Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
File:                     Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft (raw, json)
Hash identifier:          AWLtSnwkNItSc5EThMxlBw876/9PiTVVhnG1K0TTB8A=
Subject key identifier:   F9:11:CB:82:71:0F:5F:9D:C8:96:9C:4B:41:3B:09:E5:F0:4A:11:AB
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Certificate issuer:       /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial:       01A110A91129C6F8A0C229430075A1E4F5AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
Manifest number:          0C49
Signing time:             Tue 06 Oct 2026 10:01:17 +0000
Manifest this update:     Tue 06 Oct 2026 10:01:17 +0000
Manifest next update:     Wed 07 Oct 2026 10:01:17 +0000
Files and hashes:         1: 8iuryml04fmZQZih2yKLkb78hW8.roa (hash: dl916czGPtggSTrDPjUVhqgnNmY5i/HKL0IVfwG6bUw=)
                          2: AJEm0tpZ80PX3AOqTJlJZLLFZRo.roa (hash: 9niTFrHFWmF03337Z/JCr6D2zR0zYQdhet735YBvLGg=)
                          3: IzHBf-6JQHYiq0mQaX9LNODSrgY.roa (hash: QyUgoGmd9TYlb5SKtNXg1Y50O2LoAn5N5cOAKeGh974=)
                          4: Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl (hash: ujLINEOl3s/f0WnZtNnijpLNIKbm2nErPzWXldEKidM=)
                          5: asMbjhi5n7R-4d1-brs9UkGUZm8.roa (hash: cmHCUp+gfJvKd0Y0CWwhr4SU5hBfJ/pd//G9MmHNJ9M=)
                          6: ccp8zm5l48CBMMmzIGnalUun-Ds.roa (hash: z44haiNc9m8K5F7QSyFq2IsEkays9vJP4wkOIVQCjsw=)
                          7: cg2x230-3Iq3Js9h5EnAAX7JARE.roa (hash: tnyzdBnOYXcXrLiFFvC1x//NGKCuvkSWE98rCps7Sxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:a9:11:29:c6:f8:a0:c2:29:43:00:75:a1:e4:f5:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
        Validity
            Not Before: Oct  6 10:01:17 2026 GMT
            Not After : Oct  7 10:01:17 2026 GMT
        Subject: CN=f911cb82710f5f9dc8969c4b413b09e5f04a11ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:31:32:a7:46:8c:e8:f0:be:29:fe:73:82:
                    4b:75:34:9d:f0:48:14:85:8e:d2:1e:7f:2b:97:1f:
                    df:6d:22:84:bf:e4:91:ed:d6:a5:74:d0:4a:d2:68:
                    3a:88:32:db:28:7d:46:e4:c7:14:31:14:d9:ea:31:
                    c4:f8:dc:11:f9:54:6f:39:e9:be:08:e3:9d:23:70:
                    d4:3e:40:b1:0a:95:f0:0c:fc:5c:79:60:6f:72:7c:
                    93:96:ec:bc:f5:b6:15:70:ad:b2:04:22:5e:81:81:
                    59:9d:52:c6:26:b7:7a:0d:4b:dc:83:30:0f:39:dd:
                    0d:79:6a:5e:d5:eb:48:3d:54:0d:b9:c0:45:d7:2f:
                    4c:0b:91:e3:ef:3b:cf:5a:d0:1b:7a:73:e2:65:33:
                    49:61:7a:02:03:18:54:f4:44:67:e2:6d:c7:cd:b3:
                    7c:94:54:c9:af:3f:df:05:ae:b5:d9:f0:0b:bd:8d:
                    fd:be:31:36:30:08:8f:cf:d7:bc:89:54:0b:79:d0:
                    f2:91:53:ce:c2:cd:2f:06:27:30:e4:39:66:a5:94:
                    12:3c:5e:e6:7c:98:44:69:1e:34:d0:5a:40:db:1a:
                    84:08:91:73:52:fe:b5:16:b2:5a:ee:70:35:1f:9b:
                    ea:94:fb:95:ed:3f:e1:52:b1:e4:29:eb:b2:ed:3f:
                    3d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:11:CB:82:71:0F:5F:9D:C8:96:9C:4B:41:3B:09:E5:F0:4A:11:AB
            X509v3 Authority Key Identifier:
                keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:06:02:b5:b9:4e:93:4e:f3:1f:f8:28:c1:6a:f1:b9:69:e9:
         13:b8:59:23:07:70:08:ae:12:24:d8:ae:0e:5f:7d:2f:e6:19:
         bd:19:8f:c9:4b:3b:fb:42:05:3f:de:ab:aa:dd:39:f8:03:c8:
         c7:55:7b:bb:4b:a5:3d:b6:5b:be:2c:19:67:0d:a4:9b:07:b6:
         0d:23:d3:7e:f6:18:cd:51:7a:e4:98:c3:a4:96:63:13:44:72:
         f3:7f:76:54:11:e7:71:e2:94:e4:11:be:09:9f:3d:bb:f3:7a:
         7e:09:5a:fe:bb:b5:04:e0:67:0d:cd:6d:3a:46:69:26:a8:46:
         a4:51:0e:c2:f8:aa:48:1b:57:d8:52:6a:53:07:81:e8:82:65:
         73:aa:f9:66:0c:6f:e1:e4:2e:63:d4:88:57:73:b8:71:b3:58:
         4e:45:a1:67:3e:4f:96:64:76:3c:37:46:70:91:8e:85:22:c6:
         35:ac:f5:ce:32:1c:00:b1:5b:c5:6c:53:f2:1c:df:ed:66:7f:
         6a:40:e3:89:8c:5f:d1:4f:76:35:1c:0d:05:95:1d:17:d2:dd:
         f6:7a:b2:15:44:1d:7b:ec:a6:a1:0b:f0:35:a9:04:aa:74:c9:
         db:26:b2:cf:e7:d3:2f:2c:41:71:70:97:b8:ad:0c:b5:1b:02:
         e6:90:62:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:33:19 2026 by rpki-client