Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
File:                     A_P-YHUIK-jliDKbQ9dhv257AdA.mft (raw, json)
Hash identifier:          z67/oFizErgY7p7yuZU5KrOYBmEG6Qw5S+bJUtJj51Q=
Subject key identifier:   E3:51:4F:88:C8:56:00:85:3B:AB:EE:BE:94:A2:71:9B:91:38:89:10
Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Certificate issuer:       /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Certificate serial:       01A0C6A11591D1E2F4F19A4CCA97412CEF16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
Manifest number:          0C9A
Signing time:             Tue 22 Sep 2026 01:00:40 +0000
Manifest this update:     Tue 22 Sep 2026 01:00:40 +0000
Manifest next update:     Wed 23 Sep 2026 01:00:40 +0000
Files and hashes:         1: A_P-YHUIK-jliDKbQ9dhv257AdA.crl (hash: 9uniE6pAktyLLFdSX1Vvi4SsJIkIYAwEVDAKDW6LyVA=)
                          2: y8-TomRf2SfXgjAfIqDbASYx4Kw.roa (hash: uG779XP+SowZScRgyybF2Yr7PqJO6NR4pXnq6h4jggk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:a1:15:91:d1:e2:f4:f1:9a:4c:ca:97:41:2c:ef:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
        Validity
            Not Before: Sep 22 01:00:40 2026 GMT
            Not After : Sep 23 01:00:40 2026 GMT
        Subject: CN=e3514f88c85600853babeebe94a2719b91388910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:35:92:e2:b8:d7:3e:4a:5c:d5:dd:82:60:d4:
                    97:08:f1:4b:2e:ca:88:20:26:99:e4:2a:aa:c2:4c:
                    e5:40:27:fa:b6:e1:37:30:bc:fb:c9:69:49:0f:64:
                    b4:76:23:d1:f8:fc:e7:df:ff:e0:09:0b:3b:87:87:
                    8d:0e:cb:e9:af:14:2e:bb:5a:f3:1e:42:13:f6:02:
                    98:4e:f4:56:34:48:a3:3c:37:8d:ba:1c:8e:3b:31:
                    5d:48:d8:64:4b:46:25:1d:7e:4b:0b:4b:fa:f2:73:
                    f6:5b:7f:42:e8:15:33:ba:f7:da:48:eb:a3:a0:42:
                    24:38:a8:f5:3a:14:e2:b1:4d:8f:df:0d:ca:25:41:
                    fc:e8:b3:be:6f:f3:aa:c2:7b:eb:7e:b4:99:90:a6:
                    5d:96:6f:6f:90:1b:b7:48:4d:81:86:37:0d:99:be:
                    18:12:4e:72:32:c9:27:03:7a:23:43:ef:59:78:43:
                    8c:56:85:a7:8d:84:11:c1:41:2d:f2:0f:66:60:01:
                    e5:4d:54:27:63:0f:66:ea:75:6c:60:09:a8:9d:4a:
                    b3:a1:d7:70:eb:d6:c7:14:69:e1:6e:73:2d:c8:cf:
                    bc:dd:c2:8f:57:22:54:8c:2d:01:21:0c:a3:17:f3:
                    5f:9c:5b:51:1a:73:41:d4:d8:11:06:10:44:3b:54:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:51:4F:88:C8:56:00:85:3B:AB:EE:BE:94:A2:71:9B:91:38:89:10
            X509v3 Authority Key Identifier:
                keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a4:f1:33:e4:7f:18:2b:50:8f:69:82:6d:e1:6b:93:04:8f:
         3d:22:bd:db:be:d3:f8:26:0b:62:f0:93:43:d3:b4:e9:89:7f:
         01:07:13:6d:fd:b5:a4:81:f3:23:2b:07:46:b0:cc:4a:36:2e:
         9a:5a:8f:68:9d:43:f5:0d:8d:43:8a:92:27:51:49:1a:d2:ea:
         7f:7a:cc:5e:ca:5d:82:7b:37:e9:e5:c7:63:a9:46:ce:fa:c0:
         58:3d:aa:99:7e:c3:fa:d9:45:37:66:ed:bc:c0:a4:bc:66:21:
         f9:5f:9c:5f:25:82:49:8d:cf:f1:10:52:6a:c9:4c:19:4c:78:
         3a:90:36:8c:56:dd:5c:d1:6f:66:c0:12:5f:70:18:3d:b1:3e:
         82:9a:df:0d:bb:3d:7c:36:ee:8f:d0:56:20:7e:26:3b:fb:0a:
         af:fb:cd:da:73:83:41:90:22:cc:44:33:68:08:6b:96:ee:28:
         30:11:27:48:a5:75:6c:8c:b0:cd:bf:5a:84:05:0f:bd:68:21:
         e1:85:e0:72:bc:fb:71:77:99:e7:43:3d:7c:c3:79:7d:68:23:
         d5:f7:46:9b:b4:88:69:9a:5a:b5:40:52:1b:60:bb:4d:8d:87:
         ff:14:c0:31:79:c2:bc:e1:f7:9d:f4:74:48:8b:b3:ba:ca:1c:
         21:2a:91:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGoRWR0eL08ZpMypdBLO8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjNmZTYwNzUwODJiZThlNTg4MzI5YjQzZDc2MWJmNmU3
YjAxZDAwHhcNMjYwOTIyMDEwMDQwWhcNMjYwOTIzMDEwMDQwWjAzMTEwLwYDVQQD
EyhlMzUxNGY4OGM4NTYwMDg1M2JhYmVlYmU5NGEyNzE5YjkxMzg4OTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TWS4rjXPkpc1d2CYNSXCPFLLsqI
ICaZ5CqqwkzlQCf6tuE3MLz7yWlJD2S0diPR+Pzn3//gCQs7h4eNDsvprxQuu1rz
HkIT9gKYTvRWNEijPDeNuhyOOzFdSNhkS0YlHX5LC0v68nP2W39C6BUzuvfaSOuj
oEIkOKj1OhTisU2P3w3KJUH86LO+b/OqwnvrfrSZkKZdlm9vkBu3SE2BhjcNmb4Y
Ek5yMsknA3ojQ+9ZeEOMVoWnjYQRwUEt8g9mYAHlTVQnYw9m6nVsYAmonUqzoddw
69bHFGnhbnMtyM+83cKPVyJUjC0BIQyjF/NfnFtRGnNB1NgRBhBEO1S2UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONRT4jIVgCFO6vuvpSicZuROIkQMB8GA1UdIwQY
MBaAFAPz/mB1CCvo5Ygym0PXYb9uewHQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9QLVlIVUlLLWpsaURLYlE5ZGh2MjU3QWRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84YmY3ZWEtODgzYS00YzQzLTk0NmMt
ODJkYWZlMTA0YmM1LzEvQV9QLVlIVUlLLWpsaURLYlE5ZGh2MjU3QWRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy84YmY3ZWEtODgzYS00YzQzLTk0NmMtODJkYWZlMTA0YmM1
LzEvQV9QLVlIVUlLLWpsaURLYlE5ZGh2MjU3QWRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaTxM+R/
GCtQj2mCbeFrkwSPPSK9277T+CYLYvCTQ9O06Yl/AQcTbf21pIHzIysHRrDMSjYu
mlqPaJ1D9Q2NQ4qSJ1FJGtLqf3rMXspdgns36eXHY6lGzvrAWD2qmX7D+tlFN2bt
vMCkvGYh+V+cXyWCSY3P8RBSaslMGUx4OpA2jFbdXNFvZsASX3AYPbE+gprfDbs9
fDbuj9BWIH4mO/sKr/vN2nODQZAizEQzaAhrlu4oMBEnSKV1bIywzb9ahAUPvWgh
4YXgcrz7cXeZ50M9fMN5fWgj1fdGm7SIaZpatUBSG2C7TY2H/xTAMXnCvOH3nfR0
SIuzusocISqR+Q==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:32:02 2026 by rpki-client