Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File:                     Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier:          Ad4NV+oukrBrQ/3iZUP3zStRTybrYqI0ixRaH39c3sY=
Subject key identifier:   8F:C5:B9:C5:24:FE:98:EB:B4:F1:CB:81:0A:15:0F:78:79:68:8B:36
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer:       /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial:       01A129FA852E0603B4B4D7907CDDF0CD3C32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number:          0B13
Signing time:             Sun 11 Oct 2026 08:00:46 +0000
Manifest this update:     Sun 11 Oct 2026 08:00:46 +0000
Manifest next update:     Mon 12 Oct 2026 08:00:46 +0000
Files and hashes:         1: Qt9b8eH_026x-QvzB2v7OUwPKW0.roa (hash: giCqVfLyiuosSKyEoDq9V/ttZpO9E78wjOrOmrwG9Bk=)
                          2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: /PTYSQ+La5rI111lhKWTV/ZY8SqbDhK7YAZA9h24Ui8=)
                          3: ctKt52Vn_3gdSjgBKmq9nexMId8.roa (hash: pa3+uZW+zhlAA0AIlYODpGm1QI32hEM/nvyibDrAp2k=)
                          4: sPmbni1thag-ZD5GoxURFag1BBI.roa (hash: Dq8w0CYzzjZDzQmeXPiHvVGWoSFBohmUWKdrqWUCd28=)
                          5: vBJuwGaliB1wpV7hStwLSnTiWLg.roa (hash: 53iv+46+n24h5x2j6OcqjQhtxXwivIsgJDxIfIoHYag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:fa:85:2e:06:03:b4:b4:d7:90:7c:dd:f0:cd:3c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
        Validity
            Not Before: Oct 11 08:00:46 2026 GMT
            Not After : Oct 12 08:00:46 2026 GMT
        Subject: CN=8fc5b9c524fe98ebb4f1cb810a150f7879688b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1a:35:32:66:2f:b2:a3:7d:94:af:5d:3d:37:
                    66:45:58:ea:ff:bb:5d:ad:3c:da:51:d0:d9:89:73:
                    25:c4:a7:6a:32:ca:cb:9f:7e:7f:38:23:a9:e2:52:
                    af:7c:79:04:15:3d:0c:a1:65:3a:76:70:90:82:4f:
                    7e:14:61:ca:76:b2:61:16:4e:2d:1d:a3:15:65:a0:
                    01:5a:48:e5:8a:0f:fe:d4:7a:d3:86:59:ff:ee:c8:
                    fe:a4:fa:8a:8a:3f:e8:ac:d7:32:a3:9f:90:28:a2:
                    36:8c:ec:8f:25:7a:53:d2:e4:5e:97:e6:32:08:d0:
                    d2:63:3a:59:17:6d:90:4e:80:18:1b:8a:36:64:ab:
                    77:42:f0:14:52:31:39:ad:88:9c:5b:fc:51:89:5a:
                    2b:be:45:72:98:6a:a3:79:d5:d9:81:b1:b4:9b:fd:
                    a5:8f:b8:59:6e:3e:8d:b0:9f:84:72:6f:aa:ad:87:
                    d3:5f:f0:be:4e:b6:9f:0e:86:64:a0:f1:c1:63:ce:
                    c7:e4:5a:be:df:9e:c4:b7:61:9b:40:bc:52:b4:5a:
                    e2:55:71:9c:6e:7c:06:d8:51:3b:fd:8b:eb:d3:8b:
                    8f:e2:92:66:01:ed:65:08:82:d2:9d:50:df:d0:ce:
                    3f:67:13:0d:9b:3e:39:83:6e:a9:1e:f8:ec:f3:68:
                    46:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C5:B9:C5:24:FE:98:EB:B4:F1:CB:81:0A:15:0F:78:79:68:8B:36
            X509v3 Authority Key Identifier:
                keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:73:23:02:6e:3e:fe:ba:2e:58:00:c1:19:0f:3a:e8:b5:e0:
         92:89:8f:1e:13:ee:78:cc:e8:7b:09:b4:d6:59:c3:b7:6a:4e:
         a7:a6:ad:7a:01:1e:56:bb:ae:a9:ed:5e:c2:13:c4:21:55:b9:
         3e:52:0e:fe:30:a3:ac:f4:b1:77:c0:e3:32:88:49:d4:e1:a2:
         c7:18:75:7d:72:72:ce:f9:7b:0b:b5:d3:d8:75:d4:88:a2:e4:
         78:8a:33:15:f4:71:29:db:8e:45:2e:f0:83:a2:6d:b3:fd:c9:
         eb:94:1b:bb:fe:fb:db:74:db:ea:08:09:7e:dc:69:ba:51:a8:
         44:2f:ad:c6:d0:66:77:1b:94:bc:9f:66:20:1b:c9:c5:7d:ef:
         97:8a:0c:79:e5:2b:cd:ef:46:f9:34:e1:8b:eb:42:41:6b:e3:
         f0:d9:42:c7:1c:98:75:29:54:82:ed:26:94:c1:21:90:f6:b8:
         0f:72:32:77:a7:0c:59:75:94:32:77:0a:0d:62:4d:01:76:88:
         05:56:e3:e7:26:45:11:b1:f7:2e:bf:9f:9b:8e:93:ce:e9:46:
         7a:ca:40:87:2a:58:1d:0c:54:f1:5a:7f:ed:60:c3:e2:cf:c8:
         2c:e1:ee:60:c5:76:7f:4f:7d:ea:f2:42:d2:3c:30:ca:3e:4a:
         26:4f:90:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:32:10 2026 by rpki-client