Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File:                     Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier:          iSjmTFqI95elpQFE1PbOVBXoVIniPDv5OQanFGfGvXY=
Subject key identifier:   77:F7:A9:B5:64:66:E2:6A:80:27:14:52:38:80:83:D8:C8:BF:62:84
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer:       /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial:       01A0C77CCAD419F151E59A8BDDBFFF0899D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number:          1A70
Signing time:             Tue 22 Sep 2026 05:00:39 +0000
Manifest this update:     Tue 22 Sep 2026 05:00:39 +0000
Manifest next update:     Wed 23 Sep 2026 05:00:39 +0000
Files and hashes:         1: XZ3sAdabDoOYfBZeEJolsMalQgs.asa (hash: XHuxusmmi3am2aFGs60mmc2MCFL+zmd66reyxUPLwTI=)
                          2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: zJEOIgcSSiTLTmMVKdraznkERVOGZmGlG3hRqAtvjw4=)
                          3: nibctkm7wr91rBA37l_8PQxYVLc.roa (hash: VamjklOdSeVjkVgODzUFUtdlbnnylLnD0/pDvfa31T8=)
                          4: t8mVoTfmckCvsyVdwBCx2WY3_SU.roa (hash: punRHqDIXE83AX4muw8qvjP6n1JcfvmchVlgv85rsL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7c:ca:d4:19:f1:51:e5:9a:8b:dd:bf:ff:08:99:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
        Validity
            Not Before: Sep 22 05:00:39 2026 GMT
            Not After : Sep 23 05:00:39 2026 GMT
        Subject: CN=77f7a9b56466e26a80271452388083d8c8bf6284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fd:44:57:d6:90:b7:da:69:0d:8e:52:5c:10:
                    0b:2e:57:58:72:e6:b7:63:0f:29:1f:64:bc:35:6e:
                    7b:96:72:de:78:0f:26:1d:0a:00:0f:4c:02:02:47:
                    7d:49:9f:44:3b:23:71:65:b1:80:1b:0b:01:9e:c8:
                    34:19:0e:20:ad:03:75:61:d4:80:ff:a2:04:d5:74:
                    43:8e:76:3d:c0:f4:b7:e2:eb:26:ac:06:d6:a9:89:
                    38:07:40:4e:db:99:7a:40:09:68:1a:85:64:35:50:
                    7e:41:39:ac:46:0d:94:9d:93:02:30:c0:4e:07:af:
                    ba:c3:c9:b8:4b:bf:bc:4e:6d:1a:16:73:fb:0f:91:
                    e4:87:65:e4:50:4d:af:34:f3:b6:93:25:d6:63:f4:
                    8c:5f:ab:37:70:2b:60:70:a5:f1:e6:a3:c5:82:11:
                    73:62:35:71:5d:d3:60:e5:4c:a4:fc:ff:e3:fb:a9:
                    6f:51:33:c2:fc:b7:f9:b3:ce:b2:9a:27:00:33:26:
                    51:94:41:67:da:dc:0b:69:5f:4f:a1:f6:4c:44:cc:
                    fb:b7:c5:df:b7:3d:bc:8b:9c:18:c6:ca:dc:b0:3a:
                    7c:9f:ff:fa:44:1d:86:8c:c5:a0:a9:4a:9c:4b:33:
                    e2:4a:36:18:14:ff:a2:17:13:33:04:5b:c8:5c:d3:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F7:A9:B5:64:66:E2:6A:80:27:14:52:38:80:83:D8:C8:BF:62:84
            X509v3 Authority Key Identifier:
                keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b5:90:59:60:34:3e:43:82:a1:06:6c:bd:31:b6:df:54:6b:
         c4:e8:dc:d3:d8:bc:e4:72:fa:a7:1e:bf:ee:d6:65:00:c9:92:
         c2:fb:33:4a:9c:67:09:f3:ec:a9:f8:b6:c8:d0:b7:83:c8:0c:
         b4:01:16:ab:b4:48:07:ea:7b:f3:6f:f0:f8:b8:11:19:f6:04:
         0e:6a:0d:d7:24:d1:fa:4e:79:8e:78:4e:1b:70:87:73:f4:da:
         d9:7f:84:9a:32:db:09:22:27:b1:b3:23:36:87:e1:7f:0a:d3:
         b5:97:2c:fa:c0:fd:8f:ef:34:6e:50:8f:5d:ef:fe:ef:51:29:
         bc:2d:3c:39:58:5a:07:f2:d0:f4:08:00:80:68:54:15:20:2a:
         6d:eb:e1:dc:f7:44:63:1e:d0:91:c4:47:36:a5:fe:8e:16:df:
         a9:92:20:be:92:88:01:3a:99:6c:c8:1a:77:58:d8:a2:9e:90:
         bb:b7:7f:88:9d:db:5b:f4:87:4e:51:57:11:04:82:7f:a8:31:
         d8:22:0f:77:8c:f1:e0:b3:f1:ae:5e:64:03:7f:92:43:de:74:
         d8:e4:84:47:f6:31:1a:8f:33:60:ec:ba:f2:a8:82:b5:98:45:
         d5:10:b2:60:4a:42:6d:37:6f:a0:be:f8:b6:e2:01:74:56:63:
         32:b9:8b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:50:31 2026 by rpki-client