Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
File:                     y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft (raw, json)
Hash identifier:          WgXNSTqFtn0GFQm750QiEmHD6ZDiuKWIGd49a3gke4k=
Subject key identifier:   F7:B3:AC:EA:04:82:81:E7:53:C7:49:B8:87:E1:98:DF:00:AD:E2:96
Authority key identifier: CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C
Certificate issuer:       /CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
Certificate serial:       01A0FF47F59B06F052D21765CEC56391813E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
Manifest number:          041F
Signing time:             Sat 03 Oct 2026 01:01:41 +0000
Manifest this update:     Sat 03 Oct 2026 01:01:41 +0000
Manifest next update:     Sun 04 Oct 2026 01:01:41 +0000
Files and hashes:         1: NFcJoTbeoau-evP2UkrkFDUi_S0.asa (hash: c61fPUsVZ7p9Uk03SLvoaO2SkW7N9xFG1W2ccABcLig=)
                          2: y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl (hash: OySpMW110ffw5o6/Es1KrUAZ6RfG/QPS1MlFfphUVUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 01:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ff:47:f5:9b:06:f0:52:d2:17:65:ce:c5:63:91:81:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc8c0646eb6cbf2698bb0a760503bcdb91f1a5c
        Validity
            Not Before: Oct  3 01:01:41 2026 GMT
            Not After : Oct  4 01:01:41 2026 GMT
        Subject: CN=f7b3acea048281e753c749b887e198df00ade296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:23:ab:25:92:fd:38:a0:4c:f8:d9:80:a1:b5:
                    06:ed:87:a4:e3:b3:dd:26:57:5b:fd:d1:5c:de:b7:
                    b2:d6:a9:25:31:ce:6e:83:44:de:a6:8b:92:63:66:
                    24:20:15:69:35:c3:e7:9a:0c:26:f5:5c:2a:14:b1:
                    2a:0d:c0:b4:dc:3c:51:87:9a:fc:16:c6:66:52:d2:
                    62:3f:1b:58:57:fb:d6:b4:15:61:c1:0b:0c:a6:5e:
                    96:4e:1d:6b:8e:cc:e4:db:d6:91:7e:a6:0b:25:ea:
                    a8:d5:9d:6c:cb:7a:66:05:c6:8d:12:e8:6f:af:cb:
                    19:82:85:f4:3f:d3:20:64:c7:9e:23:c2:3e:cf:2d:
                    87:96:3e:4f:c0:62:7e:d4:5c:72:bb:8f:97:17:23:
                    9c:b8:b8:a1:65:a2:4e:27:df:8a:22:56:70:ca:85:
                    47:25:60:32:0e:8c:01:e2:4b:97:e4:56:b3:c1:b8:
                    f6:73:a5:39:0f:17:d0:b3:6f:32:27:83:7e:2f:7e:
                    04:69:c5:e0:83:3b:ff:0f:4c:48:e3:fb:e2:87:ce:
                    43:e0:ba:49:8e:56:1b:45:b6:78:83:df:f4:d8:f6:
                    cc:0a:b7:e5:5d:2e:4f:8f:61:f0:8a:34:a4:38:58:
                    7d:83:40:38:e7:17:56:04:db:8c:19:72:61:7f:62:
                    60:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B3:AC:EA:04:82:81:E7:53:C7:49:B8:87:E1:98:DF:00:AD:E2:96
            X509v3 Authority Key Identifier:
                keyid:CB:C8:C0:64:6E:B6:CB:F2:69:8B:B0:A7:60:50:3B:CD:B9:1F:1A:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8jAZG62y_Jpi7CnYFA7zbkfGlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/37d93e-f5da-4ecf-a7a8-908e8b278552/1/y8jAZG62y_Jpi7CnYFA7zbkfGlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c6:8f:9f:56:79:93:8b:1c:21:21:0f:66:6e:eb:55:13:80:
         b6:6c:ae:cf:88:48:cf:3a:92:35:41:d1:f4:bd:1e:4d:1f:b5:
         4b:c9:95:ad:7e:b6:12:31:bf:8d:3f:45:c0:74:2c:9b:6a:13:
         53:cb:d1:4b:c5:db:cd:49:11:c2:1b:82:a9:9b:d6:39:dc:58:
         68:aa:19:a8:4b:ab:c4:fb:7d:6c:ff:18:f3:58:9f:66:3f:20:
         25:c4:b6:82:45:ef:47:e4:71:29:9c:34:62:38:45:7d:f4:23:
         fb:5e:f8:28:8b:e9:3a:bb:95:01:0e:32:fe:9b:b4:01:42:bb:
         f9:cb:96:ea:47:2d:82:0e:80:19:c7:7a:1f:cb:4d:2d:61:65:
         b0:7b:dd:c7:c3:d7:35:44:5c:a1:25:2c:03:f6:de:44:35:2a:
         52:8a:42:8e:0c:77:1b:24:ba:7a:64:4e:12:0d:36:68:55:c3:
         54:aa:27:cf:ab:f6:99:60:24:31:b9:80:63:1e:14:33:74:b5:
         82:eb:cf:10:98:77:91:ff:79:4c:2b:3c:89:83:a6:33:d1:31:
         ff:98:1b:d3:5c:6a:dc:47:c8:90:03:73:4f:f9:31:15:99:7e:
         ba:b9:bc:ed:3c:e8:4d:97:7d:e7:4f:bf:40:f9:45:01:f5:49:
         6f:0e:4a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:32:07 2026 by rpki-client