Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.mft
File:                     YYYvsG8cKTBFdgzpj10gAuNd6zg.mft (raw, json)
Hash identifier:          tCKgJhbO6vt1odK55IUrSIm3lzstSO0A3a6sbVyDc3M=
Subject key identifier:   46:5B:6C:36:96:14:8A:58:79:27:FC:9C:1E:FF:CB:B1:53:FD:FA:31
Authority key identifier: 61:86:2F:B0:6F:1C:29:30:45:76:0C:E9:8F:5D:20:02:E3:5D:EB:38
Certificate issuer:       /CN=61862fb06f1c293045760ce98f5d2002e35deb38
Certificate serial:       01A0D15BBFBBA75DCA5FCE1A51AF73E0C078
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYYvsG8cKTBFdgzpj10gAuNd6zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.mft
Manifest number:          012B
Signing time:             Thu 24 Sep 2026 03:00:46 +0000
Manifest this update:     Thu 24 Sep 2026 03:00:46 +0000
Manifest next update:     Fri 25 Sep 2026 03:00:46 +0000
Files and hashes:         1: YYYvsG8cKTBFdgzpj10gAuNd6zg.crl (hash: SF/goOC01RerMhJQ0edDnSvbMf87lFeW0cQmMyWkkks=)
                          2: qHCpijfdc8k5y0Zn9AxU7VJ5dr4.roa (hash: 7b7QR3OS+ILGRcJ7amN0EllvwZEFj+J1VkU+kfBrkF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YYYvsG8cKTBFdgzpj10gAuNd6zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 03:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:bf:bb:a7:5d:ca:5f:ce:1a:51:af:73:e0:c0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61862fb06f1c293045760ce98f5d2002e35deb38
        Validity
            Not Before: Sep 24 03:00:46 2026 GMT
            Not After : Sep 25 03:00:46 2026 GMT
        Subject: CN=465b6c3696148a587927fc9c1effcbb153fdfa31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:c2:00:19:2f:dd:17:e3:6b:20:7b:05:13:
                    d4:02:34:09:60:f6:db:8d:0f:fe:f9:4c:7c:35:77:
                    cf:4a:a6:94:25:1d:03:ed:03:a1:d0:58:c9:96:a3:
                    9c:fc:e6:07:a8:ff:db:82:13:34:8f:37:10:05:14:
                    6c:d9:ca:ef:22:24:eb:15:73:ed:3f:e9:f1:ee:45:
                    23:93:62:bd:87:1a:3f:25:4b:cd:8a:92:6e:5d:18:
                    55:ba:4c:5b:c5:cd:99:de:80:30:2d:80:8c:e8:c0:
                    b6:c1:3a:7b:05:9d:96:24:58:a9:f5:c0:47:f4:27:
                    ca:7d:24:71:a2:5d:d1:dd:94:1f:fb:2b:68:65:88:
                    34:05:a4:30:74:7e:c3:ca:58:35:b3:04:a2:ed:cf:
                    a9:fe:06:41:ba:27:11:87:0d:18:ab:d8:94:19:f5:
                    f3:cf:ef:68:4c:68:35:42:49:73:67:f1:06:e4:41:
                    79:1c:9f:16:c6:cb:23:39:77:b7:fb:48:f7:67:dd:
                    8f:c0:50:3a:0e:2d:6b:d2:96:57:ef:eb:02:f9:30:
                    91:09:8f:4e:af:1f:36:1b:9f:80:31:66:f6:80:39:
                    39:cb:53:d4:5a:1f:db:15:81:0e:25:3f:3e:4d:1a:
                    53:04:1b:f2:27:53:bb:2b:3f:0b:14:0c:24:91:a6:
                    dd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5B:6C:36:96:14:8A:58:79:27:FC:9C:1E:FF:CB:B1:53:FD:FA:31
            X509v3 Authority Key Identifier:
                keyid:61:86:2F:B0:6F:1C:29:30:45:76:0C:E9:8F:5D:20:02:E3:5D:EB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYYvsG8cKTBFdgzpj10gAuNd6zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6b8285-6e63-4e78-a2c3-ce010d3760c6/1/YYYvsG8cKTBFdgzpj10gAuNd6zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:49:33:bd:fd:af:5c:8e:6f:bf:07:9a:86:5f:a8:b6:c1:0e:
         2f:83:24:e8:67:e6:a5:6d:27:ea:dd:b8:e9:de:5c:5c:06:b1:
         73:de:ce:66:a8:03:71:aa:92:61:4c:fb:c0:7d:79:a5:37:2f:
         5f:34:0b:39:49:8f:e6:2a:57:9a:d9:ed:15:94:bd:81:13:69:
         34:d0:4d:72:94:bf:2d:31:2b:2f:d2:6e:bf:87:18:39:62:94:
         2d:6c:64:87:eb:89:dd:48:fc:db:01:b8:06:c8:70:26:31:f7:
         8a:57:31:d3:ef:85:ce:a2:c9:f8:e4:91:74:8e:74:b2:dd:00:
         b9:e7:19:dd:b1:a7:a3:f2:6e:21:b0:bd:61:04:f3:c6:60:d6:
         1b:01:de:5b:26:ec:75:6c:75:ab:7b:17:3f:0f:a8:b4:93:8a:
         ab:a1:5c:80:d4:f2:86:b1:27:f5:ec:a6:18:0d:fc:94:95:b5:
         05:ed:82:25:c2:24:51:0f:32:69:19:12:e6:c2:b3:42:e4:4b:
         f1:fc:95:10:cf:df:4e:f6:68:58:e6:2e:fe:9a:2e:a7:f9:4a:
         3f:38:95:47:86:52:e6:75:d1:22:02:2f:65:75:51:8c:a6:c6:
         a0:11:33:a2:5c:50:ef:b1:03:6f:4d:ee:6d:c9:39:b9:b5:c7:
         99:3a:13:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRW7+7p13KX84aUa9z4MB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODYyZmIwNmYxYzI5MzA0NTc2MGNlOThmNWQyMDAyZTM1
ZGViMzgwHhcNMjYwOTI0MDMwMDQ2WhcNMjYwOTI1MDMwMDQ2WjAzMTEwLwYDVQQD
Eyg0NjViNmMzNjk2MTQ4YTU4NzkyN2ZjOWMxZWZmY2JiMTUzZmRmYTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvw7CABkv3RfjayB7BRPUAjQJYPbb
jQ/++Ux8NXfPSqaUJR0D7QOh0FjJlqOc/OYHqP/bghM0jzcQBRRs2crvIiTrFXPt
P+nx7kUjk2K9hxo/JUvNipJuXRhVukxbxc2Z3oAwLYCM6MC2wTp7BZ2WJFip9cBH
9CfKfSRxol3R3ZQf+ytoZYg0BaQwdH7Dylg1swSi7c+p/gZBuicRhw0Yq9iUGfXz
z+9oTGg1QklzZ/EG5EF5HJ8WxssjOXe3+0j3Z92PwFA6Di1r0pZX7+sC+TCRCY9O
rx82G5+AMWb2gDk5y1PUWh/bFYEOJT8+TRpTBBvyJ1O7Kz8LFAwkkabdpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZbbDaWFIpYeSf8nB7/y7FT/foxMB8GA1UdIwQY
MBaAFGGGL7BvHCkwRXYM6Y9dIALjXes4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlZdnNHOGNLVEJGZGd6cGoxMGdBdU5kNnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82YjgyODUtNmU2My00ZTc4LWEyYzMt
Y2UwMTBkMzc2MGM2LzEvWVlZdnNHOGNLVEJGZGd6cGoxMGdBdU5kNnpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82YjgyODUtNmU2My00ZTc4LWEyYzMtY2UwMTBkMzc2MGM2
LzEvWVlZdnNHOGNLVEJGZGd6cGoxMGdBdU5kNnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkkzvf2v
XI5vvweahl+otsEOL4Mk6GfmpW0n6t246d5cXAaxc97OZqgDcaqSYUz7wH15pTcv
XzQLOUmP5ipXmtntFZS9gRNpNNBNcpS/LTErL9Juv4cYOWKULWxkh+uJ3Uj82wG4
BshwJjH3ilcx0++FzqLJ+OSRdI50st0AuecZ3bGno/JuIbC9YQTzxmDWGwHeWybs
dWx1q3sXPw+otJOKq6FcgNTyhrEn9eymGA38lJW1Be2CJcIkUQ8yaRkS5sKzQuRL
8fyVEM/fTvZoWOYu/poup/lKPziVR4ZS5nXRIgIvZXVRjKbGoBEzolxQ77EDb03u
bck5ubXHmToT1A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:08:18 2026 by rpki-client