Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.mft
File:                     yRi-Y90mFBusC0klaPaK8K3-8-E.mft (raw, json)
Hash identifier:          mKRQgRyIwSTufOhAJ0IBnCdaxTqBv9omOBnmXP1xRVU=
Subject key identifier:   B9:7B:B9:A3:34:CD:FE:17:BF:8F:6E:13:E2:9B:0D:8F:45:1E:6B:6E
Authority key identifier: C9:18:BE:63:DD:26:14:1B:AC:0B:49:25:68:F6:8A:F0:AD:FE:F3:E1
Certificate issuer:       /CN=c918be63dd26141bac0b492568f68af0adfef3e1
Certificate serial:       01A0BFFA27883F0CEF7670BE5A6AC494C5AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yRi-Y90mFBusC0klaPaK8K3-8-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.mft
Manifest number:          0104
Signing time:             Sun 20 Sep 2026 18:00:37 +0000
Manifest this update:     Sun 20 Sep 2026 18:00:37 +0000
Manifest next update:     Mon 21 Sep 2026 18:00:37 +0000
Files and hashes:         1: E8q-XyFOi2dBl2RvmUxvXJg1YGU.asa (hash: 3XtzyTPt7FY4YjjufzBgSB6mrAWr1BGgEnfAC89ctsI=)
                          2: yRi-Y90mFBusC0klaPaK8K3-8-E.crl (hash: sSFI6cRzIL0KvApyoqrbSPcKOi62rLHZsWq6ZtEbeUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yRi-Y90mFBusC0klaPaK8K3-8-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:fa:27:88:3f:0c:ef:76:70:be:5a:6a:c4:94:c5:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c918be63dd26141bac0b492568f68af0adfef3e1
        Validity
            Not Before: Sep 20 18:00:37 2026 GMT
            Not After : Sep 21 18:00:37 2026 GMT
        Subject: CN=b97bb9a334cdfe17bf8f6e13e29b0d8f451e6b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e6:14:41:5b:87:f2:1a:ee:4c:bd:b7:6c:d1:
                    84:07:d4:ed:4c:ef:ef:90:00:2e:37:9e:44:f5:d3:
                    ee:f3:74:d2:9d:64:7d:1d:34:2e:f0:89:a0:2a:f1:
                    fe:a5:55:ff:37:d1:02:fc:af:ed:d9:69:58:38:70:
                    3b:85:af:1c:ce:f2:5f:2c:12:18:ed:e2:52:20:cb:
                    ef:c1:73:30:24:1d:03:d0:7c:9b:94:e6:11:b7:a7:
                    36:d4:8a:af:ba:8c:38:5f:18:ac:22:fb:94:2c:0e:
                    5e:59:86:a1:81:84:9e:a9:95:e1:bc:47:6d:9c:fc:
                    b6:a3:7a:8a:1e:a8:81:24:f7:61:4f:be:c0:d6:51:
                    a7:69:58:1e:2a:4a:13:0f:b1:f8:de:b2:42:22:b7:
                    40:e8:57:a4:71:dd:6d:5c:28:bc:ce:a4:09:b9:72:
                    b1:25:c7:c0:58:51:7c:e6:b8:6d:e0:56:74:82:1c:
                    17:c9:f5:f6:fa:bc:c0:64:ca:0c:15:ec:23:df:f2:
                    c6:12:ea:42:9b:ee:b1:c1:e7:9b:38:19:5a:6e:05:
                    c2:30:1e:ca:b0:f7:f7:d8:23:04:bc:b8:35:9e:ec:
                    32:f7:f3:8a:43:82:8e:bf:a5:56:23:30:d2:a1:8f:
                    a6:fa:37:15:06:5e:52:fe:33:a2:a2:24:05:ea:0f:
                    61:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7B:B9:A3:34:CD:FE:17:BF:8F:6E:13:E2:9B:0D:8F:45:1E:6B:6E
            X509v3 Authority Key Identifier:
                keyid:C9:18:BE:63:DD:26:14:1B:AC:0B:49:25:68:F6:8A:F0:AD:FE:F3:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRi-Y90mFBusC0klaPaK8K3-8-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e907dd-d859-41d7-ba62-a0ea770cf3f2/1/yRi-Y90mFBusC0klaPaK8K3-8-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b7:0f:35:ef:9c:d1:01:68:ad:c1:44:e5:76:20:f2:cf:94:
         1f:3e:08:1d:35:6f:39:64:8c:42:2b:a9:1f:39:da:7a:c6:9d:
         0c:51:aa:c4:91:3b:94:e4:c1:1b:3e:51:be:3c:ab:e1:3d:a0:
         eb:4a:74:8d:80:15:38:f0:ab:05:29:fb:85:14:64:82:a7:72:
         f1:d6:49:00:be:4f:9d:99:1d:37:b0:78:d5:6b:7f:74:a6:6d:
         26:97:4a:b5:41:86:3c:0d:37:da:c9:72:fe:c4:f6:3d:96:6b:
         b1:b6:c2:82:7e:53:7b:37:c0:45:57:1d:5a:30:80:3a:c5:6e:
         db:b1:34:dc:84:9e:01:ff:1e:5b:9b:2a:74:24:fa:c1:96:da:
         70:a5:fd:26:93:73:fc:b6:9c:7c:c5:fd:7d:05:21:2c:69:1f:
         01:cb:a7:4f:0e:3e:3a:03:ee:55:46:71:95:6a:b4:03:96:2e:
         b0:7a:79:71:04:8e:5e:05:fc:61:76:b8:30:4b:fc:31:bc:47:
         2d:8d:f9:cd:ae:4c:24:b4:f9:4b:69:b5:a5:be:69:51:1e:27:
         9d:e0:ae:b8:45:5d:47:25:74:53:e6:dc:9b:25:a3:d6:3c:24:
         86:0e:5e:09:c4:c8:70:96:5d:af:64:ed:d8:5c:a4:a0:8e:9a:
         c3:96:b5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:02:32 2026 by rpki-client