Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File:                     y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier:          EI3A/cwvZD4DLec+NO0TYLEaeMUGq9DKNHne3+7yWfM=
Subject key identifier:   58:A0:B6:7E:9C:52:F0:D7:92:80:76:EE:C8:5D:FD:8B:09:BE:60:27
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer:       /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial:       01A06E704E7A741B09FD7BA7110EB5C63E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number:          0C4B
Signing time:             Fri 04 Sep 2026 22:00:48 +0000
Manifest this update:     Fri 04 Sep 2026 22:00:48 +0000
Manifest next update:     Sat 05 Sep 2026 22:00:48 +0000
Files and hashes:         1: Ptns1aj1-mp6wXpfkNSnzIUQg2M.roa (hash: YJhTXg15y7lXDt6el4G9uRQ6GoxJANZucXloZAXI/Mc=)
                          2: SyLOIp0kgjoWQcew30ARcomgpA8.roa (hash: tw+paFoNwVB8IkQny5dTEcgX/0463MTe3dsdhAVbLtI=)
                          3: lSJi95jp0I1-ibaWMd_zn9diC_Y.roa (hash: ODHEc3bs//C5ArR+d/PUUYKnyXgjhKhyolbB69ZsTvE=)
                          4: mGTXHUzlo8jZOHFUmBeN6FRI7Bk.roa (hash: 2bfzL2d7ZwGUW9cvd/ehAd7HuPDH/Eytzu1KccPbTks=)
                          5: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: r7EYdTyxqAX/G8BS5SHsNqJvlHfcy75tvsqjNnzwWMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:4e:7a:74:1b:09:fd:7b:a7:11:0e:b5:c6:3e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
        Validity
            Not Before: Sep  4 22:00:48 2026 GMT
            Not After : Sep  5 22:00:48 2026 GMT
        Subject: CN=58a0b67e9c52f0d7928076eec85dfd8b09be6027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:57:57:ab:29:12:99:52:8d:22:03:0d:6b:eb:
                    d5:4e:88:55:b7:4e:c7:78:24:81:94:ca:b9:a9:84:
                    86:ba:88:99:94:ba:16:3a:5a:2d:6f:0b:13:aa:29:
                    a9:9c:30:8a:72:56:60:7e:16:8b:b4:27:eb:a0:67:
                    03:85:ac:cf:a7:96:6c:bc:10:61:0e:1f:02:f2:95:
                    47:a7:ae:fb:20:f0:71:cf:3d:ed:77:c3:51:6d:9e:
                    7f:fb:b0:1c:20:66:3a:01:db:a0:19:71:ca:1a:d9:
                    be:46:3f:23:68:f1:e4:0f:4f:82:ff:67:88:fc:8b:
                    ec:6c:44:bf:aa:10:54:05:17:98:b7:c0:8f:02:bd:
                    74:b0:38:9e:9a:f1:f2:09:24:39:3c:0c:8c:45:ad:
                    1b:7c:f3:22:90:8c:0e:4e:3e:8c:d9:f3:f9:7a:ca:
                    f0:f2:88:a6:34:cb:51:6c:e7:84:d1:91:fc:db:29:
                    6b:89:05:16:9e:d0:d9:42:f7:8a:ce:84:21:56:e4:
                    ed:0f:ce:5a:cd:3f:e6:f6:4d:85:d7:cf:90:e0:9e:
                    00:ea:8e:b6:f5:45:1a:64:cb:3f:6b:3d:86:d2:b5:
                    a3:0a:67:81:34:45:11:73:e8:59:c4:87:e1:0c:00:
                    c6:e5:7b:b4:60:0d:13:21:ef:c7:14:cd:ba:4f:d7:
                    60:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A0:B6:7E:9C:52:F0:D7:92:80:76:EE:C8:5D:FD:8B:09:BE:60:27
            X509v3 Authority Key Identifier:
                keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:00:81:dc:76:0e:07:a5:1f:bd:55:25:c7:7a:b5:fb:d5:0b:
         65:2f:2a:cf:08:3a:42:52:d8:76:9d:08:ef:2f:82:f3:c5:58:
         cf:a7:8a:5c:16:8e:24:78:a8:1b:f5:a6:81:9d:b3:95:2d:92:
         8c:6b:c1:34:c0:e8:53:11:81:47:07:9a:2f:15:15:31:ef:0a:
         f2:fc:77:91:6a:73:1c:43:67:73:66:ad:84:53:03:75:e1:77:
         ba:f1:70:b6:bb:4d:30:bf:b5:eb:89:ca:ba:0f:14:7b:2b:65:
         82:3d:0d:bf:f0:f7:e5:e5:99:b9:44:d0:be:60:82:dd:88:88:
         77:4b:03:54:b9:5c:af:8a:70:0b:70:6b:3a:18:c1:8e:d9:63:
         10:30:d5:bb:9b:8d:56:61:0c:d3:32:3b:66:db:a0:61:a2:6a:
         30:01:1d:96:00:ef:f1:69:68:23:9f:d4:a8:86:94:81:bd:33:
         70:54:9c:9c:be:a4:22:6f:2c:e0:f9:d0:1d:99:a9:d6:44:6f:
         fd:a6:9b:25:23:e8:99:0f:55:db:f8:35:22:38:a0:8a:69:0a:
         c7:4d:b9:89:ed:3b:f7:e9:11:49:f6:db:18:94:6b:4e:ba:ff:
         d4:18:40:62:0e:d4:d3:bb:ff:e7:c9:f0:9f:b6:dd:4d:12:52:
         32:34:8d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:32:28 2026 by rpki-client