Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
File:                     YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json)
Hash identifier:          S4s4/wAdqQjnQOL/YA23TdVde8dCtBLRDX9lJ5/1nfo=
Subject key identifier:   00:B4:32:60:F3:F4:DB:20:12:D1:2A:47:65:EA:CD:FD:13:E8:C8:B4
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Certificate issuer:       /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial:       01A11A197792B897F8D0F2C72D19EC5C4EDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
Manifest number:          1B0C
Signing time:             Thu 08 Oct 2026 06:00:38 +0000
Manifest this update:     Thu 08 Oct 2026 06:00:38 +0000
Manifest next update:     Fri 09 Oct 2026 06:00:38 +0000
Files and hashes:         1: 6Kp8Q7FDy8zVl6KS7XGPmtjTZrI.roa (hash: LSjD6nMfWSQxNszQ+KYKSl3MtwhSLODWVrEJPytMoHE=)
                          2: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: 5ERCv9gOwjOSAy+EgHEtxZzQeiBuT3IgUFQO6I8Qq+o=)
                          3: dBSDP6Gc4F0vUJietrVIlYi8x5w.roa (hash: 4uu2kwh2x9bYdXpys7yyeAfZRrt8ENd/az4lWpFmo5I=)
                          4: fRx6ZblhgUmoW4nsXZOeWFDGQN8.roa (hash: 5XgSJtsEhxAPMe27NNznGafb5NwSgPc5MwYm0JOVzkE=)
                          5: lFA8TCmOsUwcRT-IH5-xMnLIn9g.roa (hash: rLmZAKicjwEflAKkEb3bhMZ1sp7aW6UtUzE6SYNtwFo=)
                          6: pCNJAJU2R_Ey7VRPw_hxPf5bZjE.roa (hash: KbIRipx6ZRLe6wuu8/y9hOVzulQ9nb+SwsRwZvvvJjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:19:77:92:b8:97:f8:d0:f2:c7:2d:19:ec:5c:4e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
        Validity
            Not Before: Oct  8 06:00:38 2026 GMT
            Not After : Oct  9 06:00:38 2026 GMT
        Subject: CN=00b43260f3f4db2012d12a4765eacdfd13e8c8b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e8:df:be:fc:9b:18:59:72:c5:8c:7a:be:10:
                    3d:b1:72:50:54:ee:67:ac:33:3f:25:7b:78:53:54:
                    2c:ae:96:ae:2b:9a:36:a6:3a:6a:82:74:5d:9e:eb:
                    30:1a:47:76:bf:85:5c:e4:9d:5a:4e:7a:0e:f6:e6:
                    06:e7:57:e5:40:55:15:19:94:ab:90:84:72:d6:b8:
                    0b:9f:e9:78:2b:c9:5d:df:61:58:bb:f6:2c:1b:c0:
                    bb:35:e5:6d:dd:7b:6f:27:90:b9:a3:db:c8:18:1e:
                    fe:bc:fa:76:2b:06:fb:d1:85:36:52:e9:f4:1e:0e:
                    3a:69:e6:f5:68:cc:5c:2e:8a:2d:03:c4:2b:8d:58:
                    1f:6b:14:83:7c:c6:93:f4:38:11:7b:59:0f:d6:02:
                    66:25:8a:2e:b7:fc:85:72:f6:47:22:6c:db:67:22:
                    65:2d:4e:9c:0c:15:8f:67:49:59:07:03:aa:d8:e4:
                    89:78:2c:0f:36:9f:9b:a5:f6:53:8b:2c:09:54:d4:
                    aa:d1:b7:22:db:db:28:d3:f4:69:ee:95:f6:8e:ef:
                    70:30:37:aa:7c:ae:dd:65:ae:7b:d6:d1:dc:d2:2d:
                    4a:e2:d0:59:85:e5:73:80:8e:f4:f6:44:d8:9e:d4:
                    91:11:b2:ef:07:72:92:c2:59:18:82:b8:26:f1:99:
                    c8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B4:32:60:F3:F4:DB:20:12:D1:2A:47:65:EA:CD:FD:13:E8:C8:B4
            X509v3 Authority Key Identifier:
                keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:70:c7:fa:81:cc:c9:94:f1:9b:03:a1:89:86:c4:8b:87:f7:
         37:d6:4d:d8:24:73:14:8e:b9:85:e2:5f:8b:cb:52:21:59:cd:
         3e:aa:12:6c:57:7b:65:14:58:08:f3:9a:8d:c8:76:18:02:62:
         6b:80:23:63:a4:f6:30:f5:5a:b0:db:2f:06:6c:26:8c:40:af:
         41:5b:78:41:6e:e4:31:5b:c2:21:b1:f5:fd:83:0e:78:9f:8e:
         e3:09:be:fa:35:7d:03:1f:04:4d:74:24:37:f6:33:e2:3f:d0:
         35:6a:b9:bd:b7:d3:e9:c3:38:60:b6:05:99:25:2b:40:ca:29:
         26:16:3e:d3:18:79:1e:c5:f4:d6:58:a7:be:18:75:60:db:85:
         03:77:2c:39:dc:1b:a2:77:33:18:74:c5:e3:83:af:03:f8:a4:
         c4:0f:d8:b5:18:7e:f1:b3:31:b5:89:51:0d:83:e0:05:91:2a:
         d3:6e:fe:80:ab:1a:26:6b:d2:ea:45:89:66:9f:6c:c6:16:8f:
         e9:6f:70:ec:b6:d1:97:4e:da:bb:d8:68:25:73:b4:c6:00:7e:
         73:55:aa:d2:9d:ee:dc:21:96:d0:f4:46:7d:3e:ba:f9:08:94:
         d8:a9:29:29:98:18:09:0e:16:91:fd:c0:11:ae:8a:68:86:b1:
         43:1d:40:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:54:53 2026 by rpki-client