Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
File:                     YAJlJf1EpPx1siRPgNAiY09fdjU.mft (raw, json)
Hash identifier:          qzRrZiDytbjbRPSrDaviJrzL2BgXZ4B/WVtRLD/H9x4=
Subject key identifier:   92:93:2D:62:46:ED:5F:75:5F:C5:CB:91:3C:24:3D:6A:03:F4:A5:67
Authority key identifier: 60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35
Certificate issuer:       /CN=60026525fd44a4fc75b2244f80d022634f5f7635
Certificate serial:       01A0F18BCBB503B3A9C493E24562B18125DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
Manifest number:          0475
Signing time:             Wed 30 Sep 2026 09:01:05 +0000
Manifest this update:     Wed 30 Sep 2026 09:01:05 +0000
Manifest next update:     Thu 01 Oct 2026 09:01:05 +0000
Files and hashes:         1: 1sBpsAgGmSmkI2DNNDGh5oQcGy8.roa (hash: hMp3WaNL7UAirQa4ZKu/uxZXkQM56eznsw/jc56uSx4=)
                          2: YAJlJf1EpPx1siRPgNAiY09fdjU.crl (hash: 4MKv3c+fV4yom96zuJbc/aPAXjm+puDMMO2D1gC0LN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 09:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:8b:cb:b5:03:b3:a9:c4:93:e2:45:62:b1:81:25:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60026525fd44a4fc75b2244f80d022634f5f7635
        Validity
            Not Before: Sep 30 09:01:05 2026 GMT
            Not After : Oct  1 09:01:05 2026 GMT
        Subject: CN=92932d6246ed5f755fc5cb913c243d6a03f4a567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:a1:27:cd:1d:91:b1:6b:82:29:a7:9c:27:
                    53:00:eb:9e:36:fd:26:d6:c0:b3:38:9e:80:52:c2:
                    a5:54:d6:7c:ec:ca:d8:f5:6c:c8:63:f1:1a:ca:ba:
                    58:33:d2:e5:fd:05:21:d9:14:7b:7b:fa:d6:9c:99:
                    ff:51:d0:40:d6:82:cd:27:83:46:c9:dc:14:b8:e9:
                    23:a0:c7:b3:6e:ab:3e:60:a5:17:19:51:33:81:17:
                    de:8a:78:c1:3b:c1:66:2d:52:ee:98:06:ec:84:df:
                    77:dc:16:da:8e:d1:e7:fe:cf:f0:2f:28:f1:87:52:
                    7a:41:c7:73:cc:b8:67:95:5f:fb:3a:fb:77:f0:7e:
                    d8:4a:52:3e:e4:49:d2:2c:7a:82:a1:ca:1c:c5:90:
                    98:bb:d4:c5:34:24:b3:83:d2:fb:11:1d:eb:b1:a8:
                    1a:b4:49:8e:26:3e:d7:75:ef:2f:2a:bc:ad:e9:41:
                    37:b2:70:73:48:42:44:aa:17:0d:77:3c:19:95:01:
                    77:b2:a2:05:87:a6:eb:8f:1d:01:1d:f8:9b:f7:7d:
                    5b:18:af:de:e0:7e:5a:ef:98:46:c9:54:44:05:c6:
                    14:80:3a:f8:84:6c:d7:32:a2:97:04:4a:57:ff:cb:
                    9e:df:52:fc:56:c0:19:2d:ec:64:f8:0f:47:54:8e:
                    f7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:93:2D:62:46:ED:5F:75:5F:C5:CB:91:3C:24:3D:6A:03:F4:A5:67
            X509v3 Authority Key Identifier:
                keyid:60:02:65:25:FD:44:A4:FC:75:B2:24:4F:80:D0:22:63:4F:5F:76:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAJlJf1EpPx1siRPgNAiY09fdjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7afb6d-a899-4bd3-8e2c-fa9233535ff1/1/YAJlJf1EpPx1siRPgNAiY09fdjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:e9:cb:5e:7c:1f:46:70:1a:69:a7:c3:bb:7e:43:15:5b:69:
         74:50:19:de:02:8f:18:47:0a:7a:31:6e:06:57:44:0d:2f:e6:
         62:64:7b:03:72:a2:aa:a4:95:ac:2b:8d:39:78:65:6d:75:6e:
         bb:2e:5a:8f:b2:a8:1f:bf:c5:a4:5e:6a:ca:d4:d7:0d:fa:af:
         06:7e:76:1c:c3:48:9e:06:2f:c0:73:dd:39:06:ea:33:68:69:
         d1:cf:06:01:33:2a:dd:23:9a:d9:bb:42:9e:f3:dd:a6:e8:08:
         73:69:97:82:b1:e8:b8:24:fc:0a:92:b1:a9:46:5a:32:52:f4:
         76:76:3c:c7:06:66:f2:e6:3e:0c:5c:4c:68:00:a1:ea:a7:d4:
         98:95:35:93:73:78:7a:86:d5:54:73:b5:ef:08:29:49:a8:69:
         ba:b4:46:0a:74:1a:77:f3:b7:d3:c9:8f:f4:a3:f6:05:89:3a:
         83:49:e7:ee:e1:71:89:35:38:a4:52:2f:39:ed:7d:44:40:eb:
         50:31:07:04:34:7f:47:48:11:89:fb:9b:0e:14:a0:f5:fa:1e:
         1f:2c:b4:31:bd:86:19:f7:6a:4a:fa:45:1b:b9:e8:8c:a5:1d:
         b4:61:7c:be:05:68:93:e1:fe:35:69:fc:a4:8d:d8:a5:ed:3a:
         f9:d3:37:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDxi8u1A7OpxJPiRWKxgSXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMDI2NTI1ZmQ0NGE0ZmM3NWIyMjQ0ZjgwZDAyMjYzNGY1
Zjc2MzUwHhcNMjYwOTMwMDkwMTA1WhcNMjYxMDAxMDkwMTA1WjAzMTEwLwYDVQQD
Eyg5MjkzMmQ2MjQ2ZWQ1Zjc1NWZjNWNiOTEzYzI0M2Q2YTAzZjRhNTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuumhJ80dkbFrgimnnCdTAOueNv0m
1sCzOJ6AUsKlVNZ87MrY9WzIY/EayrpYM9Ll/QUh2RR7e/rWnJn/UdBA1oLNJ4NG
ydwUuOkjoMezbqs+YKUXGVEzgRfeinjBO8FmLVLumAbshN933BbajtHn/s/wLyjx
h1J6QcdzzLhnlV/7Ovt38H7YSlI+5EnSLHqCococxZCYu9TFNCSzg9L7ER3rsaga
tEmOJj7Xde8vKryt6UE3snBzSEJEqhcNdzwZlQF3sqIFh6brjx0BHfib931bGK/e
4H5a75hGyVREBcYUgDr4hGzXMqKXBEpX/8ue31L8VsAZLexk+A9HVI73LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKTLWJG7V91X8XLkTwkPWoD9KVnMB8GA1UdIwQY
MBaAFGACZSX9RKT8dbIkT4DQImNPX3Y1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUFKbEpmMUVwUHgxc2lSUGdOQWlZMDlmZGpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83YWZiNmQtYTg5OS00YmQzLThlMmMt
ZmE5MjMzNTM1ZmYxLzEvWUFKbEpmMUVwUHgxc2lSUGdOQWlZMDlmZGpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi83YWZiNmQtYTg5OS00YmQzLThlMmMtZmE5MjMzNTM1ZmYx
LzEvWUFKbEpmMUVwUHgxc2lSUGdOQWlZMDlmZGpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0+nLXnwf
RnAaaafDu35DFVtpdFAZ3gKPGEcKejFuBldEDS/mYmR7A3KiqqSVrCuNOXhlbXVu
uy5aj7KoH7/FpF5qytTXDfqvBn52HMNIngYvwHPdOQbqM2hp0c8GATMq3SOa2btC
nvPdpugIc2mXgrHouCT8CpKxqUZaMlL0dnY8xwZm8uY+DFxMaACh6qfUmJU1k3N4
eobVVHO17wgpSahpurRGCnQad/O308mP9KP2BYk6g0nn7uFxiTU4pFIvOe19REDr
UDEHBDR/R0gRifubDhSg9foeHyy0Mb2GGfdqSvpFG7nojKUdtGF8vgVok+H+NWn8
pI3Ype06+dM3ng==
-----END CERTIFICATE-----
Generated at Wed Sep 30 15:13:51 2026 by rpki-client