Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
File:                     yZE15YfLs4vh63tt6cSAKdBF0nM.mft (raw, json)
Hash identifier:          egWsHpHv7astrN+fW4m3dr7zN+F/nxhdcLpkcf5To5M=
Subject key identifier:   3F:EB:95:03:C8:4E:75:32:55:A8:61:FC:63:21:1B:A2:8D:A4:44:23
Authority key identifier: C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73
Certificate issuer:       /CN=c99135e587cbb38be1eb7b6de9c48029d045d273
Certificate serial:       01A17D73A568882B19E6C901ABF5329201E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
Manifest number:          0819
Signing time:             Tue 27 Oct 2026 13:01:33 +0000
Manifest this update:     Tue 27 Oct 2026 13:01:33 +0000
Manifest next update:     Wed 28 Oct 2026 13:01:33 +0000
Files and hashes:         1: Y5vED9_-DcGMaaxbEGOZus8MwVQ.roa (hash: G2iq16qjDO2AmE19u6Mdnenb3I/Kvxji/seB7NO5CFY=)
                          2: gKtjzQMB06yDauEd9zVELt-Geqk.roa (hash: ON0aCx2enNugObjEPugyFFI494d+5BTaKTrArKDjsJI=)
                          3: sLC5YO5xONWk4v-wyFAtQfaIubc.roa (hash: RnXdiuhlkryBeMlrPXhg5Tc0W7BvyjnuvWyXURl030k=)
                          4: yZE15YfLs4vh63tt6cSAKdBF0nM.crl (hash: Eljg/KpRYqlyPuucWKfiWSdoZWuG8D2QDazwow9MuFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:73:a5:68:88:2b:19:e6:c9:01:ab:f5:32:92:01:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c99135e587cbb38be1eb7b6de9c48029d045d273
        Validity
            Not Before: Oct 27 13:01:33 2026 GMT
            Not After : Oct 28 13:01:33 2026 GMT
        Subject: CN=3feb9503c84e753255a861fc63211ba28da44423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:83:c3:0c:48:3e:03:19:41:f0:eb:e8:08:db:
                    7c:70:34:cf:d1:0e:aa:f8:80:c4:90:17:41:42:0a:
                    e9:87:98:ca:0d:34:c9:41:00:4f:bc:dc:34:68:f3:
                    c6:a4:03:59:9c:55:09:fa:2e:56:bb:99:6a:71:f6:
                    28:32:1b:62:32:f3:f5:1f:ed:66:41:dc:63:9b:97:
                    cc:5c:91:73:5c:86:c4:ee:ef:52:18:d8:d5:a9:3b:
                    4f:48:e6:37:bd:cd:37:fb:f8:0a:45:d0:ce:fb:24:
                    1f:4d:cf:90:6f:9f:7b:b3:e9:83:c1:04:1c:f2:ba:
                    4f:92:05:4b:36:d0:7b:c2:16:35:9d:e9:df:d2:c3:
                    dc:d8:8c:75:82:26:68:4a:39:94:b8:7a:62:06:19:
                    e2:2c:b8:57:35:a1:c3:5c:73:45:35:c5:54:56:7e:
                    60:46:48:09:1f:53:e1:7d:47:48:fa:17:fe:12:a5:
                    2f:b0:24:0e:bc:1e:60:83:54:62:a8:be:63:09:9c:
                    9c:20:28:70:14:12:91:96:4c:5b:71:6c:70:7a:9c:
                    4e:30:c5:b2:1a:3b:6c:e1:89:bf:9e:4a:c4:be:ef:
                    9e:38:02:4f:0d:65:1d:ad:b1:08:3b:eb:83:7f:eb:
                    53:0f:52:2b:8b:21:00:af:6f:14:fa:ac:80:e6:56:
                    6e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EB:95:03:C8:4E:75:32:55:A8:61:FC:63:21:1B:A2:8D:A4:44:23
            X509v3 Authority Key Identifier:
                keyid:C9:91:35:E5:87:CB:B3:8B:E1:EB:7B:6D:E9:C4:80:29:D0:45:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZE15YfLs4vh63tt6cSAKdBF0nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/30951e-a309-45c3-ba16-134d953ca093/1/yZE15YfLs4vh63tt6cSAKdBF0nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a0:c4:92:21:0c:ff:15:0a:44:b6:08:1c:6e:ab:51:a5:e7:
         1b:68:ad:bf:28:5d:aa:3a:8d:a3:1a:10:3e:81:47:29:cb:1c:
         e5:b0:09:67:ee:f3:a1:e8:55:0f:20:c4:0c:a1:cf:00:45:0f:
         7a:71:44:e6:d0:67:8d:7d:01:7e:a9:9a:4e:26:1e:e7:71:ba:
         fd:d8:4a:c3:54:d2:8e:60:2a:e3:d8:23:6e:2e:f5:f7:1b:92:
         b3:fd:62:07:02:ad:39:21:b2:00:45:c3:34:40:59:ec:b1:0f:
         21:20:13:5c:07:f1:8c:0e:80:a4:87:fb:91:73:b6:bf:b4:9f:
         e8:34:3a:a1:74:50:b4:13:c6:c3:5a:1d:a9:07:77:fb:00:36:
         1d:a8:8a:13:91:ee:eb:a0:7e:60:b1:84:cc:52:98:fa:23:27:
         08:1c:82:22:74:ea:5e:3d:de:51:63:5f:cd:9a:f3:65:ed:52:
         50:40:0c:82:32:85:3b:b5:41:b5:c1:ef:0c:e4:ab:7b:c1:f8:
         5a:b4:11:9d:ff:81:31:d4:d7:00:e3:79:af:10:80:05:dd:79:
         78:cd:7a:90:dc:07:48:1e:fe:2f:75:09:bc:8a:33:48:32:1b:
         66:e2:e0:29:1f:04:92:83:5f:9d:a5:db:eb:80:c2:6e:fd:71:
         fa:2e:38:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:33:02 2026 by rpki-client