Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
File:                     yjevCVET2t1bxRveu_CtNNbu22Q.mft (raw, json)
Hash identifier:          r+R3hDFqc2Aw5edKMO2l0QcGQ5gcMBQMe7RZKH7p554=
Subject key identifier:   56:EF:E7:25:36:C3:E1:A4:86:32:B5:2C:08:16:64:DE:CE:AA:AF:33
Authority key identifier: CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64
Certificate issuer:       /CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
Certificate serial:       01A0DF4F21867CEF34E6B86B8E309A912DC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
Manifest number:          1684
Signing time:             Sat 26 Sep 2026 20:01:39 +0000
Manifest this update:     Sat 26 Sep 2026 20:01:39 +0000
Manifest next update:     Sun 27 Sep 2026 20:01:39 +0000
Files and hashes:         1: F44bKH9OXVnCIoILdhGNkCfhXGk.roa (hash: tP7jtATuTlTRwvEpnqA6Mbeq855NS1jjX+L/+eC+Juk=)
                          2: yjevCVET2t1bxRveu_CtNNbu22Q.crl (hash: xIdFUlHKImfoIY8dWfNm/npoYZA1AGKNrECrb4rkACE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:4f:21:86:7c:ef:34:e6:b8:6b:8e:30:9a:91:2d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca37af095113dadd5bc51bdebbf0ad34d6eedb64
        Validity
            Not Before: Sep 26 20:01:39 2026 GMT
            Not After : Sep 27 20:01:39 2026 GMT
        Subject: CN=56efe72536c3e1a48632b52c081664deceaaaf33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d3:87:0e:d3:80:22:41:ea:65:5a:32:f7:fd:
                    b8:b4:a6:12:48:0a:8a:ba:bc:10:a7:2c:bc:5f:e9:
                    57:1d:ac:d1:c1:bb:f6:a2:bf:71:27:30:96:d9:5d:
                    71:7e:7d:7a:b6:37:5b:80:59:ed:87:66:b6:62:ef:
                    e6:59:5c:c3:1c:f8:43:17:fa:7e:9a:72:14:be:36:
                    d6:e8:cb:2a:59:9b:b8:d5:7b:44:1f:38:01:aa:88:
                    72:e5:8a:5a:5d:b3:2f:aa:e1:c3:7f:a4:48:65:0a:
                    01:fe:f5:f4:c2:d5:7c:e2:1d:a2:84:87:46:d6:6c:
                    b3:c5:25:e0:27:84:2e:ad:2a:f3:e2:64:e6:21:35:
                    4f:bf:61:a0:ee:38:67:a2:b4:df:0d:d7:3a:78:5c:
                    d6:0a:56:5d:3f:a7:e7:10:1d:d3:84:af:8d:0e:25:
                    f2:54:83:5e:94:24:44:82:3f:38:83:05:78:f0:ed:
                    7f:8a:97:d3:37:d7:51:eb:ef:42:b8:90:d7:f9:09:
                    4b:22:32:5b:d6:48:53:b2:4e:09:87:1a:b5:27:53:
                    06:0e:c7:58:7a:a0:a4:c4:85:0b:a4:55:56:d3:44:
                    05:1a:7d:32:9e:f7:83:70:f2:5a:ec:3b:ca:52:63:
                    a9:24:62:84:75:60:f4:a7:e8:5c:e6:7e:8a:2d:9b:
                    18:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:EF:E7:25:36:C3:E1:A4:86:32:B5:2C:08:16:64:DE:CE:AA:AF:33
            X509v3 Authority Key Identifier:
                keyid:CA:37:AF:09:51:13:DA:DD:5B:C5:1B:DE:BB:F0:AD:34:D6:EE:DB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjevCVET2t1bxRveu_CtNNbu22Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ad6c83-e5fd-4417-bff9-eb68efc4748b/1/yjevCVET2t1bxRveu_CtNNbu22Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:09:0d:4a:38:29:75:f1:02:45:ac:d6:d8:fb:85:06:8a:e3:
         7d:d6:59:16:ee:70:0e:92:bb:cd:49:59:04:36:0f:ea:82:79:
         b5:0d:c7:65:db:ae:96:78:6c:eb:21:d4:96:3c:f5:40:fb:f8:
         d6:da:a8:3e:9f:8d:02:51:24:64:9b:45:cd:87:9b:10:3a:3e:
         ec:ae:2d:7e:01:13:e2:13:e0:33:54:73:1f:93:be:fc:d4:d9:
         2b:a8:23:fc:a4:8c:7f:fd:a8:db:8b:66:80:3b:9f:f4:a6:08:
         7c:4e:f1:c2:83:52:c3:7c:2b:5c:d1:cc:9f:a9:ae:bd:ab:70:
         6d:2c:3d:35:8f:f5:3f:b4:60:db:6e:04:2c:af:43:0b:08:d9:
         90:02:8d:f0:8e:9c:83:19:2b:be:72:4e:de:c4:5b:3b:01:ad:
         37:f8:38:9b:9c:94:98:47:7f:eb:c3:9c:06:27:4b:42:df:d4:
         92:53:1d:e8:14:1f:22:6f:17:53:43:40:69:44:61:a1:78:76:
         41:82:bd:52:60:8c:39:f5:bb:de:d6:ed:4a:59:39:14:14:87:
         df:8c:34:33:12:49:72:3c:ce:52:bc:f2:30:81:5e:29:fc:f4:
         07:04:01:4e:50:c6:8e:60:d4:fb:cf:60:56:83:57:c0:66:ff:
         84:fd:9a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:32:13 2026 by rpki-client