Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
File:                     ytecEmuC93zGO1prbNi9rm4PWjw.mft (raw, json)
Hash identifier:          hXtkl0r7+rsbtJf9f+sJFXwGbzEKEP8NnJoMN1vEWqY=
Subject key identifier:   FE:17:E4:38:62:F3:1C:62:5C:2B:CC:3D:9E:50:59:09:F5:74:BE:35
Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
Certificate issuer:       /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Certificate serial:       01A0C9A27F6F01B872A0BB489E0723B65486
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
Manifest number:          19FB
Signing time:             Tue 22 Sep 2026 15:01:04 +0000
Manifest this update:     Tue 22 Sep 2026 15:01:04 +0000
Manifest next update:     Wed 23 Sep 2026 15:01:04 +0000
Files and hashes:         1: 39TW_rteZEmG2yqgCNBCF7PjZJA.roa (hash: QiC1evAcCRcezlzRHbRvqDU6mKjNFQuGOEOLFGB1NnM=)
                          2: ytecEmuC93zGO1prbNi9rm4PWjw.crl (hash: 1VDSVJJ9NAvurfHOI1NegOJRFQSPCEhyZLMkIc/hfsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:a2:7f:6f:01:b8:72:a0:bb:48:9e:07:23:b6:54:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
        Validity
            Not Before: Sep 22 15:01:04 2026 GMT
            Not After : Sep 23 15:01:04 2026 GMT
        Subject: CN=fe17e43862f31c625c2bcc3d9e505909f574be35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:cd:1f:73:65:4b:6c:b8:ff:5c:6c:9d:f4:
                    74:5b:a6:54:11:a5:44:98:4b:4c:55:53:52:de:d6:
                    97:14:1c:ed:30:02:80:82:f0:93:dc:90:e4:b3:85:
                    0b:25:42:67:9c:93:ee:81:44:f2:c1:e4:c9:ac:37:
                    27:bd:21:83:63:d6:6c:bd:de:5a:35:63:0f:91:0f:
                    17:00:69:21:db:03:76:12:09:f6:50:40:52:93:33:
                    75:95:bd:ae:2b:f1:75:0e:e5:0a:10:db:74:3b:e4:
                    ce:bc:2f:1f:19:84:67:02:c3:cf:6c:50:9b:7c:ae:
                    0c:c3:86:89:47:4b:bd:3f:bf:7a:2f:87:99:11:d2:
                    7d:05:c7:d4:a2:44:f4:13:03:1e:e0:d0:6a:30:7e:
                    11:94:f7:90:2b:73:32:3e:95:44:66:fd:19:a0:4e:
                    44:bd:31:4c:af:e7:7e:c0:f9:82:27:ae:1e:11:05:
                    01:e1:6b:e1:65:d8:04:1f:23:84:f7:53:ed:53:79:
                    3a:65:c2:3b:d5:60:c1:4f:c0:62:bf:4d:a8:5b:1e:
                    f5:b0:ad:02:56:9d:4a:7f:35:ac:f9:d8:02:06:b7:
                    c9:3a:d0:8a:42:f8:bf:93:7e:fe:4a:96:94:7c:95:
                    56:19:80:1b:92:0f:fb:33:9e:91:77:37:af:1d:11:
                    1a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:17:E4:38:62:F3:1C:62:5C:2B:CC:3D:9E:50:59:09:F5:74:BE:35
            X509v3 Authority Key Identifier:
                keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:cc:43:ae:30:3d:d8:82:e2:25:97:c5:fb:49:cd:79:85:75:
         7f:39:e7:e9:f8:4e:80:d6:56:7e:2c:6a:0e:2e:d1:e5:c1:5b:
         95:2f:91:1d:fe:07:67:46:e4:71:a0:f2:6e:22:73:00:0d:b2:
         70:b9:94:34:06:c5:ec:31:dc:f7:a5:d5:04:30:fd:29:0d:5f:
         18:76:48:19:b3:82:fd:a7:a8:e6:6b:86:c7:bf:6b:e1:f5:b1:
         82:68:c0:a6:65:2e:70:97:06:e8:c9:48:71:f0:f4:1c:c8:78:
         7a:d3:e8:a4:1d:63:02:cb:b2:d1:3a:44:9d:ba:56:f8:2b:1b:
         17:78:73:dc:42:f5:30:2a:8c:ed:93:c6:23:52:2a:3f:2e:a0:
         1f:53:46:ae:f1:92:0b:72:2e:35:1c:42:92:d7:bf:79:54:98:
         10:85:30:7c:34:ad:63:b8:2a:2a:71:23:e5:47:9e:bf:fb:9e:
         f6:92:15:35:38:bd:f0:d3:fc:7c:46:a6:9f:2c:28:a8:62:07:
         74:20:63:e0:b0:f7:6c:e9:38:16:5b:44:53:5e:6b:78:4e:7b:
         95:97:71:3a:d6:7a:fd:6c:7c:f9:95:7f:ee:81:33:90:0a:59:
         c6:43:5d:9d:5a:a4:e3:0c:91:33:03:59:a1:a3:cb:cb:aa:eb:
         41:ca:b9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:49:40 2026 by rpki-client