Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
File:                     YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft (raw, json)
Hash identifier:          rD78pYIOcepiye6Gb+WSEp/gqjrMZDFPsHuy6YAuxug=
Subject key identifier:   6B:02:E8:86:F1:6D:84:B1:33:7C:91:A2:95:B6:9D:01:86:C8:DF:CC
Authority key identifier: 63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB
Certificate issuer:       /CN=63062302b438592376c4264f49dc5e673edb2cfb
Certificate serial:       01A06F4C84BB182F9BE38E1FCEBFD0DCAE18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
Manifest number:          0E24
Signing time:             Sat 05 Sep 2026 02:01:20 +0000
Manifest this update:     Sat 05 Sep 2026 02:01:20 +0000
Manifest next update:     Sun 06 Sep 2026 02:01:20 +0000
Files and hashes:         1: MIQkIHdhTszjAc1iDyqPsWr05vI.asa (hash: q47vAO9a9jNCz72lMsICdLEfl+TVo350DLcpbspUzro=)
                          2: YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl (hash: lPGzfIGUqHXvUxET2tRH+OCVctBPV27VnCuGKNorU6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:4c:84:bb:18:2f:9b:e3:8e:1f:ce:bf:d0:dc:ae:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63062302b438592376c4264f49dc5e673edb2cfb
        Validity
            Not Before: Sep  5 02:01:20 2026 GMT
            Not After : Sep  6 02:01:20 2026 GMT
        Subject: CN=6b02e886f16d84b1337c91a295b69d0186c8dfcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ce:77:52:87:a3:10:f1:a9:89:25:11:e7:89:
                    72:86:ff:ad:d3:2c:d8:24:3f:bd:55:aa:c9:2e:49:
                    f8:f4:19:e9:67:2b:cc:b8:ac:ac:2c:1b:b8:b2:8f:
                    47:b7:a9:d2:88:56:c8:fd:cb:25:3c:89:bf:7b:be:
                    cb:27:ab:c7:b2:a5:b2:4d:16:b0:6b:ef:ad:50:2b:
                    d0:87:27:c5:bc:05:9c:c1:f5:00:e4:cc:a5:78:cb:
                    b5:0f:6f:e9:23:dd:16:77:d5:88:b8:62:5c:d1:61:
                    9a:84:f8:40:39:58:7e:b0:4a:9b:14:9e:fd:bc:ea:
                    f4:ee:da:7d:76:d3:45:48:01:7c:23:3a:41:a7:18:
                    51:c5:3f:e7:35:e6:db:ec:9d:34:8d:8c:fe:27:7f:
                    de:ce:1a:15:a5:33:12:84:24:78:f7:ce:35:ec:5f:
                    a1:21:b7:8a:1f:44:8c:91:21:9a:dc:a1:c8:d0:b2:
                    d9:d4:c9:88:af:30:02:9c:93:11:6d:55:de:98:05:
                    40:97:09:07:3c:f4:6c:47:ca:aa:ec:9c:48:23:c2:
                    3f:09:4e:a0:bf:44:a8:99:05:82:8f:54:65:20:ec:
                    bf:9c:60:3b:b6:74:d6:3c:f7:5e:6e:97:ba:0c:7f:
                    11:c6:79:91:fe:93:29:9c:55:19:44:ec:eb:c9:d6:
                    0b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:02:E8:86:F1:6D:84:B1:33:7C:91:A2:95:B6:9D:01:86:C8:DF:CC
            X509v3 Authority Key Identifier:
                keyid:63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:60:f1:26:4f:a0:ca:6e:82:31:77:51:b2:ce:ca:3c:32:53:
         83:f1:53:d8:32:a0:e7:a8:a0:f8:cd:24:55:2b:fb:d1:ae:37:
         98:99:4b:d0:a9:e1:89:57:7c:a7:81:3c:40:7a:d8:c5:e7:5c:
         25:e4:c2:e1:1a:c4:d4:c1:94:f9:18:96:5a:96:8e:56:89:6b:
         6c:90:a9:9a:43:64:16:c2:62:81:a0:2d:b3:7e:82:b4:f5:c6:
         c8:80:57:45:d5:2e:4c:81:5c:01:e8:45:d4:49:b3:f0:76:69:
         8f:c1:d1:e3:d4:9f:59:b3:3f:41:e4:74:56:47:af:7c:70:29:
         39:99:a6:99:73:75:a5:30:9b:94:df:0f:7b:b5:98:77:f4:ee:
         e4:06:92:c4:70:05:79:f3:4a:9c:fa:be:b5:ce:da:7d:3a:c6:
         69:6a:e2:5d:3e:20:83:24:ce:87:a0:67:f2:2e:40:3f:1c:3e:
         79:f5:15:e0:75:d5:a5:69:f0:85:c7:40:cf:c9:22:5a:61:76:
         d4:25:45:3e:aa:32:4a:98:58:ab:86:bc:a4:92:e3:5a:2a:ab:
         43:4a:6a:85:40:38:b1:5f:31:d2:58:a8:61:d9:5a:5e:ba:8c:
         f5:f4:d7:38:8d:8d:2f:ab:7c:15:98:95:fc:54:6f:61:d7:8a:
         03:f1:88:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:30:39 2026 by rpki-client