Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File:                     yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier:          kYjocHaiTChDxKD0wIs7viyMpQxTpnJ2wGNvR9jbaeo=
Subject key identifier:   99:0B:FD:95:25:3F:41:F2:40:A0:B9:75:E1:79:30:7B:43:ED:ED:1B
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer:       /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial:       01A0E1072CF88231C68F9A57EB1D716F027E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number:          1A75
Signing time:             Sun 27 Sep 2026 04:02:18 +0000
Manifest this update:     Sun 27 Sep 2026 04:02:18 +0000
Manifest next update:     Mon 28 Sep 2026 04:02:18 +0000
Files and hashes:         1: JBraeIgnuA6e6r7UQt_AjcfpK9E.roa (hash: tQM9C7OHo0XqPssxXUnuLcGysh5HiluPj8tqyjMnFVk=)
                          2: cpkKyNRNYgQk1lLBbtv-RlD-78g.roa (hash: MQvqAF25MaAWO4N+QWnNs3nNJuJQMOBlA9mFkaz0rn0=)
                          3: qQLv7uOVYz32Fa-HCYFsduryaUY.roa (hash: msrPJ+vS8iPsGg0xQfm9cnyh8JOxajlO3J5ownd6l7I=)
                          4: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: bN2PW0WYOemtdsGcFdpbXPyfqCQraEL4xbTPOiqixGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:07:2c:f8:82:31:c6:8f:9a:57:eb:1d:71:6f:02:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
        Validity
            Not Before: Sep 27 04:02:18 2026 GMT
            Not After : Sep 28 04:02:18 2026 GMT
        Subject: CN=990bfd95253f41f240a0b975e179307b43eded1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d1:68:84:30:ac:a8:ff:c5:a6:c6:d2:01:d7:
                    f0:92:35:64:b5:93:ff:8e:9f:f8:36:65:11:8f:90:
                    20:1e:8f:ad:3c:5c:36:6c:f2:77:9a:b8:21:aa:16:
                    11:1e:f2:cd:f0:37:83:eb:54:af:58:25:91:29:ad:
                    9b:56:dd:65:1b:a3:c7:7b:23:c8:1e:c3:da:3c:80:
                    19:17:27:e8:a5:ac:fa:d1:1c:23:48:b5:71:b3:0f:
                    c5:03:0c:1a:ba:cd:44:b8:98:0e:b1:b4:35:b6:a4:
                    db:9a:89:26:f4:1a:9d:e0:83:ab:a5:84:a0:e3:bc:
                    c4:b4:03:2d:b3:c1:e1:19:d7:8f:3c:df:ff:03:e2:
                    66:7a:72:f7:6d:8c:56:d5:6f:06:c8:bc:25:00:09:
                    11:16:91:54:37:73:cf:7c:e3:01:13:52:0f:22:55:
                    65:a8:b2:1e:d2:70:79:fd:b3:76:97:c6:e8:63:93:
                    2a:17:6e:7c:00:f0:f7:b7:9c:4e:4d:2b:2f:11:d4:
                    78:83:af:fb:e6:12:64:e4:a7:65:a1:3c:d8:18:89:
                    3a:ab:23:e9:96:38:b1:e9:64:44:65:57:1f:1e:43:
                    d3:35:80:22:e4:69:74:61:17:f2:0f:01:3e:28:d5:
                    af:93:a0:73:c6:06:06:1a:03:37:91:bf:78:b6:8a:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0B:FD:95:25:3F:41:F2:40:A0:B9:75:E1:79:30:7B:43:ED:ED:1B
            X509v3 Authority Key Identifier:
                keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:52:0f:39:d2:2c:0a:3e:c8:dd:f4:8f:b9:f7:23:22:81:cd:
         95:fc:46:86:56:68:7b:86:ed:e2:77:9f:14:d8:2b:31:c2:90:
         89:00:24:95:45:2a:b9:71:e8:fa:0c:a2:52:55:80:fb:94:ad:
         0b:90:8d:d4:da:5d:2a:e4:31:ee:20:f9:4e:f6:24:db:28:7a:
         73:69:d2:80:38:70:0d:e3:cf:50:7d:17:68:c9:2b:c7:37:d5:
         82:30:a2:e4:8b:93:31:70:9d:0c:8d:42:0d:de:99:79:eb:31:
         ef:6e:c1:47:9f:48:46:10:0d:77:7a:79:22:11:e6:85:7b:4a:
         50:51:55:c9:0b:f3:96:8b:b3:cd:e4:e4:51:32:c0:8a:1a:a2:
         5e:70:ea:1c:85:8e:01:22:cb:de:66:1d:c8:29:78:1a:b8:fe:
         71:ed:06:d3:09:58:67:8e:88:16:01:97:27:e8:4e:46:b3:dd:
         65:6c:57:83:ec:f6:f1:af:74:ef:11:a7:34:a2:07:e2:c8:5b:
         a0:35:27:50:66:e5:d2:a9:ad:98:dd:aa:a6:ed:e2:ef:9d:7b:
         7e:77:80:55:95:49:24:a3:d6:38:65:2d:42:88:7a:cb:ad:98:
         d0:f9:01:ee:89:73:08:ac:d2:4f:01:05:00:7b:bd:5b:5b:a9:
         05:53:d7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:18:03 2026 by rpki-client