Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File:                     YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier:          64h019z82pppIZvH5f2qN+XyRQJF73EO1IdZPm/biZU=
Subject key identifier:   69:49:2C:87:C0:DA:07:79:71:17:F0:7A:14:78:76:0E:45:FD:B0:E9
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer:       /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial:       01A0C09F5783CBFDC25B59B97A489854FC88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number:          138B
Signing time:             Sun 20 Sep 2026 21:01:03 +0000
Manifest this update:     Sun 20 Sep 2026 21:01:03 +0000
Manifest next update:     Mon 21 Sep 2026 21:01:03 +0000
Files and hashes:         1: TNfS4qjFMyp6FRl_4ldjm_Y_i3Q.roa (hash: V9e1y2xxqghsyNge3bSzEeJvbCQltZtzBhjXNsBZP/k=)
                          2: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: 1YMjOjzJuzOGpuyGx3mvzX7Puzcr48u98SJ87dyYiAU=)
                          3: aL2Fa93Pq0uyo59pgUgspQyUPKc.roa (hash: Bga4XDZkfRChSZnLWZqmel++JYpGqGLT7JPEKTaVvO0=)
                          4: rxVxvq80s018HousURd0ic36W10.roa (hash: 4vWzh852MFR+K32Ov40708je2OYVViB9fVjK6c0oRMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:9f:57:83:cb:fd:c2:5b:59:b9:7a:48:98:54:fc:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
        Validity
            Not Before: Sep 20 21:01:03 2026 GMT
            Not After : Sep 21 21:01:03 2026 GMT
        Subject: CN=69492c87c0da07797117f07a1478760e45fdb0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2d:a8:5d:66:f6:27:e8:20:75:68:f0:d4:bd:
                    14:4e:65:91:23:a9:6f:80:eb:fa:ed:35:d5:bc:72:
                    9e:9c:f3:d6:5f:47:13:47:a1:1b:6a:4f:37:f8:62:
                    2a:d9:a5:ab:53:3e:d5:78:d5:5e:61:c2:08:ce:51:
                    a7:b1:ea:34:77:69:5f:b0:b7:89:bd:22:aa:01:2b:
                    48:0a:4a:25:29:37:8c:dd:9e:14:60:67:32:07:ae:
                    ea:23:3c:51:b9:32:cf:01:a8:27:58:03:ab:5e:88:
                    e9:2b:aa:44:69:5b:8f:23:01:7e:d2:bb:ee:7d:c7:
                    e1:82:4c:ee:76:01:6f:ad:41:d3:1d:10:70:6f:67:
                    61:84:64:0b:de:ff:fe:e9:db:1e:c7:53:0e:64:a4:
                    8d:18:89:e3:05:84:92:c6:32:71:6d:1e:22:b5:ca:
                    7b:51:c4:59:54:28:51:3f:24:7a:0c:59:97:e8:2f:
                    f6:d2:74:b7:b4:e4:07:c0:f1:53:c0:f1:ff:57:e4:
                    62:02:a6:b2:17:ae:8b:95:b4:61:35:00:55:1d:f1:
                    e0:63:69:91:87:12:11:42:55:fd:27:d2:01:51:06:
                    2d:68:f5:4b:a2:f8:55:a1:7b:db:64:64:22:a6:3e:
                    bd:db:72:79:86:ef:48:1e:f2:26:99:cc:1c:ba:3d:
                    0b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:49:2C:87:C0:DA:07:79:71:17:F0:7A:14:78:76:0E:45:FD:B0:E9
            X509v3 Authority Key Identifier:
                keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:72:40:cb:17:60:43:73:26:36:18:30:f1:ee:ce:45:ca:1d:
         b4:9e:d1:24:b8:a7:63:af:f7:e9:ee:f2:4d:3b:59:28:6a:f8:
         bd:0b:64:65:58:c5:d0:f0:7c:26:ef:b3:7a:37:bc:c2:f6:75:
         11:82:e3:96:d0:25:18:33:17:c1:da:7a:07:79:40:9a:2b:3d:
         68:81:d5:74:9f:1f:10:bb:f6:f4:f9:d6:ef:10:07:4e:02:62:
         2a:fe:04:21:ba:ba:e2:74:7d:ad:86:18:f9:e5:7a:72:05:6e:
         5a:25:6d:78:aa:bd:d1:73:59:a7:fb:6e:54:59:e0:64:8d:4e:
         95:3d:7c:80:32:b6:52:35:fa:5d:d6:01:9a:02:73:07:66:6b:
         e9:90:8d:cd:b2:eb:8d:46:58:7d:a2:77:06:0d:0b:e5:fa:d3:
         17:58:de:96:a9:c0:69:fe:c9:21:48:8e:05:e2:8a:93:10:13:
         b5:88:03:73:ae:75:ba:36:0b:5f:d8:01:67:e5:86:87:df:3d:
         1e:83:56:fd:c6:06:67:54:18:e4:81:49:22:08:71:0a:44:19:
         ec:c7:1f:af:26:e2:32:24:1b:ac:92:00:ac:78:db:42:ae:fc:
         e4:2b:30:24:ab:15:e7:7a:dd:0d:5e:bf:11:c1:a2:16:25:c6:
         b7:04:70:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:15:14 2026 by rpki-client