Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
File:                     YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json)
Hash identifier:          lWkJrxgKXyIw4D/5Pzgwf/I8y7fsX8hLnJ57ggWWeHo=
Subject key identifier:   F1:C0:F1:B5:2F:49:67:76:38:50:59:CE:4C:F1:A0:2C:89:A9:C2:B1
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Certificate issuer:       /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial:       01A104A53488661BBFFD69F9EE3556B5EB23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
Manifest number:          1A9C
Signing time:             Sun 04 Oct 2026 02:01:37 +0000
Manifest this update:     Sun 04 Oct 2026 02:01:37 +0000
Manifest next update:     Mon 05 Oct 2026 02:01:37 +0000
Files and hashes:         1: 2v3v91RFQjN6l9mWptJO680RMkc.roa (hash: JpKAIgf5dUOG27b3V6ypmirRGf/czS7D9Bc0AguM208=)
                          2: 7eIzHvINnFqHZBOWvru0J6FjDb8.roa (hash: Dv2FZyAGPdsQN62gOmL7jMpfdjwxeMKFTL1oAf/BKfc=)
                          3: Pw-Xbx-fd_nGa-aW9QVLLMGC8dk.roa (hash: 3F6mzRTDsqLi9XQZrpR35u3u1uvU+/gi5C4g1Sy4VTE=)
                          4: UsJrUy2UuzGGDnQa-en_vet84IU.roa (hash: anygphX/NHAj2pg72RtTsBDk/dlZBM2mWyxRgOxxXzo=)
                          5: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: bIVoRfc8hEKGSo5FzxICF3wxLnPK8melt8qnPvVkm0g=)
                          6: o2wMPqpUwKK3k92hqD5HvK3oiiI.roa (hash: 0YGmH3GBpSNDcIwjVr7t8Bv7qy4ZPt0Vk2HKaZcbgtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 02:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:a5:34:88:66:1b:bf:fd:69:f9:ee:35:56:b5:eb:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
        Validity
            Not Before: Oct  4 02:01:37 2026 GMT
            Not After : Oct  5 02:01:37 2026 GMT
        Subject: CN=f1c0f1b52f496776385059ce4cf1a02c89a9c2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:de:32:c9:5a:ca:31:3d:95:8a:ff:88:1e:97:
                    a1:43:d9:f7:08:b8:23:dd:df:2a:d1:b3:8b:86:18:
                    1a:39:b5:46:28:f7:93:fa:2b:ae:ff:6e:39:2a:4d:
                    11:1e:cc:93:1b:f0:2b:15:3c:15:7b:b6:c1:d4:3d:
                    b8:43:bc:5c:e7:ca:63:61:bf:3b:a8:41:0a:32:42:
                    15:57:db:9c:25:9c:f0:db:17:ba:ac:70:a6:cd:58:
                    9e:f5:01:f2:dd:6e:dc:4d:da:94:eb:2d:1f:27:59:
                    f2:8c:63:8a:6d:9d:04:3d:09:e6:4a:80:29:a6:02:
                    b5:91:0f:00:79:50:55:8f:6c:50:ab:3f:08:7e:66:
                    e5:c5:ea:a5:6c:1d:01:0a:b6:ae:e2:56:4b:e5:86:
                    cf:8d:ee:24:da:bb:34:91:74:1f:6e:e8:eb:80:17:
                    b7:57:3a:fc:84:17:da:fb:08:31:3c:46:f7:5a:e5:
                    40:85:cd:aa:11:60:86:05:40:d5:86:2c:0d:18:d2:
                    f4:c1:60:03:63:3d:a7:e4:ce:aa:6d:3c:23:f8:69:
                    28:df:db:01:e3:77:66:0f:1d:c7:84:37:ee:c9:bd:
                    96:22:54:35:5f:5c:a8:d9:81:de:57:12:f1:9f:fb:
                    05:07:13:46:a6:b3:61:a5:e7:e9:5b:df:15:86:0d:
                    98:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C0:F1:B5:2F:49:67:76:38:50:59:CE:4C:F1:A0:2C:89:A9:C2:B1
            X509v3 Authority Key Identifier:
                keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a5:92:07:6b:bb:04:ba:0b:95:27:07:04:11:5e:0e:96:a8:
         4a:60:b8:79:35:11:b1:e0:f1:c6:03:db:48:2c:cd:37:29:52:
         6e:40:f3:f5:e1:a0:7b:5b:fb:dd:11:f7:9b:c8:85:25:ce:46:
         74:2f:ef:0d:69:f9:10:af:61:39:a0:b9:29:f2:95:bb:17:57:
         82:3c:e9:5e:5e:05:bc:4d:2e:04:5d:cf:11:97:6c:1c:36:ff:
         84:c4:71:b0:bf:88:58:96:be:8a:b3:aa:9e:1f:87:c9:ff:c2:
         56:b7:34:5f:b3:5a:33:d7:4b:32:97:cf:a8:1d:3a:a5:03:65:
         40:86:22:02:60:9c:5b:1f:24:63:e2:89:7a:12:8f:79:dd:39:
         c3:78:d1:c6:83:89:ac:35:a8:dd:fc:25:6a:ae:fa:57:3d:65:
         8d:af:3c:5f:3f:70:0b:8a:d8:e9:32:66:68:ec:01:e5:aa:a2:
         ae:da:53:90:2c:b5:25:33:f4:66:5e:96:96:55:76:b2:61:08:
         93:e2:e6:12:2b:85:11:39:98:c0:01:03:57:f8:54:31:c7:01:
         ea:1b:8e:b4:3d:df:d0:34:0f:e0:57:e6:d3:b2:86:9c:61:e0:
         a8:f8:fd:20:af:a1:ce:19:c3:d1:d3:69:cd:29:41:82:1a:1e:
         ef:20:c8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:56:47 2026 by rpki-client