Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File:                     YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier:          /fFlrF1DbSfKYUmcha1jIzAuVBSccptPJeSUVLDvmLQ=
Subject key identifier:   E6:6A:ED:1F:E4:3D:5B:27:5B:98:5E:05:90:4D:F1:F4:D4:80:CE:EF
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer:       /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial:       01A17D3C53E23BEE3D96374AF7D563F75693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number:          12E6
Signing time:             Tue 27 Oct 2026 12:01:07 +0000
Manifest this update:     Tue 27 Oct 2026 12:01:07 +0000
Manifest next update:     Wed 28 Oct 2026 12:01:07 +0000
Files and hashes:         1: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: c8EAKw4YBXxyPu/h0Q9eG+Cd3Z5fgyIwQ9K14gfLbFo=)
                          2: buEP_tZTxcCY5cv35wHnd5QJtA4.roa (hash: kDd7vjY1Gmajtb+yM1iA4kXpv1+b295rNuhM3eEotP4=)
                          3: cu3LpBG8kS_4KP69qmFhIuC6yn0.roa (hash: +A0QFPa6rFKeurJR0BtJfs29ZpJr1qidekf5t2vt70c=)
                          4: iwCms-jh7sNOnDjyiQ87SCaskPM.roa (hash: F9m0OaxudVEa/uHDWRuOEKekT6jQQYP93RpjR2bYjX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:3c:53:e2:3b:ee:3d:96:37:4a:f7:d5:63:f7:56:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
        Validity
            Not Before: Oct 27 12:01:07 2026 GMT
            Not After : Oct 28 12:01:07 2026 GMT
        Subject: CN=e66aed1fe43d5b275b985e05904df1f4d480ceef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:54:f3:19:ac:db:e8:2e:21:c7:23:11:0d:8f:
                    37:9b:36:c4:41:83:77:9c:1e:a8:e0:05:d4:8f:1d:
                    c6:8c:b7:89:9e:3e:3c:c2:aa:61:90:94:a5:fe:6e:
                    c6:05:3c:57:7d:fa:7a:7f:a3:99:a3:a8:ce:c1:11:
                    98:37:86:36:0f:e1:24:ba:14:82:86:06:96:b2:0a:
                    eb:3c:3a:a4:70:b7:fd:6e:f5:2b:2b:0c:7a:6a:24:
                    2f:2c:71:5a:d4:93:81:59:a5:c2:5b:ec:dc:10:01:
                    78:91:82:62:10:6b:f1:95:dc:28:f3:d6:77:84:ff:
                    49:0b:9d:87:5d:ad:0f:35:30:f0:9a:fd:67:18:6d:
                    56:c0:70:67:42:69:9a:95:e9:84:98:83:45:4c:3c:
                    d2:14:70:c8:e7:12:f3:d9:73:87:9f:94:6f:5e:59:
                    78:a8:e8:5f:72:3e:a5:9b:95:37:bd:8b:fe:66:22:
                    bd:57:b7:7f:66:9b:22:c5:d6:5f:47:cb:f6:d7:21:
                    17:ba:48:9c:37:da:49:e6:75:5e:76:ee:66:14:72:
                    e6:17:90:5a:71:fc:91:a1:83:3d:f7:83:c6:d6:40:
                    83:9f:0a:50:dd:21:aa:ea:01:93:f7:ce:b3:1f:a7:
                    7f:81:8d:5a:ce:24:c4:97:b8:74:f7:35:18:87:95:
                    58:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6A:ED:1F:E4:3D:5B:27:5B:98:5E:05:90:4D:F1:F4:D4:80:CE:EF
            X509v3 Authority Key Identifier:
                keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:44:9c:9a:5f:af:43:ad:8e:db:08:65:e6:fc:24:9a:cb:e1:
         90:88:f3:26:38:c8:f4:d4:b2:00:bf:55:c5:42:19:bd:31:63:
         41:25:eb:59:d0:e8:a8:0b:e7:c6:ec:1d:40:81:bc:bd:4d:78:
         ea:5e:22:00:04:22:e8:81:13:c6:05:5f:db:17:f8:92:da:6e:
         88:c0:f5:1d:6d:24:52:09:9b:75:15:c7:05:a3:d7:e9:f2:e9:
         ed:2f:b5:99:83:cc:1d:88:58:38:16:13:c3:07:16:02:58:8e:
         9c:6c:1c:f3:53:94:1d:d0:a6:f3:bc:78:0f:cb:07:88:41:6f:
         0c:60:64:0b:b7:cd:ef:80:43:f0:d0:7d:12:89:14:64:ae:84:
         c7:71:af:17:86:89:3e:4a:20:a5:13:a5:a8:a1:8f:c3:7a:a5:
         44:e8:eb:3b:cd:e8:d2:57:dc:dd:b7:88:d0:82:62:24:ff:70:
         39:57:36:e0:3d:35:e1:b0:69:86:17:7f:d3:b3:83:d5:b3:66:
         e4:9e:0b:2f:a3:cc:a3:42:40:98:0e:6b:09:aa:24:89:53:37:
         81:8f:b2:7d:91:17:13:2c:ce:92:8a:ba:55:7c:c6:56:a9:be:
         30:73:c9:4c:83:8e:63:e1:9d:3a:b6:8a:e0:72:9e:51:3d:d8:
         e0:9d:39:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9PFPiO+49ljdK99Vj91aTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwOTBjZGQzMWQzYTcxZGExY2U0YTRiZDg1ZjE5ODdlM2Nh
NGVhZmEwHhcNMjYxMDI3MTIwMTA3WhcNMjYxMDI4MTIwMTA3WjAzMTEwLwYDVQQD
EyhlNjZhZWQxZmU0M2Q1YjI3NWI5ODVlMDU5MDRkZjFmNGQ0ODBjZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFTzGazb6C4hxyMRDY83mzbEQYN3
nB6o4AXUjx3GjLeJnj48wqphkJSl/m7GBTxXffp6f6OZo6jOwRGYN4Y2D+EkuhSC
hgaWsgrrPDqkcLf9bvUrKwx6aiQvLHFa1JOBWaXCW+zcEAF4kYJiEGvxldwo89Z3
hP9JC52HXa0PNTDwmv1nGG1WwHBnQmmalemEmINFTDzSFHDI5xLz2XOHn5RvXll4
qOhfcj6lm5U3vYv+ZiK9V7d/ZpsixdZfR8v21yEXukicN9pJ5nVedu5mFHLmF5Ba
cfyRoYM994PG1kCDnwpQ3SGq6gGT986zH6d/gY1aziTEl7h09zUYh5VYBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZq7R/kPVsnW5heBZBN8fTUgM7vMB8GA1UdIwQY
MBaAFGCQzdMdOnHaHOSkvYXxmH48pOr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wODkwMGYtYjM2MS00N2FkLTg5M2Yt
NzM1MWY4NjliNDJiLzEvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8wODkwMGYtYjM2MS00N2FkLTg5M2YtNzM1MWY4NjliNDJi
LzEvWUpETjB4MDZjZG9jNUtTOWhmR1lmanlrNnZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkScml+v
Q62O2whl5vwkmsvhkIjzJjjI9NSyAL9VxUIZvTFjQSXrWdDoqAvnxuwdQIG8vU14
6l4iAAQi6IETxgVf2xf4ktpuiMD1HW0kUgmbdRXHBaPX6fLp7S+1mYPMHYhYOBYT
wwcWAliOnGwc81OUHdCm87x4D8sHiEFvDGBkC7fN74BD8NB9EokUZK6Ex3GvF4aJ
PkogpROlqKGPw3qlROjrO83o0lfc3beI0IJiJP9wOVc24D014bBphhd/07OD1bNm
5J4LL6PMo0JAmA5rCaokiVM3gY+yfZEXEyzOkoq6VXzGVqm+MHPJTIOOY+GdOraK
4HKeUT3Y4J058Q==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:49:42 2026 by rpki-client