Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
File:                     ycAtQjT0vE6HVV5BwDd51WIKUVU.mft (raw, json)
Hash identifier:          o+cEz2uvkFYVyUIE+A5L/Xya5uXi6fpxbJt5EI2KZO4=
Subject key identifier:   0A:81:9B:95:AF:1E:51:31:60:AD:15:EC:06:0C:14:F4:7A:CD:4E:45
Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
Certificate issuer:       /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Certificate serial:       01A002EF4B18E2D1DCC5DE08FFA8305F3D35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
Manifest number:          0C88
Signing time:             Sat 15 Aug 2026 01:00:31 +0000
Manifest this update:     Sat 15 Aug 2026 01:00:31 +0000
Manifest next update:     Sun 16 Aug 2026 01:00:31 +0000
Files and hashes:         1: FMQ4xU5rGzBy9XfN6xkHNPPuK2w.roa (hash: VpW8Q4PIVbHWidRFeTd9pn+aHZWxpeF2VrUK329P7b4=)
                          2: OJY6iE54MT93V4GP2ZSvbOq5K4Y.roa (hash: 4QTAC5eFNbrr/GKOsA3KxkrPE1SA8Il65VwGfi0JgLQ=)
                          3: sP3xxrP16BVYtRejuodDQfjDjnY.roa (hash: rhdnZt+TyfSBG9e9GLDjxat3cDe+UxxerHxAqaJJWko=)
                          4: ycAtQjT0vE6HVV5BwDd51WIKUVU.crl (hash: jwPT71sjkrVxcuOzVsvI2zbWsXjFq83518YYtJGI+Nk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:ef:4b:18:e2:d1:dc:c5:de:08:ff:a8:30:5f:3d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
        Validity
            Not Before: Aug 15 01:00:31 2026 GMT
            Not After : Aug 16 01:00:31 2026 GMT
        Subject: CN=0a819b95af1e513160ad15ec060c14f47acd4e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:4e:af:74:d6:48:85:de:92:5b:cf:d4:b3:
                    af:8e:a9:d8:ed:44:7e:dd:1f:25:91:da:1b:1c:4c:
                    98:fc:a4:ae:00:3c:32:58:81:4c:6e:62:a1:71:82:
                    af:8e:21:e5:30:6a:fd:93:c0:f5:56:76:de:22:bf:
                    a8:98:c5:81:71:a4:15:0d:80:f6:99:eb:7c:93:9f:
                    85:46:fd:2b:f3:aa:5c:da:14:43:3d:df:f0:ec:6c:
                    d4:79:ba:26:ca:2e:d5:5d:a1:ed:19:75:5a:b1:20:
                    1e:3d:8d:57:59:f1:82:98:7a:57:83:cb:6c:4e:8d:
                    90:10:37:5f:8e:1e:45:f4:0e:86:d0:44:b6:b6:26:
                    73:b3:8b:d3:6b:5f:f9:d7:9a:ea:ce:a2:7a:1e:cf:
                    1b:26:ec:aa:ee:c3:b8:f7:66:80:b8:46:07:25:36:
                    54:c7:74:53:18:57:1b:84:a5:76:f0:ff:93:b6:6d:
                    bf:e1:f1:de:3e:26:64:81:2b:d2:fd:0c:45:07:81:
                    dc:2f:08:18:e1:f2:ba:ae:ea:5d:f2:40:2d:7b:0e:
                    49:9c:aa:64:65:45:49:8a:35:44:36:6a:d4:4b:12:
                    b2:d1:10:fd:d2:b2:eb:b4:a4:86:7a:c8:2a:b8:e4:
                    e0:30:b3:b2:d0:05:de:4e:72:94:68:74:a6:58:58:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:81:9B:95:AF:1E:51:31:60:AD:15:EC:06:0C:14:F4:7A:CD:4E:45
            X509v3 Authority Key Identifier:
                keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:50:f6:ab:fd:d5:6e:fb:cc:6b:c7:59:2f:e2:5c:26:c4:36:
         53:a6:c7:ac:be:79:f6:f7:81:cc:d7:eb:3f:2c:b6:39:31:e0:
         cf:20:8a:1c:64:eb:49:8f:c9:2b:6b:85:b0:51:63:9e:e5:d1:
         eb:28:0e:f7:f6:f4:40:24:e1:0e:bd:b5:34:1b:3a:b1:54:1d:
         47:e1:97:4f:73:a0:96:c1:4e:6c:43:79:a1:23:0c:b1:b8:3e:
         98:34:3a:ad:c1:7b:c7:b8:e0:49:b8:b1:80:0d:75:ae:69:39:
         59:09:13:04:64:4e:6c:a0:d2:09:29:45:53:f7:5e:81:8a:c8:
         35:06:6f:51:f8:2a:bd:77:82:98:1e:90:f6:91:bb:66:f6:6a:
         8c:e9:0f:fd:c1:61:7f:db:fc:fa:bc:bf:0d:e9:96:a0:d6:a0:
         54:3a:2c:e3:f4:5e:eb:f4:61:21:ed:aa:74:49:4d:a8:fe:48:
         b7:43:22:54:3d:70:b9:39:cf:95:e5:83:5d:36:83:26:02:36:
         af:8e:d8:58:1a:ae:a4:31:7e:a2:07:e3:a3:f8:b7:dd:96:da:
         d2:a9:3e:06:ba:3c:01:f0:d3:17:22:3a:48:6c:91:d7:e2:48:
         09:01:90:8c:b3:fa:76:2d:91:5c:2f:c7:cb:36:1f:2f:a1:fb:
         f7:fe:3f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:30:01 2026 by rpki-client