Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
File:                     yFEG2q06lz_emJFPfMHM012Mw8M.mft (raw, json)
Hash identifier:          TykXs81YX9NOoc6mVDbTYnug/OA735jNbM7uxeeTmkU=
Subject key identifier:   1E:57:90:39:84:1C:EB:D8:9C:FA:47:72:83:A3:55:35:7E:57:CB:54
Authority key identifier: C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3
Certificate issuer:       /CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
Certificate serial:       01A18C0A6CE5618F4911782F9B6DF983DE09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
Manifest number:          1AD0
Signing time:             Fri 30 Oct 2026 09:00:55 +0000
Manifest this update:     Fri 30 Oct 2026 09:00:55 +0000
Manifest next update:     Sat 31 Oct 2026 09:00:55 +0000
Files and hashes:         1: 9-N6pNClbD9TW9GB1CAgMdzr4Tk.roa (hash: 5ZEJ2hAJfJWVHDDR0yYyaLfl4wYzvQGgrMUVflW8yik=)
                          2: yFEG2q06lz_emJFPfMHM012Mw8M.crl (hash: 8Qr6UVQdijUCFfIxBYEX8+mVZ/IcqqemWKAPZeYZABY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8c:0a:6c:e5:61:8f:49:11:78:2f:9b:6d:f9:83:de:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85106daad3a973fde98914f7cc1ccd35d8cc3c3
        Validity
            Not Before: Oct 30 09:00:55 2026 GMT
            Not After : Oct 31 09:00:55 2026 GMT
        Subject: CN=1e579039841cebd89cfa477283a355357e57cb54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5e:1a:1e:c7:c9:f1:bc:45:3d:e0:9e:b2:ba:
                    b8:22:4d:9f:54:72:19:3f:98:6d:00:1c:e7:d4:3f:
                    b6:db:12:64:92:f8:ea:8e:c4:5b:07:21:90:64:73:
                    80:90:0b:8f:bf:5b:ef:4b:c0:73:a4:a3:83:c0:b9:
                    ca:d5:ba:b3:45:22:c6:70:38:d7:7e:97:be:8b:40:
                    15:0b:19:35:29:77:ec:5f:da:64:92:58:10:d7:9f:
                    d6:6b:ec:93:76:cc:a1:79:6f:e6:45:7d:a9:60:e7:
                    55:77:d9:91:96:a5:91:09:50:5f:1d:f1:9f:71:d2:
                    c4:df:cb:d0:c7:52:11:8f:70:8a:94:a5:9c:28:51:
                    9e:5e:29:a9:76:33:9f:c3:a6:04:9f:49:50:1e:06:
                    00:29:6f:5d:48:be:f8:b4:6b:9b:7f:21:f8:b1:36:
                    2b:ea:17:7f:e4:27:45:48:12:25:70:99:9a:32:68:
                    44:93:b9:14:78:1b:5b:cb:2f:5a:8b:e9:3d:5a:97:
                    9f:92:dc:2a:9c:7e:59:6e:bc:4b:9e:57:a0:01:90:
                    5b:f6:ea:eb:71:f0:d4:02:5a:57:50:51:4e:ae:3e:
                    7c:1f:7b:0e:ea:32:68:14:c5:9f:f6:ee:90:22:22:
                    fe:80:57:04:2b:da:d3:93:7f:93:48:ee:3c:29:0a:
                    34:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:57:90:39:84:1C:EB:D8:9C:FA:47:72:83:A3:55:35:7E:57:CB:54
            X509v3 Authority Key Identifier:
                keyid:C8:51:06:DA:AD:3A:97:3F:DE:98:91:4F:7C:C1:CC:D3:5D:8C:C3:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFEG2q06lz_emJFPfMHM012Mw8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c88bb-44dc-4f08-beee-fef48712acab/1/yFEG2q06lz_emJFPfMHM012Mw8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:19:ae:6a:71:f3:ba:3d:21:90:58:41:24:78:8a:d6:ae:4a:
         76:a3:03:e1:3d:3c:87:95:7e:2e:16:ed:0d:d5:91:ab:a2:1e:
         03:73:32:d0:4f:ed:91:8c:08:e0:16:cb:8d:9a:1e:f3:42:27:
         57:48:ca:41:a6:ba:ac:fd:f6:b7:12:3a:a5:57:e8:51:69:0f:
         a3:b6:1b:36:8e:c8:23:36:42:41:cf:3d:b4:27:8d:9a:3a:b8:
         76:96:9c:4b:f4:b0:82:ac:76:96:5f:6a:ca:8a:8c:a9:05:3a:
         bf:f3:0e:e1:60:5f:08:08:5f:d2:11:f3:ee:d8:79:ca:45:c8:
         5b:40:3e:a6:38:f5:dc:85:e0:f2:36:58:79:f9:57:5e:d0:b0:
         f4:e1:1a:0a:db:15:80:9c:7b:42:7c:8a:d1:b6:f9:5a:dd:25:
         98:c7:eb:43:75:4e:23:5d:ab:da:54:34:df:63:59:2c:b4:56:
         67:e3:62:57:96:7a:40:4b:ea:29:46:80:cf:c5:70:69:8f:de:
         18:b3:64:95:de:e3:e1:67:5d:51:68:06:30:ae:b9:7d:36:16:
         d9:3a:d4:2d:95:63:8b:77:3f:68:0b:bc:f8:52:8a:fb:38:14:
         e7:d4:4b:9b:8a:16:97:e2:e3:38:85:e2:eb:61:c6:e2:a5:3b:
         4a:02:1d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:07:52 2026 by rpki-client