Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
File:                     YoO20dhhAunt8qvdqnyTR6rHF8c.mft (raw, json)
Hash identifier:          WmBodr7jQwa571TEM+NkkiGOMWgdV+Xz59/rUeqWTjI=
Subject key identifier:   8E:DB:6D:37:DA:FF:6A:D5:DD:15:F3:01:9D:0B:76:DF:EB:42:20:6B
Authority key identifier: 62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7
Certificate issuer:       /CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7
Certificate serial:       01A0D3EFA597B56AD95E3B0B0D0195F4408A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
Manifest number:          1A6F
Signing time:             Thu 24 Sep 2026 15:01:32 +0000
Manifest this update:     Thu 24 Sep 2026 15:01:32 +0000
Manifest next update:     Fri 25 Sep 2026 15:01:32 +0000
Files and hashes:         1: WinsYSv7lvXHmHSC7YQ0267ZglY.roa (hash: OvB0n9pCf/mjeiCd2Er0y4UitnwwLmsZ3xFJsXerVIY=)
                          2: YoO20dhhAunt8qvdqnyTR6rHF8c.crl (hash: hHEVqA+EMoPPPg8T//1ZWn/S7JXojpucsGTBz89JJck=)
                          3: flYk0fPODsZgJ_kgt0t_p5e4Jek.roa (hash: TPZ3Huyf7AyjT68mqQjBhrlPDV/pxjrdXJyjIrSWQ0M=)
                          4: yOwm8PAogeL-5gZQPd_Cyyg6N0I.roa (hash: vW0Vmr1vq9bGJ6Ym4MtyGJzRrkBpl9YpkjvvSpfLLRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:ef:a5:97:b5:6a:d9:5e:3b:0b:0d:01:95:f4:40:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6283b6d1d86102e9edf2abddaa7c9347aac717c7
        Validity
            Not Before: Sep 24 15:01:32 2026 GMT
            Not After : Sep 25 15:01:32 2026 GMT
        Subject: CN=8edb6d37daff6ad5dd15f3019d0b76dfeb42206b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:d6:0e:68:0c:76:40:84:28:c3:d0:8b:e6:
                    19:2a:8d:c5:94:5a:94:86:76:39:6b:10:50:27:ad:
                    43:15:75:5c:c8:97:cb:e7:7b:02:d7:f4:99:e0:f2:
                    6c:78:27:dc:6b:f7:23:e0:a4:0f:d4:d0:76:87:b8:
                    05:7c:86:c2:c9:6d:70:d2:2b:85:d4:08:9d:e6:54:
                    4b:5e:d7:f8:ce:9b:5f:23:6e:a2:f7:f9:e8:73:b3:
                    8e:54:c2:3b:97:cd:b2:14:da:38:0a:0d:26:4a:01:
                    4c:0d:7c:aa:08:95:f9:d1:08:21:fd:f7:16:df:ef:
                    ed:f6:43:f4:9a:31:7a:b6:6a:b4:c3:ec:b1:42:fd:
                    25:ac:8a:75:e1:2c:cb:e8:ef:b1:58:68:cc:07:8d:
                    06:4c:fd:19:f8:50:c8:cd:e7:32:37:73:d0:ce:8f:
                    aa:bb:15:ab:78:f6:d6:59:9f:bd:a9:0d:07:19:9d:
                    4d:3d:7c:f5:ba:5c:90:4f:7e:3a:a3:62:f4:2d:ab:
                    7f:22:90:67:27:75:4a:60:76:97:e2:ce:b0:35:79:
                    62:74:23:23:0a:ac:a1:fd:2d:c3:45:c4:ba:cc:bd:
                    89:d0:11:c1:b9:a4:96:52:c9:69:52:3d:9b:b9:86:
                    a6:6c:07:55:e2:9c:be:c5:88:19:42:c5:f6:e2:45:
                    44:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DB:6D:37:DA:FF:6A:D5:DD:15:F3:01:9D:0B:76:DF:EB:42:20:6B
            X509v3 Authority Key Identifier:
                keyid:62:83:B6:D1:D8:61:02:E9:ED:F2:AB:DD:AA:7C:93:47:AA:C7:17:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoO20dhhAunt8qvdqnyTR6rHF8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/bd4317-b9ef-4b23-80ad-914e4881eea8/1/YoO20dhhAunt8qvdqnyTR6rHF8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:1e:4b:75:06:41:dd:41:9b:ff:29:01:dc:25:f3:4e:f0:5e:
         9d:66:0e:76:eb:6c:42:e3:b6:82:cd:2b:a3:07:cc:7d:7a:f0:
         d4:a7:6a:cb:08:2a:6f:ee:48:f4:28:cb:3d:d5:c3:3e:7a:65:
         ee:ab:fb:79:91:bb:67:c7:69:70:14:dd:e5:0b:a8:32:7b:1f:
         b7:a1:32:98:b6:44:87:7d:c0:67:39:a3:ab:1b:5c:4e:41:66:
         b6:00:62:3b:0f:80:12:ff:a4:05:be:39:d5:88:bf:6b:c8:08:
         9d:b2:2a:4d:f1:62:8f:12:98:60:e8:a2:de:5d:66:e3:9f:a2:
         bf:e8:b1:06:34:24:a0:ae:a4:fd:60:e3:05:36:0c:97:83:d6:
         54:23:18:31:5b:30:95:a2:1d:13:b6:f1:7c:2e:59:82:ed:b9:
         7c:9d:2a:f3:64:86:2a:35:5c:a7:33:06:87:8b:c5:10:9a:de:
         84:48:e3:45:c7:24:93:95:8d:6c:5f:7e:62:14:5f:8b:be:1e:
         a5:8f:15:c3:d8:5c:9a:10:69:18:24:83:80:e3:39:0d:8e:69:
         51:a2:3a:72:38:b6:de:25:bc:d5:c4:e6:60:d0:1d:60:71:70:
         4f:6c:fb:25:2f:cc:4b:25:a7:7f:e1:bb:0b:a7:53:d8:6e:b4:
         ed:8f:b4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:52:59 2026 by rpki-client