Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
File:                     YWFHDTm-S6LdXfj6R7FjlieOZwo.mft (raw, json)
Hash identifier:          GuB56XaIEEI1N5HPl2SbEa0xyd70tqPApLMLD68vl+I=
Subject key identifier:   CC:E9:BE:24:1B:E0:BA:08:D4:48:C3:76:B1:89:35:63:D5:57:6E:75
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Certificate issuer:       /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial:       01A17D05751FE8D3922F4496B44DCDC377F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
Manifest number:          1680
Signing time:             Tue 27 Oct 2026 11:01:11 +0000
Manifest this update:     Tue 27 Oct 2026 11:01:11 +0000
Manifest next update:     Wed 28 Oct 2026 11:01:11 +0000
Files and hashes:         1: A2edUifbSShzdJ1Gis-SqBKDNH4.roa (hash: Vy37s5YBxFgEPmxrlCq+GM34iA4Ip0Oc6gKZuBhegNc=)
                          2: BPuWk6CfIovuR0hN4ab9_Vg8fpM.roa (hash: Io/zg3oPjnrBQRK8TUjjHMBbPc/oa9KH3Wg0gDqsd6M=)
                          3: CMj-58s7HjFJfPYnqyY_H8iMras.roa (hash: l/VgtwLP67EeRyfmCVyIdNqgvDzJvQY/H0EIMqQ+RF0=)
                          4: LYaVyURA1Hqer0FhBdoqEAlltug.roa (hash: NWGVsZzZidWUl0MNChqOvov8kyqJB0zTJQ1HSXjGZw4=)
                          5: MFBUVUGoLTFb6mMUZK00McW_7z0.roa (hash: F53ezXG/M5tdcqiYCNPbO7yVUwgcKU5OMRV7nr04e3o=)
                          6: YWFHDTm-S6LdXfj6R7FjlieOZwo.crl (hash: JKOHTs2Xsf1UoB+gY/aoN1MYwr5xCJjGbf7BFf/q8uw=)
                          7: kjQiljeUwEx-0O3qxw80JEcNHTk.roa (hash: Nj75u7cki0A+yVZeLl5QIeG1w+agzNtRDNjOCJHZFpc=)
                          8: m4DpurF7pXpEMEv3x379sHsIzI0.roa (hash: AQ+Y/OhWDwIEf3fur9MU0/7BD96QO4hZo7G0csSPbMo=)
                          9: qaLHn37xtjw3qy4avBKJZx30pG8.roa (hash: 37z1vS8oU1I2E/gSNbcyl0yQyKdvAVXffCULUq/vHIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 11:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:05:75:1f:e8:d3:92:2f:44:96:b4:4d:cd:c3:77:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
        Validity
            Not Before: Oct 27 11:01:11 2026 GMT
            Not After : Oct 28 11:01:11 2026 GMT
        Subject: CN=cce9be241be0ba08d448c376b1893563d5576e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6f:cc:90:23:e3:35:01:b7:88:4a:98:0d:20:
                    99:d1:6f:ae:e5:bc:66:14:fe:c5:ad:33:09:b9:84:
                    4f:e2:29:42:a1:37:f0:a6:a8:e9:bb:92:01:76:e2:
                    70:29:1e:80:68:8c:48:c6:0f:31:3a:c4:10:9d:d1:
                    a2:52:44:73:00:1b:84:f2:d9:5d:5c:ef:a3:7a:5b:
                    ef:7a:fb:7a:70:2a:ec:97:5a:66:05:40:aa:18:ca:
                    db:0c:80:31:fe:5f:a5:24:5e:04:d1:23:a2:d1:83:
                    a9:15:4a:0a:a9:bf:f9:c7:d4:d4:7c:59:cb:fc:9e:
                    c1:1d:ea:ec:b3:ac:0d:46:1e:bd:5c:63:c1:e2:d2:
                    37:af:80:51:89:43:41:0f:19:dd:78:0f:c1:e8:f6:
                    6a:a4:20:00:50:47:62:1e:4d:5e:dc:c5:63:53:c5:
                    01:26:eb:94:53:f6:93:f0:0b:44:94:2d:dd:5b:42:
                    02:8d:00:0c:5d:57:db:71:29:ec:0d:53:2c:c8:b6:
                    a7:f0:46:74:d1:6f:51:fd:2e:16:76:28:7c:c4:eb:
                    8f:13:22:be:10:08:10:03:c2:a7:cc:45:e4:21:64:
                    02:12:66:64:16:58:6e:02:e7:34:9d:ac:74:1b:27:
                    1b:4b:17:2a:30:fc:d2:b0:45:32:12:13:a9:b8:70:
                    b8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E9:BE:24:1B:E0:BA:08:D4:48:C3:76:B1:89:35:63:D5:57:6E:75
            X509v3 Authority Key Identifier:
                keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:18:46:d4:b7:61:65:d3:95:b4:b4:29:57:bb:be:89:92:c8:
         6b:0e:74:03:7a:55:de:18:d1:b4:e0:d2:f0:70:b6:44:e9:b7:
         f7:85:6c:01:5d:ff:06:0f:f6:f6:e4:87:c3:74:25:a0:15:1a:
         d7:a1:8e:5f:e2:9b:f2:52:e1:c2:ff:d9:07:de:f7:a8:07:94:
         7e:6a:71:15:b1:ed:74:66:f5:26:1a:d7:54:cf:82:4f:cc:3d:
         0b:3d:15:82:fb:f9:b9:8f:bc:ae:7c:6d:ff:0f:84:d8:32:e5:
         d3:69:04:25:47:9c:1f:32:88:82:f6:a6:50:12:79:d9:24:27:
         91:3a:35:7b:75:3e:e4:8f:d0:74:23:75:b0:9a:af:45:c8:50:
         bc:01:46:96:80:92:32:ce:e0:e4:fc:cf:1d:1e:ac:50:6d:e3:
         57:44:8c:35:de:93:93:c2:3e:2c:0f:ab:52:9d:68:4f:f3:7c:
         16:38:87:4c:5e:dc:a0:08:c3:45:78:79:f3:23:e3:7c:6b:91:
         cb:6e:87:cb:e7:03:09:9b:4b:fd:ff:8d:14:fb:27:f1:7d:64:
         35:2a:ef:01:a9:9a:b9:d3:38:aa:3d:47:08:e1:15:91:e5:4b:
         cc:b2:e1:ac:0c:71:e6:b3:21:ca:72:b7:57:1c:e3:70:4d:df:
         f4:7a:aa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:20:00 2026 by rpki-client