Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
File:                     Y0laTOy-r7Pq327QNJuwuW2kZO4.mft (raw, json)
Hash identifier:          C7F+qRf65HSCkoBIWcf2/otbTk9FI8cdgVoH3kHy07k=
Subject key identifier:   9A:65:31:4C:06:CE:CC:5D:BD:09:96:D9:80:97:35:86:DE:69:54:75
Authority key identifier: 63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE
Certificate issuer:       /CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
Certificate serial:       01A0D94CC0BE81199C44191100D84DE3B822
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
Manifest number:          1103
Signing time:             Fri 25 Sep 2026 16:01:20 +0000
Manifest this update:     Fri 25 Sep 2026 16:01:20 +0000
Manifest next update:     Sat 26 Sep 2026 16:01:20 +0000
Files and hashes:         1: 9qaqud_c4V53thjjkEblp5yEtNw.roa (hash: 2A6FNxJL63HaW3rs8IFtns/rrq4grW3RAI1BGSdMLWM=)
                          2: Y0laTOy-r7Pq327QNJuwuW2kZO4.crl (hash: Jzst5gYsQ1Dr+Sewu+P2e9Rbp2XpSpRgU238ZrrucAY=)
                          3: h_hzjLW67wHlOyeEeE48OzILdyk.roa (hash: OBEq0IJXfkXFzJ3vqHNWHMcPsC7MjRnngy52bDrCEpY=)
                          4: tC2pXEfIIS_ssbaAFt1HYp326ls.roa (hash: Pi077bZmvt3rsE2utKBEwLCAlswX9cB3ZU6WM08tylE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:4c:c0:be:81:19:9c:44:19:11:00:d8:4d:e3:b8:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63495a4cecbeafb3eadf6ed0349bb0b96da464ee
        Validity
            Not Before: Sep 25 16:01:20 2026 GMT
            Not After : Sep 26 16:01:20 2026 GMT
        Subject: CN=9a65314c06cecc5dbd0996d980973586de695475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:26:a8:aa:57:41:90:fc:0b:09:29:31:24:39:
                    cb:62:02:61:af:93:94:21:84:bb:01:cd:cc:60:ab:
                    44:86:d2:f4:32:2b:e1:f4:d8:7f:a8:a5:a6:7a:d7:
                    ae:95:58:c8:0b:8c:2c:bd:77:d6:4e:58:47:00:bc:
                    53:c0:74:7b:58:76:25:6d:ff:5c:f9:80:1b:8e:95:
                    14:d3:dd:f4:30:2c:ce:7a:b0:29:d3:99:a6:5f:1d:
                    30:17:6f:d8:9f:0e:3e:86:2c:7f:02:a7:f9:89:4c:
                    a1:9b:b1:1b:d9:63:d2:7a:ec:90:50:23:6e:44:a8:
                    5a:58:40:ee:78:ac:21:0f:af:57:45:87:12:d3:8f:
                    cd:94:4a:6e:6e:de:1a:a4:0c:0d:e4:b6:71:af:69:
                    c7:b4:22:4b:a2:3d:44:e4:18:14:92:de:44:b1:29:
                    d2:33:1e:c3:ab:2e:45:17:f2:78:a0:0a:97:86:40:
                    a3:a4:5b:98:c2:38:a1:4f:34:4c:c2:24:86:b2:f2:
                    af:ee:a6:5b:58:b2:bb:3a:50:bc:79:dd:19:9a:28:
                    b0:04:ae:73:66:99:6e:8c:64:85:b7:0c:57:87:d5:
                    89:47:63:ba:0f:54:98:ae:80:aa:4d:de:97:7a:b0:
                    c1:c4:e3:b7:31:44:8c:56:80:98:78:4a:90:a4:e6:
                    57:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:65:31:4C:06:CE:CC:5D:BD:09:96:D9:80:97:35:86:DE:69:54:75
            X509v3 Authority Key Identifier:
                keyid:63:49:5A:4C:EC:BE:AF:B3:EA:DF:6E:D0:34:9B:B0:B9:6D:A4:64:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0laTOy-r7Pq327QNJuwuW2kZO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1fde18-2873-4fe0-869c-3820f7ee2cb8/1/Y0laTOy-r7Pq327QNJuwuW2kZO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:a9:25:ca:d4:b0:a6:a0:1e:64:75:b4:56:ff:3c:99:52:f7:
         c3:2a:ac:9a:b3:53:61:3d:3a:49:89:42:75:ac:84:32:9a:7c:
         75:a0:06:b5:7f:26:a1:12:a1:4c:f8:d5:5d:8b:79:af:fa:70:
         46:f0:cc:7d:17:8e:5c:09:fb:32:67:41:5f:c0:b4:9d:91:43:
         a7:5c:3b:e5:17:d1:53:40:06:5f:c4:52:42:fc:26:c7:e0:ae:
         83:a7:68:96:4e:87:bb:71:4c:84:87:40:b8:a1:fc:4f:de:49:
         f1:8c:9a:97:e0:5e:56:8f:c1:55:e7:73:4d:55:cd:3e:a7:7b:
         9b:eb:23:24:93:bf:00:2f:03:17:dc:d6:e7:6f:41:ad:4d:e7:
         0f:ad:eb:2c:7e:d9:7c:68:61:74:b0:2b:72:0b:bf:4c:f0:2b:
         db:03:32:63:5c:53:ac:7b:1e:61:fa:23:88:bd:67:d3:5a:df:
         61:1a:01:b0:6e:b8:36:a9:1e:0a:56:f7:09:be:09:9a:59:62:
         30:71:ca:46:a5:a9:97:76:70:d8:33:dd:18:0f:5b:73:c8:6d:
         da:fa:3b:a5:a2:ca:fc:53:38:32:6c:7e:44:fd:91:c4:bd:06:
         0d:7f:32:14:1b:97:99:61:3d:2e:d6:ba:dc:1f:95:fb:50:20:
         3d:a4:eb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:01:15 2026 by rpki-client