4:68:0b:19:93:5f:42:3c:27:e6:53:41:af:
                    40:ad:a9:df:75:c0:c9:37:69:df:33:cb:40:86:53:
                    fa:e1:60:89:84:ea:64:ed:72:34:76:16:b0:67:ba:
                    f4:7b:a9:f7:6b:7b:d2:2e:f2:14:1a:ae:16:8e:a6:
                    64:02:1d:6a:c2:2b:64:9d:55:98:39:71:60:c0:5a:
                    3b:62:75:f7:db:0e:1d:19:06:25:3d:d2:26:68:e4:
                    4a:bb:a3:4f:99:06:1c:06:a6:58:d5:36:c2:91:44:
                    84:fc:e5:65:99:2d:02:8d:2f:c3:5a:5b:80:f3:56:
                    65:64:e3:48:95:a7:29:0e:80:ea:1e:16:d7:b9:b9:
                    c4:92:07:20:d8:b2:ab:56:12:e9:14:73:6a:7a:f7:
                    7e:25:5f:8b:95:b9:f0:85:57:81:09:9f:61:fd:0a:
                    3a:e9:4d:16:be:f1:28:68:b1:87:83:65:9a:21:43:
                    2e:f1:04:20:d5:97:e0:b6:e5:9b:49:6d:39:63:3d:
                    07:05:6f:fa:9f:86:8b:b9:6c:49:ef:a5:b2:a7:3d:
                    66:ea:28:cf:c9:78:c8:2c:c8:02:0a:74:73:62:59:
                    ed:b2:25:91:96:80:44:82:a8:a0:65:52:85:41:93:
                    b9:9b:dc:32:29:be:d1:93:a9:13:09:e3:45:f8:e9:
                    5c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2F:A3:44:22:73:6D:43:71:E5:BB:28:92:64:DA:F1:5F:53:DF:34
            X509v3 Authority Key Identifier:
                keyid:CA:46:2B:5A:0B:B9:4B:FB:60:10:3C:DB:47:F8:F7:3F:F8:54:BD:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykYrWgu5S_tgEDzbR_j3P_hUvX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dfabbb-90c2-4952-863f-8a4e22c67c1b/1/ykYrWgu5S_tgEDzbR_j3P_hUvX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:9a:4a:84:06:7b:96:1f:2c:cf:98:f0:81:b6:68:7d:47:e3:
         d0:e6:af:bd:af:21:98:40:90:17:6a:8d:86:4f:1e:c4:23:d2:
         c2:de:15:8b:6f:e9:11:eb:95:38:4f:61:2c:a4:d5:55:54:fa:
         e3:d3:55:94:69:54:d5:cd:47:60:b8:6f:80:08:7f:22:85:0d:
         f4:e6:bd:58:34:d8:0c:8e:b6:79:44:5d:08:e2:f1:d9:ea:a7:
         1c:ce:49:f7:a5:31:fb:1c:99:3c:25:92:b7:e1:7f:bd:7c:69:
         10:cb:b9:50:ef:1d:d8:ae:55:37:d8:b9:8d:f9:a6:ab:c6:4d:
         b5:d0:c4:78:7d:c0:36:d3:fb:b9:74:75:cb:d4:00:ba:c7:ec:
         56:37:67:b8:ca:ff:cf:50:39:ca:49:65:cc:73:3c:b7:a9:23:
         f7:02:16:7d:5d:e9:8d:0d:57:ab:b5:4e:92:83:0a:52:68:79:
         1b:6b:16:0a:c6:d2:e8:4d:94:b1:c4:44:75:5d:1c:5d:a9:58:
         57:4b:65:bf:0b:0f:23:6a:16:72:5f:c1:45:61:08:9e:8f:25:
         f1:c1:89:0e:24:e1:89:56:85:03:e7:4b:bf:23:66:12:2a:b2:
         c5:fd:9b:e6:c6:60:04:b9:0f:aa:19:87:66:4a:2c:d3:ba:cc:
         2c:a9:18:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:15:11 2026 by rpki-client