Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File:                     YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier:          pqYnaPrX8J3JPAa+nVYsq+FCxeV5KMCpAs+mNTyCPjY=
Subject key identifier:   82:FC:81:41:82:A2:F4:1B:42:97:D2:C5:19:14:B9:A8:A2:1E:10:B3
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer:       /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial:       01A08BD656C27E55A1CDFEB09D6948070927
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number:          1269
Signing time:             Thu 10 Sep 2026 15:01:14 +0000
Manifest this update:     Thu 10 Sep 2026 15:01:14 +0000
Manifest next update:     Fri 11 Sep 2026 15:01:14 +0000
Files and hashes:         1: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: G9e7dKpd1jMHVGPUSFTzii9u53dCW7xKkxH5oulZfQ8=)
                          2: buEP_tZTxcCY5cv35wHnd5QJtA4.roa (hash: kDd7vjY1Gmajtb+yM1iA4kXpv1+b295rNuhM3eEotP4=)
                          3: cu3LpBG8kS_4KP69qmFhIuC6yn0.roa (hash: +A0QFPa6rFKeurJR0BtJfs29ZpJr1qidekf5t2vt70c=)
                          4: iwCms-jh7sNOnDjyiQ87SCaskPM.roa (hash: F9m0OaxudVEa/uHDWRuOEKekT6jQQYP93RpjR2bYjX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d6:56:c2:7e:55:a1:cd:fe:b0:9d:69:48:07:09:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
        Validity
            Not Before: Sep 10 15:01:14 2026 GMT
            Not After : Sep 11 15:01:14 2026 GMT
        Subject: CN=82fc814182a2f41b4297d2c51914b9a8a21e10b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1c:8f:b4:d8:bf:6e:e7:9d:64:79:ba:13:b7:
                    20:de:1a:47:3a:8b:1c:b4:46:85:3c:a7:4c:b7:32:
                    49:0c:78:9f:ca:06:f4:dd:0d:de:1b:4b:6e:f5:82:
                    8c:a6:8a:63:21:7d:e4:8a:27:09:8b:38:7b:5a:d7:
                    28:05:f2:41:6b:bf:ce:d2:dd:fd:eb:4e:34:84:91:
                    47:02:7f:0d:ef:1f:ff:f0:92:f5:b6:a0:95:c1:ce:
                    54:68:3c:39:85:68:8c:c5:3a:b8:c1:5e:58:ae:5f:
                    6e:d4:98:52:a0:9b:17:23:89:b1:06:2c:4b:be:b7:
                    41:da:58:e9:40:b4:7a:80:a4:9d:dd:d4:49:d6:95:
                    9a:d8:92:0e:a5:53:c9:b8:02:28:ac:9a:58:c4:ab:
                    c0:6f:26:e4:0a:ce:e2:29:68:23:b0:87:9a:06:d8:
                    a9:4c:24:38:2e:b7:4f:47:3d:73:9e:d7:22:63:60:
                    f4:56:be:fe:dd:37:72:62:3d:20:d1:3b:f6:26:97:
                    5b:19:75:a0:b3:39:4d:b0:31:ca:74:42:43:fa:fa:
                    5d:31:a7:58:30:27:a0:26:05:8a:80:03:c6:66:4d:
                    c2:c5:94:a0:0d:0a:8d:c4:ae:13:eb:74:b5:ca:b1:
                    cb:3f:aa:26:02:8a:d6:87:e6:a2:20:b0:c6:0e:85:
                    8c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FC:81:41:82:A2:F4:1B:42:97:D2:C5:19:14:B9:A8:A2:1E:10:B3
            X509v3 Authority Key Identifier:
                keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:1e:c8:c8:43:b0:71:a9:ed:21:a2:41:5f:9b:fa:e1:6b:d4:
         1f:25:7c:10:52:c5:1c:4e:71:ad:ec:3f:2c:25:13:a7:2d:c0:
         ac:f1:60:86:e0:9a:1e:b1:ca:e7:3a:6d:b6:a3:94:79:ec:aa:
         5c:91:fa:6b:35:19:e6:bc:55:87:fd:06:4e:95:86:04:25:fb:
         4c:50:2a:69:9d:3a:c1:de:98:c8:d0:14:ac:d2:13:46:b7:f4:
         8c:26:6f:14:7a:b5:fb:61:fb:eb:0c:90:80:06:c8:9c:ea:43:
         3a:35:a5:60:5e:dc:a9:03:6c:bb:33:61:a7:64:35:25:f7:78:
         4b:5a:36:4f:13:e2:83:60:44:7e:d8:a7:2f:a5:52:78:41:78:
         76:67:a7:ac:3e:9a:1d:ca:02:f9:a4:04:aa:ae:ce:1a:b0:ce:
         95:33:66:c6:c3:47:ea:99:2d:88:98:cb:49:03:0b:6d:93:bf:
         a6:4b:7d:11:87:8c:30:58:ab:21:89:38:22:76:ba:e5:ca:8b:
         0a:5b:f2:62:44:c6:ef:41:06:18:82:8f:24:95:4a:35:d8:c9:
         97:83:8c:b9:15:65:72:ae:57:44:a1:be:15:c3:57:36:00:c6:
         56:19:6b:56:61:4d:03:0d:3c:d4:9e:f6:33:e1:d6:b0:c2:c8:
         fc:58:58:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:05:29 2026 by rpki-client