Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File:                     YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier:          ncJx3nnvNsQvlpZgdZ67Gy30Mzo65j6AMCVuu4exMvY=
Subject key identifier:   41:CA:DA:ED:CF:FD:51:57:02:25:4A:E4:1E:C4:E5:8E:81:05:E6:C0
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer:       /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial:       01A11A1934429F6745CF5DF1BE869E25851B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number:          1667
Signing time:             Thu 08 Oct 2026 06:00:21 +0000
Manifest this update:     Thu 08 Oct 2026 06:00:21 +0000
Manifest next update:     Fri 09 Oct 2026 06:00:21 +0000
Files and hashes:         1: 7r9SX9HuGtf2H3oy1bdYUxs6ERM.roa (hash: gZE5Lnpr7kALC+H2K1SiEYZZcM/wPDOptHC62z3JpZM=)
                          2: RaOgAx7z_BoGsJCyVvWXc3WyVrw.roa (hash: H3mZYu57zkJacQjG3m40A6yiDRjQz42LgSYFK6KQrLI=)
                          3: TJ2UCD3Urxqqt9VYyEf23Fmmaqc.roa (hash: ofKvq3GVg7zKLaiA8CE5CKSDJCDWtrOUHXHufuUJ1ug=)
                          4: Xrue8_3iZIf-q2iZjaX1I5eh5v4.roa (hash: GCW1dLjeWZhLx2VOYd6Yk9RjDyKldIOTznHcOf+v7tI=)
                          5: XzpLOyyVemQ6RelT4l5NRJSoZY8.roa (hash: 7T31BDFOxFp2/Pv8ShUq1oXNZxQJBzRZFs2H/DMrRxs=)
                          6: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: Rixb8RNJ1uvbtRnncsnipfZ4DgrkP1TLiR0FsYAelxc=)
                          7: i900lZucCqA9DZUrSkDMsObY6hA.roa (hash: BwcsBww5LOQDT5JOaN5lMmUCh3Hs0MQx3s5Tm8CrQME=)
                          8: uTIQo1iOi6huXk_fCeCJe7xarCY.roa (hash: ivcVjW4Q8NkzPjE4iMw0GCYLeKdEXAuPpRYl7NOH1pY=)
                          9: zaFkNKXL7XugoMho6gsyI_tFULk.roa (hash: N8aOmUkSfhnOWq2kc5KVJ3lVeRhazZVqeZC0mkdlrjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 06:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:19:34:42:9f:67:45:cf:5d:f1:be:86:9e:25:85:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
        Validity
            Not Before: Oct  8 06:00:21 2026 GMT
            Not After : Oct  9 06:00:21 2026 GMT
        Subject: CN=41cadaedcffd515702254ae41ec4e58e8105e6c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:89:a8:8b:8b:bd:17:1c:bd:f9:37:e7:c7:02:
                    fa:b5:8b:92:cf:2f:00:7a:3c:40:2d:57:17:85:33:
                    cf:13:c8:3b:e1:d5:d5:3f:f9:77:84:93:34:61:f9:
                    78:92:e9:95:32:cb:b6:08:e8:34:1f:cf:e9:17:22:
                    67:8a:3d:07:02:12:8b:a2:de:12:d4:cb:ec:fc:67:
                    9a:59:d1:fb:2d:1d:5b:81:78:f7:36:99:96:24:03:
                    71:a8:7c:db:fa:97:ac:81:c8:0b:a3:26:57:85:49:
                    46:ff:5a:5e:9f:a8:fb:8d:6d:7c:a7:8e:23:80:21:
                    02:b9:3a:9c:8a:f6:e8:d7:65:d2:cd:bb:c9:e1:66:
                    d9:dd:3f:69:69:8d:dc:bf:af:94:ee:55:94:8a:d0:
                    59:19:8f:6c:57:3d:c7:21:08:12:bd:77:36:4c:ef:
                    d8:69:a2:9e:02:0f:65:82:80:78:4b:c6:f9:f9:4a:
                    ff:5f:65:48:74:e1:64:ce:d3:ae:a0:a9:08:9c:66:
                    b9:0c:bb:6e:3e:9f:33:2c:fe:06:af:6e:a9:e7:90:
                    23:56:c0:75:47:14:24:22:20:1a:6f:0b:1c:14:f2:
                    5c:96:e5:12:9d:9d:57:11:da:7d:ce:e4:b2:ea:b5:
                    c3:f7:43:9a:32:bb:1c:49:0d:1e:2c:4d:ff:44:80:
                    62:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CA:DA:ED:CF:FD:51:57:02:25:4A:E4:1E:C4:E5:8E:81:05:E6:C0
            X509v3 Authority Key Identifier:
                keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f2:50:7f:a9:b6:2c:ff:f3:31:30:de:06:71:e9:e8:95:fa:
         8e:56:2f:2a:ae:8d:08:57:96:8d:db:78:ce:02:06:fc:55:99:
         75:fb:19:aa:14:5c:6b:b0:32:8e:c3:74:dd:8d:37:69:6e:cc:
         79:06:21:43:ee:67:07:05:96:f0:a2:63:0b:63:11:ed:44:35:
         d0:d4:a2:73:29:51:24:8e:48:3f:eb:19:55:68:53:38:22:f5:
         72:fd:ee:04:34:d9:8a:7b:3c:6d:9d:59:e6:e6:1f:5b:b5:06:
         e5:0f:d9:75:bd:20:d4:0d:fa:84:db:87:6f:72:48:75:39:77:
         fb:bb:28:22:fa:d4:9a:0b:c8:1d:74:ed:76:72:88:4e:2c:0e:
         10:99:41:cd:a7:1f:ae:2c:11:c8:40:b8:16:28:ee:a8:b8:ef:
         1d:f4:c3:ed:69:1e:33:95:28:ed:19:ac:27:25:39:2f:c2:d3:
         df:a8:37:e8:b8:e1:11:77:ca:1d:eb:22:2b:07:42:81:fd:d6:
         cc:ee:9b:09:58:06:50:4e:29:f0:a2:af:04:bf:4d:1b:d6:a6:
         c5:55:b8:1b:9a:2b:cc:8c:11:10:94:56:69:6a:29:82:20:96:
         54:bd:61:57:4c:76:8c:16:db:28:f7:c4:bb:e2:f3:a1:1f:f6:
         11:a2:b0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:56:53 2026 by rpki-client