Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File:                     YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier:          ZJUv1pSoOWQREsnJwIxl7o5oDSbNxmA+bdyDM4qUInI=
Subject key identifier:   C8:DE:11:3F:76:C0:B7:C0:9F:1B:22:4C:31:79:EA:3B:A6:AC:C6:9E
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer:       /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial:       01A13D80F77830D1CF0EBB2BA050691EEA0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number:          0F2F
Signing time:             Thu 15 Oct 2026 03:00:24 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:24 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:24 +0000
Files and hashes:         1: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: gs0E/O2UGheHecaH2SOiUxmVBfNf6hwD7zs/+9oL+04=)
                          2: kGLxA9onzrf8JLssDr-KbBw0Iso.roa (hash: iCYCJqbAYcmF46KnTkB1atw07n5B8BjwCirxzmxkzlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:80:f7:78:30:d1:cf:0e:bb:2b:a0:50:69:1e:ea:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
        Validity
            Not Before: Oct 15 03:00:24 2026 GMT
            Not After : Oct 16 03:00:24 2026 GMT
        Subject: CN=c8de113f76c0b7c09f1b224c3179ea3ba6acc69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:3d:7a:e3:21:f6:1c:ae:6d:51:48:0a:b0:
                    cf:f5:f7:ea:ed:6e:8e:a9:64:a0:47:7d:92:bb:69:
                    1b:d2:1c:4a:dd:4a:53:63:33:ef:d6:fa:c7:ab:77:
                    a8:50:d8:96:d1:89:87:31:22:99:68:86:d9:a6:bf:
                    c9:eb:73:14:09:86:b4:34:fc:46:2a:74:2b:ae:f3:
                    bc:26:fd:33:d1:0a:b8:da:d4:3d:aa:21:10:ee:51:
                    ee:07:e5:bb:15:f0:ab:27:a5:b1:d3:57:a0:36:0f:
                    fd:c5:e9:7c:b3:e8:59:dc:0d:aa:d3:93:ad:f7:ef:
                    87:10:aa:90:a2:26:ef:92:ed:e6:80:f7:a3:45:ad:
                    10:20:68:39:86:51:cf:3b:ca:a9:20:52:90:34:5f:
                    62:43:0c:3c:50:56:bf:fc:b4:88:a7:0f:a9:10:5e:
                    0d:2a:20:19:1f:07:2b:53:6e:02:c3:fe:d2:80:f4:
                    90:a2:f4:ca:d4:a9:d6:0d:23:df:8d:f2:90:69:5d:
                    9f:8d:b8:6e:29:7b:81:2c:ff:2e:ee:a4:46:59:1d:
                    b6:09:a6:b0:c4:9f:ce:ca:b0:9a:32:1d:2e:f5:94:
                    f4:bd:38:e1:79:1b:0c:e0:c1:db:e6:92:2d:f3:cb:
                    e1:e3:12:f0:8b:d5:95:07:55:48:dc:74:46:0c:b2:
                    75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DE:11:3F:76:C0:B7:C0:9F:1B:22:4C:31:79:EA:3B:A6:AC:C6:9E
            X509v3 Authority Key Identifier:
                keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:93:46:42:52:a5:58:6a:b1:73:a5:11:70:b7:14:97:6e:fa:
         a2:34:de:17:60:a5:fd:27:2c:9e:eb:e4:e7:1d:6d:83:37:44:
         65:8f:fd:57:a8:94:0c:f1:fd:0d:75:8c:de:96:22:70:8b:82:
         eb:d0:c7:ca:39:8e:1f:aa:d6:2d:50:25:00:c7:17:bb:0c:98:
         70:7a:0b:3c:3f:83:a1:cc:e1:0e:86:b9:36:9f:ef:f1:cb:18:
         65:18:18:0b:55:ed:43:5c:80:7b:b1:14:bb:d8:a6:1e:fc:0e:
         40:65:7b:0e:b0:eb:8c:dc:50:de:39:75:7b:2d:d4:c0:3c:5d:
         69:3c:32:ad:60:fc:46:13:ce:d1:c9:53:ac:eb:cf:d6:66:02:
         80:13:77:cd:40:c9:9d:28:3c:6e:80:69:7c:f1:2e:5c:49:0a:
         2a:f3:75:db:de:74:15:fb:45:ab:85:4a:91:a7:26:ca:1b:cf:
         67:83:50:e0:82:8b:b0:be:f8:0c:0d:04:a8:85:24:0b:4e:ec:
         4a:dd:3b:b0:5e:61:91:e0:fc:ba:55:c2:73:a8:19:e7:a5:94:
         eb:a8:60:85:16:dd:00:49:1f:e8:5e:de:fe:6c:29:85:7e:e9:
         0e:48:96:eb:4f:12:84:54:7a:0b:b1:b0:97:d6:16:1a:c9:c2:
         01:e9:88:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:29:44 2026 by rpki-client