Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
File:                     yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft (raw, json)
Hash identifier:          W9eHFZISpc+UL6hfIVt/e/1WZaqV/v2qj3vzDB/Y0DU=
Subject key identifier:   16:14:70:6A:20:D5:DD:00:72:B7:72:FB:11:18:C9:83:6C:F4:EF:CD
Authority key identifier: C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7
Certificate issuer:       /CN=c9392c3276b243aff740a082c588fb73941ebbf7
Certificate serial:       01A0D9835F4BEC8DED2C5484D6F7F191BAD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
Manifest number:          09E3
Signing time:             Fri 25 Sep 2026 17:01:00 +0000
Manifest this update:     Fri 25 Sep 2026 17:01:00 +0000
Manifest next update:     Sat 26 Sep 2026 17:01:00 +0000
Files and hashes:         1: CDYJ5duT-YiN5vn4ue9hcM_s3OA.roa (hash: ZtL4bRFnSWFbHHuzOCLv1emqHa4TMbYiRtAD7J2vEiI=)
                          2: yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl (hash: Yc89l+GCWDwAB+klsXeG0isHsooxTJkB3R+N2oYcw+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:83:5f:4b:ec:8d:ed:2c:54:84:d6:f7:f1:91:ba:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9392c3276b243aff740a082c588fb73941ebbf7
        Validity
            Not Before: Sep 25 17:01:00 2026 GMT
            Not After : Sep 26 17:01:00 2026 GMT
        Subject: CN=1614706a20d5dd0072b772fb1118c9836cf4efcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:1a:9b:6f:a6:6a:1c:a5:29:c6:2f:79:70:
                    9e:80:16:66:65:dc:5d:43:31:73:a5:f6:4f:5f:29:
                    5e:c0:21:e9:2a:d3:b6:4f:0a:05:94:48:d1:18:a0:
                    03:e8:33:f2:c5:c8:1f:2a:c1:c2:fa:6d:f3:2f:9c:
                    a8:16:86:b4:38:0a:7e:8d:17:7f:48:a9:9e:50:b6:
                    e7:d1:a1:39:d3:ee:7d:75:32:37:b3:45:88:aa:22:
                    a2:05:fe:6e:f8:96:3e:90:08:59:1b:b3:4b:61:83:
                    89:ac:ab:bf:45:af:0e:59:5f:3f:5b:32:13:ca:a1:
                    06:e7:cc:3b:7e:f8:ce:37:40:75:ae:73:be:4f:25:
                    b2:22:95:8f:9b:2d:49:23:ed:4e:db:09:60:14:d0:
                    73:c1:e2:e5:25:04:c2:20:b4:3d:f5:5b:58:b2:d9:
                    9c:fc:4b:72:d0:88:ac:4b:a6:91:10:43:86:7b:86:
                    d7:0e:a0:7f:01:f1:a5:e5:c4:04:7e:65:c3:0a:2e:
                    8e:1f:7a:e3:a4:ea:25:61:0e:7b:9b:5a:b7:d8:91:
                    72:c2:57:e0:ca:c7:ee:16:f0:fa:b1:29:3c:66:87:
                    19:6a:2f:46:f9:b5:dd:27:aa:d4:29:cc:a7:b6:78:
                    7a:c4:28:26:48:ea:5d:7a:35:57:c2:d3:40:c1:f9:
                    1d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:14:70:6A:20:D5:DD:00:72:B7:72:FB:11:18:C9:83:6C:F4:EF:CD
            X509v3 Authority Key Identifier:
                keyid:C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f6:d0:d9:de:95:b1:77:ca:81:32:58:6d:7d:3f:bc:df:1d:
         2f:7e:5d:1d:f1:fa:6a:52:db:bf:e6:05:ac:fb:4b:4a:80:61:
         6a:76:c0:a5:88:17:9f:e9:c5:cf:97:6d:c6:1a:51:19:6e:67:
         2d:d2:aa:36:cf:33:42:ed:59:e3:61:f8:eb:23:90:d8:6c:61:
         74:76:c4:0e:7c:f0:43:15:10:8c:72:d8:25:74:29:af:1c:c9:
         2a:26:41:e5:d6:19:d2:fe:b8:0b:32:b5:bc:35:46:dc:6e:b9:
         58:de:0d:b0:ca:0d:55:df:20:93:20:7f:18:7c:ca:2d:c6:70:
         1b:e0:65:d0:c5:d0:05:29:f1:58:0b:7a:5b:a1:df:fd:83:1f:
         2f:12:77:86:c9:c6:99:89:b5:4f:73:28:69:01:f0:16:2f:5c:
         62:02:64:a3:e5:f6:65:d1:d0:79:99:77:7e:c2:f0:5c:85:37:
         77:4d:ad:4f:c9:b6:6e:78:5f:c0:0e:58:ca:80:50:36:99:a6:
         7b:6a:22:f9:db:8a:b3:4a:80:ca:d6:45:69:83:fe:14:c0:dd:
         15:a4:f6:c8:cf:99:6d:8b:b9:15:12:52:8e:93:f3:fe:83:02:
         22:dc:bd:c4:ea:d4:82:57:a8:b2:59:f5:ed:f3:b2:a9:cd:68:
         2b:0d:90:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:49:18 2026 by rpki-client